Privacy Policy

This Privacy Policy explains how Drofree handles personal information when you use drofree.com, create an account, work with projects, participate in review sessions, contact support, or choose to receive Drofree news. Drofree is operated from the United Arab Emirates.

1. Information we collect

Account information includes your email address, display name, authentication identifiers, account creation time and information supplied by an authentication provider such as Google when you choose that sign-in method. Project information includes files, images, PDFs, drawings, revisions, discussion pins, comments, references, decisions, session records, permissions and other material you intentionally place in a Drofree project. Support information includes the name, email address, category and message you submit to Contact & Support or Feedback.

Drofree also processes technical information required to operate and protect the service, including browser and device characteristics, timestamps, session identifiers, security and error records, and coarse regional usage information. Regional analytics are designed to record coarse country/region/city-level activity without retaining the raw IP address in Drofree's regional analytics records.

2. Why we use information

We use information to authenticate users; save and reopen projects; provide collaboration sessions and permissions; synchronize review activity; generate exports and project reports; provide support; enforce storage and project limits; detect abuse and security problems; diagnose failures; measure product reliability and usage; and communicate important service information.

3. Project content and collaboration

Your project content remains yours. Drofree processes it only as needed to provide the functions you request. People you invite to a review may see project content according to the permissions and session access you provide. Hosts are responsible for sharing invitation links and codes with appropriate participants.

4. Guest use

Guest Mode is intended for temporary local review and export. Guest work is not promised as durable cloud storage. Browser storage may be used to keep the current guest experience working. Guests should export anything they need to retain.

5. Service notices

Drofree may send registered users non-promotional email that is reasonably necessary to operate the service or protect an account, including maintenance windows, material availability changes, security notices, account or access information and important service changes. These operational messages are separate from optional marketing subscriptions.

6. Optional Drofree news and marketing

Drofree sends product news, feature announcements, newsletters, offers or other promotional email only to users recorded as having opted in. Marketing consent is optional and is not required to create or use an account. Each marketing email includes an unsubscribe mechanism. When you unsubscribe, Drofree records that choice and excludes the account from future marketing campaigns unless you later opt in again.

Drofree does not sell account email addresses or contact lists to advertisers. The Owner Console does not need to export a marketing list in order to send a campaign; eligible recipients are resolved by the protected server-side communication service.

7. Regional analytics

Drofree uses coarse regional analytics to understand where the service is being used and whether accounts, projects and sessions are active. This may include country, region, city, approximate latitude/longitude for the region, event type, page, visitor identifier and timestamps. The regional analytics implementation is designed not to store raw IP addresses. Regional information is used for Drofree's own operational and product analytics, not to build advertising profiles.

8. Dorbee

In V1, Dorbee uses available project context to assist with project-oriented navigation and summaries. Dorbee chat is treated as temporary session interaction rather than a duplicate permanent project history. Durable project records, such as discussions, decisions and session facts, may remain with the project according to the product's storage model. If AI processing is introduced or materially changed, Drofree will update this policy and the product disclosure before using project content for that processing.

9. Service providers

Drofree relies on service providers to operate parts of the service. Supabase is used for authentication, database, storage and server-side functions. An email delivery provider may process recipient email addresses and message content solely to deliver Drofree communications. OAuth providers such as Google process authentication when you choose their sign-in service. Each provider processes information under its own applicable terms and data-protection commitments.

10. Retention

Account and project information is retained while needed to provide the service and for legitimate security, support, legal and dispute-resolution purposes. Project deletion is intended to remove project-scoped cloud records and files subject to technical processing and any retention required by law. Temporary session/Dorbee chat state is not intended to become duplicate permanent project storage. Communication campaign records retain the subject, type, timing and delivery result needed to operate the communication system and demonstrate consent-aware sending. Marketing opt-out records are retained so Drofree can respect the user's choice.

11. Security

Drofree uses access controls, authenticated cloud operations, project-scoped authorization and server-side privileged functions to protect data. Administrative secrets and email-provider credentials are not intended to be exposed in browser code. No online service can guarantee absolute security, so users should also protect credentials, invitation links and sensitive project material.

12. International processing

Cloud and email infrastructure may process information in countries other than the country where you are located. Drofree will use providers and safeguards appropriate to the service and applicable legal requirements.

13. Your choices and rights

Depending on applicable law, you may request access to, correction of, deletion of, restriction of or other action concerning your personal information. You may withdraw optional marketing consent at any time using the unsubscribe link in a marketing email. Privacy and data requests can be submitted through Contact & Support. Some information may be retained where necessary to comply with law, protect the service, resolve disputes or preserve a valid opt-out record.

14. Cookies and local storage

Drofree uses browser storage and similar technologies where needed for authentication state, preferences, guest recovery and product functionality. See the Cookie Policy for additional information.

15. Children

Drofree is not directed to young children. Users must have the legal capacity required to use the service or any consent required by applicable law.

16. Changes to this policy

We may update this Privacy Policy when Drofree's product, providers or legal obligations change. Material changes will be identified by the effective date and, when appropriate, communicated through a service notice. A policy update does not convert a user who has not opted in into a marketing subscriber.

17. Contact

Questions about privacy, consent or personal information can be submitted through Drofree's Contact & Support page.