Privacy Policy

This Privacy Policy describes how Drip Code (“Drip Code,” “we,” “us,” or “our”) collects, uses, and protects your information when you use our AI-powered content automation platform available at dripcode.xyz and app.dripcode.xyz (collectively, the “Service”).

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

We collect the following categories of information:

• Account information. Your email address and a password (stored only as a secure cryptographic hash — we never see your plaintext password).
• Usage data. Information about how you interact with the Service, such as assets generated, posts scheduled, feature usage, and log/diagnostic data.
• Billing information. Subscription tier and billing status. Payments are processed by Stripe — we do not store or have access to your full card numbers.
• Content generated. The characters, prompts, media, and captions created or processed through your account.
• Social media tokens. Access tokens you authorize for the platforms you connect (Instagram, TikTok, YouTube, X), stored solely to post content on your behalf.

We use the information we collect to:

• Provide, operate, and maintain the Service;
• Send transactional emails (welcome, trial reminders, billing, and account notices);
• Process payments and manage your subscription via Stripe;
• Generate content and post it to the platforms you have connected; and
• Improve, troubleshoot, and develop new features for the product.

We do not sell your personal information.

Your data is stored in a Supabase (PostgreSQL) database and on Google Cloud Platform infrastructure. Data is encrypted at rest, and all data transmitted between your browser and the Service is protected in transit using SSL/TLS.

We take reasonable administrative, technical, and physical measures to protect your information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We rely on the following third-party service providers, each with its own privacy policy:

• Stripe — payment processing;
• SendGrid — transactional email delivery;
• Google Cloud Platform — hosting and infrastructure;
• Supabase — database and authentication; and
• Social media APIs (Instagram, TikTok, YouTube, X) — to publish content on your behalf.

We share only the information necessary for these providers to perform their functions.

We retain your information for as long as your account is active. If you close your account or request deletion, we will delete your personal data within 30 days, except where we are required to retain certain records to comply with legal, tax, or accounting obligations.

You have the right to access, correct, or delete the personal information we hold about you, and to request a copy of your data. To exercise any of these rights, contact us at hello@dripcode.xyz and we will respond within a reasonable timeframe.

We use session cookies strictly for authentication — to keep you signed in and secure your session. We do not use advertising or third-party tracking cookies.

The Service is not intended for, and may not be used by, individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email and update the “Last updated” date above. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or your data, contact us at hello@dripcode.xyz. Drip Code is based in Charlotte, North Carolina.