Privacy Policy
Effective date: March 25, 2026
Service: Drippery (drippery.app)
Operator: Daniel Rusnok (danielrusnok@gmail.com)
This Privacy Policy explains what personal data Drippery collects, how it is used, and what rights you have. By using Drippery, you agree to the practices described here.
1. Who We Are
Drippery is operated by Daniel Rusnok, a sole trader based in the Czech Republic.
Contact: danielrusnok@gmail.com
Website: drippery.app
For any privacy-related questions or requests, contact us at the email above.
2. What Data We Collect and Why
2.1 Data you provide directly
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Account creation, login, service communication | Contract performance |
| Name (optional) | Personalisation | Contract performance |
| Billing information | Payment processing via Stripe | Contract performance |
| Email content (sequences, subject lines) | Providing the service | Contract performance |
2.2 Data collected automatically
| Data | Purpose | Legal basis |
|---|---|---|
| Usage data (sequences created, emails sent, feature usage) | Service improvement, plan limit enforcement | Legitimate interest |
| Log data (IP address, browser type, timestamps) | Security, abuse prevention | Legitimate interest |
| Cookies (authentication session) | Keeping you logged in | Contract performance |
2.3 Your subscribers' data (data we process on your behalf)
If you use Drippery to send emails, you upload or collect subscriber email addresses. In this context:
- You are the data controller — you decide why and how subscriber data is processed.
- We are the data processor — we process subscriber data only on your instructions (sending the emails you configured).
- You are responsible for obtaining valid consent from your subscribers and for providing them with your own privacy policy.
- We do not use your subscribers' data for any purpose other than sending emails on your behalf.
3. How We Use Your Data
- To provide and operate the Drippery service
- To send transactional emails (account confirmation, billing receipts, password reset)
- To notify you of important changes to the service or these policies
- To enforce our Terms of Service and prevent abuse
- To improve the service based on aggregated, anonymised usage patterns
We do not:
- Sell your personal data to third parties
- Use your data for advertising purposes
- Share your data with third parties except as described in Section 4
4. Third-Party Services
Drippery uses the following third-party services to operate. Each acts as a data processor under our instructions:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Clerk | Authentication and account management | clerk.com/privacy |
| Stripe | Payment processing | stripe.com/privacy |
| Resend | Email delivery infrastructure | resend.com/privacy |
| Render | Cloud hosting (servers and database) | render.com/privacy |
| Inngest | Background job processing (email scheduling) | inngest.com/privacy |
All of the above services are based in the United States. Data transfers from the EU to the US are covered by Standard Contractual Clauses (SCCs) or equivalent mechanisms where applicable.
5. Cookies
Drippery uses only essential cookies necessary for the service to function:
- Session cookie — keeps you logged in during your browser session (set by Clerk)
- Authentication token — persists your login across sessions if you choose "Stay logged in"
We do not use tracking cookies, advertising cookies, or analytics cookies.
You can disable cookies in your browser settings, but this will prevent you from logging in to Drippery.
6. Data Retention
| Data | Retention period |
|---|---|
| Account data | Until you delete your account |
| Subscriber data | Until you delete the sequence or your account |
| Billing records | 10 years (required by Czech accounting law) |
| Log data | 90 days |
| Backups | 30 days after account deletion |
After your account is deleted, your data is permanently removed from our systems within 30 days, except where we are required by law to retain it longer.
7. Your Rights Under GDPR
If you are located in the European Union or European Economic Area, you have the following rights:
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can ask us to delete your personal data ("right to be forgotten")
- Right to restriction — you can ask us to limit how we process your data
- Right to data portability — you can request your data in a machine-readable format
- Right to object — you can object to processing based on legitimate interest
- Right to withdraw consent — where processing is based on consent, you can withdraw it at any time
How to exercise your rights: Send a request to danielrusnok@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with your national data protection authority. In the Czech Republic, this is the Úřad pro ochranu osobních údajů (UOOU) at uoou.cz.
8. Data Security
We take reasonable technical and organisational measures to protect your data:
- All data is transmitted over HTTPS (TLS encryption)
- Database access is restricted to authorised systems only
- Passwords are never stored — authentication is handled by Clerk using industry-standard protocols
- API keys are stored as SHA-256 hashes, never in plain text
- Stripe handles all payment data — we never store card numbers or bank details
No system is 100% secure. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by law.
9. Children's Privacy
Drippery is not intended for use by anyone under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If changes are material, we will notify you by email at least 14 days before they take effect. The "Effective date" at the top of this page will always reflect the most recent version.
Continued use of the service after changes take effect constitutes acceptance of the updated policy.
11. Contact
For any privacy-related questions, requests, or complaints:
Daniel Rusnok
Email: danielrusnok@gmail.com
Website: drippery.app
We aim to respond to all privacy requests within 30 days.