Privacy Policy

This Privacy Policy explains how Driplo collects, uses, stores, shares, and protects personal data when operating its websites, pages, products, and services. Driplo provides a platform focused on creating, publishing, and operating quiz funnels, lead capture flows, subscription billing, and customer support workflows.

By using Driplo, you agree to this Privacy Policy and to the data processing required to provide the services, secure the platform, and comply with legal and regulatory obligations.

1. What information we may process

In Driplo's operations, collecting information is essential to provide the platform, personalize the experience, process billing, respond to support requests, and continuously improve the services.

Depending on the context, we may process:

registration and contact data, such as name, email address, company, role, and information provided when opening or managing an account;
account and workspace data, such as settings, members, permissions, basic usage history, and product preferences;
data related to quiz funnels, forms, pages, leads, responses, conversion events, and other information entered by the user in the platform;
billing and subscription data, such as plan details, payment status, transaction history, charge attempts, and information needed for fraud prevention and financial reconciliation;
usage data, analytics, cookies, and technical identifiers, such as IP address, browser, device, sessions, visited pages, access times, and navigation events;
support communications, feedback, questions, attachments, and other information shared with our team;
data obtained through integrations and third-party providers when the user chooses to connect external tools to a Driplo account.

2. Why and how we collect and process personal data

We collect and process personal data to carry out activities that are essential to Driplo's operation and to maintain a secure and reliable experience across the platform.

In practice, we use this information to:

register, authenticate, and manage user accounts;
host, configure, and operate quiz funnels, pages, forms, and lead capture flows;
process monthly or annual subscriptions, enable recurring billing, confirm payments, prevent fraud, and provide billing support;
display product metrics, reports, and usage signals;
respond to tickets, support requests, commercial inquiries, and operational communications;
send relevant notices about accounts, product updates, contractual changes, security matters, and maintenance events;
protect the platform, investigate abuse, mitigate unauthorized access, and preserve system integrity;
comply with legal, regulatory, and contractual obligations, as well as valid requests from competent authorities;
develop improvements, new features, and usability adjustments, always subject to the applicable legal basis.

Where required, processing may rely on contract performance, legal or regulatory obligations, the regular exercise of rights, legitimate interests, or consent, depending on the situation.

Driplo limits the sharing of personal data to what is necessary for service operation, legal compliance, and the protection of the platform and its users.

Data may be shared, when applicable, with:

infrastructure, hosting, storage, analytics, support, security, and communication providers;
payment processors, gateways, and partners involved in subscription billing and fraud prevention;
integration tools and services chosen by the user;
consultants, auditors, and advisors who need access to information in connection with operational, financial, legal, or compliance support;
administrative, regulatory, or judicial authorities when required by law, valid order, or the need to defend rights.

Driplo does not sell personal data. Whenever international data transfers are involved, we will take reasonable measures to preserve the security and protection of that information in accordance with applicable law.

4. Security, storage, and retention

Data security is a priority at Driplo. We adopt reasonable technical, administrative, and organizational measures to reduce the risk of unauthorized access, misuse, alteration, leakage, or improper destruction of information.

These measures may include access controls, environment segregation, event monitoring, operational reviews, software updates, network protections, and internal incident response procedures.

We retain data for as long as needed to fulfill the purposes described in this Policy, perform the contract, preserve essential service records, and satisfy legal, regulatory, tax, accounting, or rights-defense obligations. Where appropriate, we may delete, anonymize, or restrict certain data after account termination, subject to statutory retention periods or legitimate defense needs.

5. Data subject rights

We respect the rights provided by applicable data protection laws, including the LGPD and, where relevant, the GDPR. Depending on the case and legal limits, you may request:

confirmation that processing exists;
access to personal data;
correction of incomplete, inaccurate, or outdated data;
anonymization, blocking, or deletion of unnecessary data or data processed in violation of the law;
portability, where applicable;
information about data sharing;
withdrawal of consent, when processing depends on that legal basis;
objection to processing, where applicable.

To exercise privacy and data protection rights, contact support@driplo.app. We may request additional information to validate the requester's identity and protect account security.

6. Cookies and similar technologies

Driplo may use cookies and similar technologies to keep sessions active, remember preferences, measure performance, understand product usage, improve navigation, and support communications and campaigns. Some of these resources may rely on third-party providers.

You can manage cookies in your browser and, when available, through preference mechanisms shown in the interface. Some essential cookies may be required for the proper operation of the site and platform.

7. Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in law, services, operational practices, or platform features. When a change is material, we may provide notice by email, in-product messaging, on the site, or through other appropriate channels.

Continued use of Driplo after the revised version becomes effective represents awareness of the updated Policy, without prejudice to any rights granted by applicable law.

8. Contact

If you have questions, concerns, or requests related to this Privacy Policy or Driplo's processing of personal data, contact support@driplo.app.

By using Driplo, you acknowledge this Privacy Policy as an integral part of the contractual relationship applicable to the use of our services.