DropCheckDropCheck

Privacy Notice

Last updated: September 5, 2026

This Privacy Notice explains how DropCheck ("we," "us"), operated by Brandon Brown, collects, uses, shares, and protects personal data when you use our web application at dropcheckapp.com (the "Service"). For personal data processed to provide the Service to you, Brandon Brown acts as the data controller.

1. Data we collect

  • Account data: name, email address, hashed password (or federated sign-in identifier), and account preferences.
  • Project data: customer name and phone number you enter, job-site addresses, room dimensions, opening schedules, trim profiles, and uploaded plan PDFs.
  • Support and communications: messages you send us, feedback, and bug reports.
  • Usage and device data: log data such as IP address, browser type, pages visited, and timestamps, used for security, debugging, and product improvement.
  • Cookies: essential cookies for authentication and session management. We do not use third-party advertising cookies.

Payment card details are collected and processed by Paddle, not by DropCheck. We receive only a subscription status and a payment-provider customer identifier.

2. How we use data

  • To provide the Service (create your account, save projects, generate takeoffs and reports).
  • To secure the Service (authenticate you, prevent fraud and abuse).
  • To provide customer support and respond to requests.
  • To improve the Service (diagnose bugs, understand which features are used).
  • To send transactional messages such as account and billing notifications. We do not send marketing email without your consent.
  • To comply with legal obligations.

3. Legal bases

Where applicable law (such as the UK/EU GDPR) requires a legal basis, we rely on: performance of our contract with you (to provide the Service), our legitimate interests (to secure and improve the Service), your consent (where required, e.g. non-essential cookies), and compliance with legal obligations.

4. Sharing your data

We share personal data only with the following categories of recipients:

  • Service providers / subprocessors that host and support the Service (cloud database, file storage, email delivery, error tracking).
  • Paddle, our Merchant of Record, for subscription management, payments, sales tax, invoicing, and refund handling.
  • Professional advisers (legal, accounting) when reasonably necessary.
  • Authorities where required by law, legal process, or to protect the rights, safety, or property of DropCheck or others.

We do not sell personal data.

5. Data retention

We keep account and project data for as long as your account is active. When you delete your account, we delete or anonymize associated personal data within a reasonable period, except where we are required to retain records (for example, tax and billing records held by Paddle) or need to retain limited data to resolve disputes or enforce our agreements.

6. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and hosting on established cloud infrastructure. No system is perfectly secure, and we cannot guarantee absolute security.

7. International transfers

DropCheck is operated from the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States and in other countries where our service providers operate. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may also withdraw consent where processing is based on consent. To exercise these rights, contact us at the support email listed inside the app. We aim to respond within one month. If you are in the UK or EEA, you also have the right to lodge a complaint with your local supervisory authority.

9. Children

The Service is intended for use by professionals and is not directed to children under 16. We do not knowingly collect personal data from children.

10. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top reflects the most recent revision.

11. Contact

For privacy questions or requests, contact us at the support email listed inside the app.