Privacy Notice

1. Who is responsible for your data?

Rasmus Sandström, trading as Klareda Studios in Sweden, operates Drop Assist and is the controller responsible for the personal data described in this notice. Business address: Istidsgatan 42, 906 57 Umeå, Sweden. Swedish organization number: 030522-3034. VAT identification number: SE030522303401. You can contact Drop Assist at klaredastudios@gmail.com or by telephone at +46 70 526 39 11.

2. Data we collect

• Account data: your email address, encrypted account credentials handled by our authentication provider, account status, timezone, and your acceptance of legal terms.
• Release and plan data: artist name, release title and type, release date, selected promotion channels, weekly capacity, optional approximate budget, generated and custom tasks, task status, notes, and artwork you upload.
• Beta preview data: answers in the public plan preview are stored locally in your browser for up to 24 hours unless you create an account and choose to save the plan.
• Support data: messages you send us and information needed to answer or resolve your request.
• Technical and security data: IP address, browser and device information, timestamps, request and error information, and security events generated when you use the service.
• Billing data: when you start or manage Pro, Stripe processes payment details. Drop Assist receives customer and subscription references, subscription status, payment outcome, tax and billing location information, and your Checkout acceptance, but not your full card number.
• Optional product analytics: if you consent, a random browser identifier, your internal account ID after sign-in, visited route, funnel event names, broad device information, and event timestamps. We do not send form answers, artist names, release titles, approximate budgets, email addresses, or session recordings.

3. Why we use data and our legal bases

You may withdraw marketing consent at any time. Withdrawal does not affect processing that occurred before it. Service and security messages are not marketing and may be necessary to operate your account.

4. Who receives data?

We use service providers acting on our instructions where needed to run Drop Assist:

• Supabase for authentication, database, and file storage;
• Vercel for application hosting and technical delivery; and
• Stripe for subscriptions, tax calculation, and payment processing; and
• Resend for transactional purchase confirmations and legally required billing messages.
• PostHog for optional, consent-based product analytics when analytics is enabled.

We may also disclose limited data to professional advisers, authorities, or another party where required by law or necessary to establish, exercise, or defend legal claims. We do not sell personal data.

5. International transfers

Some providers may process data outside Sweden or the European Economic Area. Where required, transfers are protected by an adequacy decision, approved standard contractual clauses, or another lawful safeguard. You can contact us for more information about safeguards relevant to your data.

6. How long we keep data

• Unsaved beta preview data stays in your browser for up to 24 hours.
• Account, release, and plan data is normally kept while your account is active.
• After a valid deletion request, account content is removed from active systems within 30 days unless it must be retained for a legal reason. Residual encrypted backups are deleted or overwritten on the provider's normal backup cycle.
• Technical logs are generally kept for no more than 30 days, or for a shorter period where a provider's default is shorter, unless an incident requires longer retention.
• Consent-based product analytics is kept only as long as needed to evaluate product usage. You may withdraw consent in Settings and contact us to request deletion of analytics linked to your account ID.
• Support correspondence is normally kept for up to 24 months.
• Invoices and accounting records are kept for seven years where Swedish accounting law requires it.

We may keep limited records longer when necessary to comply with law, resolve a dispute, prevent fraud, or establish legal claims. We delete or anonymize data when it is no longer needed.

7. Cookies and browser storage

Drop Assist uses necessary storage for authentication and the temporary plan preview. When product analytics is configured, PostHog loads in an opted-out state and sends nothing until you choose “Allow analytics.” Your choice is stored in this browser. You may decline without losing product functionality and change the choice at any time under Settings. We disable automatic click collection, session recordings, and automatic page views; only the documented funnel events are sent. We do not use advertising cookies.

8. Security

We use reasonable technical and organizational safeguards designed to protect personal data, including access controls, encrypted connections, private user storage, and restricted production access. No online service can promise absolute security. Please use a unique password and contact us if you suspect unauthorized access.

9. Your rights

Depending on the circumstances, you may have the right to access, correct, delete, restrict, or receive a portable copy of your personal data, and to object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it. Some rights have legal exceptions.

Contact us to exercise a right. We may need to verify your identity. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY) at imy.se, or with the competent data protection authority where you live.

10. Children

Drop Assist is intended for people aged 18 or older. We do not knowingly create accounts for children. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.

11. Plan generation and automated decisions

Drop Assist uses deterministic rules to propose tasks, dates, warnings, and optional budget allocations from the information you provide. You can review and change your plan. This process does not make decisions that have legal or similarly significant effects on you.

12. Changes and contact

We may update this notice as Drop Assist, our providers, or legal requirements change. We will update the effective date and give appropriate notice of material changes. Questions about this notice can be sent to klaredastudios@gmail.com. The rules for using the service are in our Terms of Service.