Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you create an account and use PlanDrip, you provide us with:

• Account information: Your email address and password (passwords are encrypted and never stored in plain text)
• Business information: Business name, industry, business description, target audience, unique selling point, competitors, business model, pricing, and location — all provided during onboarding
• Marketing preferences: Selected social media platforms, audience size, goals, brand tone, content themes, time budget, and marketing history
• Brand assets: Brand colours, logo (if uploaded), font preference, WhatsApp number, email address, and website URL — provided in the Brand Kit section
• Content: Any text you write or edit within the app, such as modified captions or custom content themes
• Social media connections: When you connect social media accounts for one-tap posting, we receive access tokens that allow us to post on your behalf. We do not access your private messages, follower lists, or other account data beyond what is required for posting.

1.2 Information Generated by the Service

When you use PlanDrip, our AI generates content on your behalf:

• Marketing strategy: A personalised 6-month marketing plan
• Daily content: Captions, hashtags, visual direction, and calls-to-action
• Weekly reviews: AI-generated strategy adjustments based on your feedback

This generated content is stored in your account and is treated as your data.

1.3 Information Collected Automatically

When you use PlanDrip, we automatically collect:

• Usage data: Pages visited, features used, buttons clicked, and time spent in the app — used to improve the service and understand how users interact with it
• Device information: Browser type, operating system, screen size, and device type — used to ensure the app works properly across devices
• Log data: IP address, access times, and error logs — used for security, debugging, and preventing abuse

We do not use tracking cookies for advertising. See Section 6 for our full cookie policy.

2. How We Use Your Information

We use your information for the following purposes:

• To provide the service: Generating your marketing plan, daily content, and branded designs based on the business information you share
• To process payments: Sharing necessary billing information with our payment processor (Paddle) to handle subscriptions
• To communicate with you: Sending service-related emails such as welcome messages, subscription confirmations, billing notifications, and important service updates
• To send reminders: Delivering push notifications and reminders about daily posting tasks (if you have enabled notifications)
• To improve the service: Analysing aggregate, anonymised usage data to understand how users interact with PlanDrip and identify areas for improvement
• To provide support: Responding to your questions and resolving technical issues
• To protect the service: Detecting and preventing fraud, abuse, and security threats

We do not use your information to:

• Sell your data to third parties
• Show you advertisements
• Build advertising profiles
• Send marketing emails to your customers or contacts
• Train AI models on your business data (see Section 3 for details)

3. AI Processing and Data Handling

PlanDrip uses artificial intelligence (provided by Anthropic's Claude API) to generate your marketing plans and daily content. Here is how your data is handled in this process:

3.1 What We Send to the AI

When generating your plan or content, we send the following to Anthropic's API:

• Your business information from onboarding (industry, description, audience, goals, etc.)
• Your marketing preferences (platforms, tone, themes, time budget)
• Your current plan context (for ongoing content generation and weekly reviews)

We do not send your email address, password, payment information, or brand assets (logo, colours) to the AI. Brand assets are handled entirely within our own application.

3.2 How Anthropic Handles Your Data

Anthropic, the provider of the AI technology we use, has the following data practices:

• Data sent via the API is not used to train Anthropic's models
• API inputs and outputs are retained by Anthropic for a limited period (typically 30 days) for trust and safety purposes, after which they are deleted
• Anthropic's data handling practices are described in their own privacy policy and API terms at anthropic.com

3.3 Data Minimisation

We only send the minimum information necessary for the AI to generate useful content. We do not send your entire account history or data unrelated to the current generation task.

4. Who We Share Your Information With

We share your information only with the following categories of service providers, and only as necessary to operate PlanDrip:

We do not sell, rent, or trade your personal information to any third party. We do not share your data with advertisers.

If we are required to disclose information by law, regulation, or legal process, we will do so and will notify you where legally permitted.

5. Data Storage and Security

5.1 Where Your Data Is Stored

Your data is stored on servers provided by Supabase. Our database is hosted in a secure data centre with encryption at rest and in transit.

5.2 Security Measures

We take reasonable measures to protect your information, including:

• Encrypted data transmission (HTTPS/TLS) for all connections
• Encrypted password storage using industry-standard hashing
• Row-level security (RLS) on our database, ensuring users can only access their own data
• Secure authentication via Supabase Auth
• Access tokens for social media posting are stored securely and can be revoked by you at any time

While we take security seriously, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

5.3 Data Retention

• Active accounts: Your data is retained for as long as your account is active
• Cancelled subscriptions: Your data is retained and accessible on the Free plan. If you don't want your data retained, you can delete your account.
• Deleted accounts: When you delete your account, we delete your personal data and business information within 30 days. Some data may be retained in encrypted backups for up to 90 days, after which it is permanently deleted.
• Legal obligations: We may retain certain data for longer periods if required by law (such as billing records for tax purposes)

6. Cookies and Tracking

6.1 Essential Cookies

PlanDrip uses essential cookies that are necessary for the service to function:

• Authentication cookies: To keep you logged in between sessions
• Preference cookies: To remember your settings (such as light/dark theme)

These cookies are strictly necessary and cannot be disabled while using the service.

6.2 Analytics

We may use privacy-respecting analytics tools to understand how users interact with PlanDrip in aggregate. If we do:

• We use anonymised, aggregate data only
• We do not track individual user behaviour for advertising purposes
• We do not use third-party advertising trackers, pixels, or retargeting tools

6.3 No Advertising Cookies

PlanDrip does not use advertising cookies, retargeting pixels, or any tracking technology for the purpose of displaying advertisements. We do not participate in ad networks.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

7.1 Access

You can view all information PlanDrip holds about you at any time through your Profile and Settings pages in the app. You can also request a copy of your data by contacting us.

7.2 Correction

You can update your business information, brand assets, and account details directly within the app. If you need help correcting other data, contact us.

7.3 Deletion

You can delete your account and all associated data from within the app (Profile → Delete Account) or by contacting us. Account deletion is processed within 30 days.

7.4 Data Portability

You can request a copy of your data in a commonly used, machine-readable format by contacting us.

7.5 Withdrawal of Consent

If you have connected social media accounts, you can disconnect them at any time within the app, which revokes our posting access. You can also revoke access directly from the social media platform's settings.

7.6 Objection

You can object to specific processing of your data by contacting us. We will consider your objection and respond within 30 days.

8. International Data Transfers

PlanDrip operates from the United Arab Emirates. Our service providers (Supabase, Anthropic, Paddle) may process data in different countries. When your data is transferred internationally, it is protected by:

• Encryption in transit and at rest
• Contractual protections with our service providers
• Compliance with applicable data protection laws

If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, your use of PlanDrip constitutes consent to the transfer of your data to countries where our service providers operate.

9. Children's Privacy

PlanDrip is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the “Last updated” date at the top of this page
• For significant changes that affect how we handle your data, we will notify you via email or an in-app notification at least 14 days before the changes take effect
• Your continued use of the service after changes take effect constitutes acceptance of the updated policy

11. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at: support@plandrip.app

If you are not satisfied with our response, you may have the right to lodge a complaint with a supervisory authority in your jurisdiction.