Privacy policy

1. Scope

This policy applies to the droprq website, DJ onboarding and login flows, fan song-request flows, waitlist forms, and related communications. It covers information you provide directly, data created through your use of the product, and limited technical data used to operate and improve the service.

2. Information we collect

• Waitlist and contact information. If you join the waitlist or otherwise contact us, we collect the email address you submit and records related to that request.
• DJ account and profile information. If you use droprq as a DJ, we may collect your email address, login/session information, handle, profile details, event and session information, and connected account status.
• Fan request information. When a fan sends a request, we may collect the song title, artist name, optional note, tip selection, session association, request status, and related timestamps.
• Payment and payout information. Payments are processed through Stripe. We may receive and store payment-related records such as payment intent IDs, status, amounts, Stripe connected account identifiers, and payout-related metadata. We do not store full payment card numbers.
• Browser storage and device-level identifiers. For fans, we use browser storage such as a generated device ID and request-state data to support request ownership checks, payment confirmation, rate limiting, and restoring in-progress flows.
• Usage and analytics data. We may collect basic usage information such as page views, approximate location, referrer information, browser/device type, and similar traffic data through hosting and analytics tools, including Vercel Analytics.

3. How we use information

• Provide the product, including DJ login, session management, song requests, and payments.
• Process requests, tips, payouts, and related accounting or support workflows.
• Send waitlist updates, access emails, product updates, and other marketing communications.
• Protect the service, prevent abuse, enforce rate limits, and investigate suspicious activity.
• Maintain records, troubleshoot issues, and improve site performance and product decisions.
• Comply with legal obligations and resolve disputes when necessary.

4. Cookies, local storage, and similar technologies

droprq uses a mix of cookies and browser storage to keep the service working. For example, Supabase authentication flows may use cookies to maintain DJ sessions, and the fan experience uses local browser storage for a generated device identifier, request timing, active request state, and similar functionality.

You can usually control cookies and local storage through your browser settings, but disabling them may cause some parts of the product to stop working correctly.

5. Payments and Stripe Connect

We use Stripe and Stripe Connect to process fan payments and support DJ payouts. Payment information is handled by Stripe according to Stripe's own terms and privacy practices. We receive limited payment and account data needed to create payment intents, confirm payment status, record request outcomes, calculate fees, and support connected accounts.

If you are a DJ, you may provide onboarding or payout information directly to Stripe. In those cases, Stripe may collect and process additional information independently from droprq.

6. Analytics and site measurement

We may use Vercel Analytics and similar tools to understand site traffic, page performance, and high-level usage patterns. These tools help us measure interest in droprq, improve the product, and evaluate marketing performance.

We do not use this policy to promise any specific analytics setup forever, but if we use analytics tools we expect them to be focused on product and website measurement rather than building unrelated advertising profiles.

7. When we share information

We do not sell your personal information. We may share information with service providers and partners that help us run droprq, including:

• Supabase for authentication, database storage, and related backend services.
• Stripe and Stripe Connect for payment processing, connected accounts, and payouts.
• Resend for email delivery.
• Vercel for hosting, delivery, and analytics-related services.

We may also disclose information if required by law, to respond to legal process, to protect the rights and safety of droprq or others, or in connection with a merger, financing, acquisition, or sale of assets.

8. Email communications

If you provide your email address, we may use it to send waitlist confirmations, access invitations, product updates, service-related messages, and marketing communications. You can opt out of marketing emails using the unsubscribe link in the message, where available, or by contacting us directly.

9. Data retention

We keep information for as long as reasonably necessary to operate the service, maintain business records, comply with legal or tax obligations, resolve disputes, and enforce our agreements.

• Waitlist records may be kept until they are no longer needed for launch or marketing communications.
• DJ account, session, request, and payment records may be kept for operational, financial, fraud-prevention, and support purposes.
• Browser storage on your device may remain until it expires, is overwritten, or you clear it manually.

10. Security

We use reasonable administrative, technical, and organizational measures designed to protect information, but no method of storage or transmission is completely secure. You should use the service with that in mind and contact us if you believe your information has been used improperly.

11. Your choices

• You can choose not to submit waitlist forms, request details, or optional notes.
• You can opt out of marketing emails.
• You can control cookies and local storage through your browser settings.
• You can contact us to request access, correction, or deletion of information we hold about you, and we will review your request in light of applicable law and our operational needs.

12. Children's privacy

droprq is a general-audience service and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will investigate.

13. Changes to this policy

We may update this Privacy Policy from time to time as droprq evolves. If we make material changes, we may update the date at the top of this page and, where appropriate, provide additional notice.

14. Contact

For privacy questions or requests, email privacy@droprq.com.