Privacy Policy

1.1 Information You Provide to Us

We collect information that you voluntarily provide when creating an account, using our Services, or communicating with us:

• Account Information: When you register for an account, we may collect your name, email address, phone number, password, and profile picture.
• Profile Information: You may choose to provide additional information such as your bio, preferences, interests, dietary restrictions, and other profile details.
• Booking Information: When you make reservations or bookings through our platform, we collect details such as booking dates, times, party size, and special requests.
• Payment Information: Financial information necessary to process transactions, which is securely handled by our third-party payment processors.
• Communications: Information you provide when you contact us for support, provide feedback, participate in surveys, or engage in promotions.
• User Content: Reviews, ratings, photos, comments, and other content you choose to post on our platform.

1.2 Information We Collect Automatically

When you access or use our Services, we automatically collect certain information about your device and usage patterns:

• Device Information: Information about the device you use to access our Services, including device type, operating system, browser type, and unique device identifiers.
• Usage Information: Details about how you interact with our Services, including pages viewed, features used, search queries, click data, and navigation paths.
• Location Information: Approximate or precise location data based on your IP address or, with your permission, GPS coordinates.
• Log Information: Server logs that include IP addresses, access times, browser types, and referring URLs.
• Cookies and Similar Technologies: We use cookies, web beacons, pixels, and similar technologies to collect information about your browsing activities.

1.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Social Media Platforms: If you choose to link your account with social media services, we may receive profile information from those platforms.
• Business Partners: Restaurants, event organizers, and service providers may share information about your interactions with them.
• Analytics Providers: Third-party analytics services that help us understand how users interact with our Services.
• Public Sources: Publicly available information that we may combine with other data we have about you.

2.1 Providing and Improving Services

• To create and maintain your account and provide you with access to our Services
• To process and facilitate bookings, reservations, and transactions
• To send you service-related communications, including confirmations, updates, and notifications
• To provide customer support and respond to your inquiries
• To personalize and improve your experience on our platform
• To develop new features, products, and services
• To conduct research, analytics, and data analysis to improve our Services

2.2 Marketing and Communications

• To send you promotional materials, special offers, and recommendations based on your preferences
• To communicate about events, contests, surveys, and other opportunities
• To personalize advertising and marketing content shown to you
• To measure and analyze the effectiveness of our marketing campaigns

2.3 Safety and Security

• To verify your identity and prevent fraud, unauthorized access, and other illegal activities
• To protect the safety and security of our users, staff, and platform
• To enforce our Terms of Service and other policies
• To comply with legal requirements and respond to legal processes
• To investigate and resolve disputes and violations

2.4 Business Operations

• To perform internal operations necessary to provide our Services
• To detect, prevent, and address technical issues
• To facilitate business transfers, mergers, or acquisitions
• To maintain business records and comply with tax and accounting obligations

3.1 Service Providers and Business Partners

We work with third-party service providers to help us operate, provide, and improve our Services. These providers include:

• Payment processors and financial institutions
• Cloud hosting and data storage providers
• Analytics and data analysis services
• Customer support and communication tools
• Marketing and advertising partners
• Security and fraud prevention services

3.2 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity or buyer as part of the business transfer.

3.3 Legal Requirements

We may disclose your information when required by law or in response to legal processes, including to:

• Comply with legal obligations, court orders, or government requests
• Protect the rights, property, or safety of DropBy, our users, or others
• Enforce our agreements and policies
• Respond to claims and legal proceedings

3.4 With Your Consent

We may share your information with third parties when we have your explicit consent to do so, such as when you choose to connect your account with third-party applications or participate in co-branded offerings.

4.1 Security Measures

We implement appropriate technical and organizational security measures to protect your information from unauthorized access, loss, misuse, or alteration. These measures include:

• Encryption of data in transit and at rest using industry-standard protocols
• Secure authentication and access controls
• Regular security assessments and vulnerability testing
• Employee training on data protection and privacy practices
• Incident response and breach notification procedures
• Compliance with recognized security standards and frameworks

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee its absolute security.

4.2 Data Retention

We retain your information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. The retention period depends on various factors, including:

• The nature and sensitivity of the information
• The purposes for which we process the information
• Legal, regulatory, tax, or accounting requirements
• Our legitimate business interests

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.

5.1 Access and Portability

You have the right to access the personal information we hold about you and, in certain circumstances, to receive a copy of your information in a portable format that can be transferred to another service provider.

5.2 Correction and Update

You have the right to request correction of inaccurate or incomplete personal information. You can update most of your account information directly through your account settings.

5.3 Deletion and Erasure

You have the right to request deletion of your personal information, subject to certain exceptions such as legal obligations, dispute resolution, and fraud prevention. You can delete your account through your account settings.

5.4 Objection and Restriction

You have the right to object to certain types of processing and request restriction of processing in specific circumstances, such as when you contest the accuracy of your information or the lawfulness of processing.

5.5 Marketing Communications

You can opt out of receiving promotional communications from us by following the unsubscribe instructions in those messages or updating your notification preferences in your account settings. Please note that you may still receive transactional and service-related messages.

5.6 Withdraw Consent

Where we process your information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing before withdrawal.

6.1 What Are Cookies

Cookies are small text files stored on your device when you visit our website. We use cookies and similar technologies (such as web beacons, pixels, and local storage) to recognize you, remember your preferences, understand how you use our Services, and improve your experience.

6.2 Types of Cookies We Use

• Essential Cookies: Necessary for the operation of our Services and cannot be disabled
• Functional Cookies: Enable enhanced functionality and personalization
• Analytics Cookies: Help us understand how visitors interact with our Services
• Advertising Cookies: Used to deliver relevant advertisements and measure campaign effectiveness

6.3 Managing Cookies

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete certain cookies. However, disabling cookies may affect your ability to use certain features of our Services. You can also manage your cookie preferences through our cookie consent tool available on our website.

6.4 Third-Party Tracking

We may allow third-party companies to serve ads and collect certain information when you visit our website. These companies may use cookies, web beacons, and other technologies to collect information about your use of our Services and other websites, including your IP address, device identifiers, and browsing behavior, to provide targeted advertising based on your interests.

California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, disclose, and sell
• The right to request deletion of your personal information
• The right to opt-out of the sale or sharing of your personal information
• The right to correct inaccurate personal information
• The right to limit the use and disclosure of sensitive personal information
• The right to non-discrimination for exercising your privacy rights

We do not sell personal information to third parties for monetary consideration. To exercise your California privacy rights, please contact us using the information provided below.

European Economic Area (GDPR)

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR), including:

• The right to access, rectify, or erase your personal data
• The right to restrict or object to processing
• The right to data portability
• The right to withdraw consent
• The right to lodge a complaint with a supervisory authority

We process your personal data based on legal grounds such as consent, contractual necessity, legitimate interests, or compliance with legal obligations.

Other Jurisdictions

If you are located in other jurisdictions with specific data protection laws (such as Brazil's LGPD, India's DPDP Act, or other regional regulations), you may have additional rights. Please contact us to learn more about your rights and how to exercise them.