Privacy Policy - FairDrop

FairDrop ("FairDrop," "we," "us," or "our") provides a Shopify application that helps merchants protect limited drops and VIP access from bots and resellers. This Privacy Policy explains what information we collect, how we use it, and the choices available to merchants who install FairDrop and the customers who shop on their stores.

By installing or using FairDrop, you agree to the collection and use of information as described in this policy.

Information we collect

From merchants. When you install FairDrop, we receive store information from Shopify needed to operate the app, including your store domain, store owner name and email, plan level, and app configuration (policies, rules, and enforcement settings you create).

From shoppers. FairDrop's enforcement features rely on Shopify's Protected Customer Data access. Where a merchant has enabled passkey verification, we store passkey credentials and short-lived verification proofs tied to a customer's Shopify account so we can confirm a real, signed-in buyer completed checkout. We do not collect or store payment details, order history, or shipping information — that data remains within Shopify.

From website visitors. If you submit the contact form on this site, we collect the name, email address, store URL, and other details you provide so we can respond to your request. We also use standard web analytics to understand aggregate site traffic.

How we use information

To operate checkout-time enforcement of the rules a merchant configures.
To verify buyer identity via passkeys where a merchant has enabled that feature.
To provide customer support and respond to inquiries submitted through this site.
To maintain, secure, and improve the FairDrop application.
To comply with legal obligations and Shopify's App Store requirements.

How we share information

We do not sell personal information. We share data only with service providers who help us operate FairDrop, under obligations to protect it:

Shopify — as the platform FairDrop is built on, for app functionality and Protected Customer Data access.
Resend — to deliver emails generated by the contact form on this site.
Vercel — for site hosting and privacy-focused analytics.

We may also disclose information if required by law or to protect the rights, property, or safety of FairDrop, our merchants, or others.

Data retention

We retain merchant configuration data for as long as FairDrop is installed on a store. Passkey credentials and verification proofs are retained only as long as needed to enforce checkout rules; verification proofs expire automatically after a short window (currently around 10 minutes). If a merchant uninstalls FairDrop, we delete associated store and configuration data within a reasonable period, consistent with Shopify's data protection requirements.

Your rights

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal information. Shoppers should contact the merchant whose store they purchased from, as the merchant is the data controller for their own customers. Merchants and website visitors can contact us directly using the details below.

Security

We use industry-standard technical and organizational measures to protect the information we handle, including encryption in transit and access controls limiting who can view stored data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children's privacy

FairDrop is intended for use by businesses and their adult customers. We do not knowingly collect personal information from children.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date at the top of this page.

Contact us

Questions about this policy or how FairDrop handles data can be sent to hello@getfairdrop.com.