Privacy Policy

Last updated: June 4, 2026

This Privacy Policy explains what information DropWidget ("we") collects, how we use it, and your choices. By using DropWidget you agree to this policy.

Information We Collect

Account information — the email address and password (stored only as a secure hash) you provide at sign-up.
Billing information — handled by Stripe. We do not store your full card details; we keep a Stripe customer reference and your subscription status.
Site content — the publicly available pages of the website you register, which we crawl to build your assistant's knowledge base.
Conversation & usage data — counts of conversations and turns, and usage metrics we use for billing and limits.
Voice interactions — when a visitor talks to the widget, audio is streamed in real time to our AI provider to produce a response.

How We Use Information

We use this information to operate and improve the Service, build and serve your assistant, process payments, enforce plan limits, communicate with you (e.g., account and trial emails), and maintain security.

Voice Data

Voice conversations are processed in real time to generate spoken responses. We do not sell voice data. Audio is transmitted to our AI provider (OpenAI) for processing; we do not retain audio recordings of conversations, though we do keep aggregate usage metrics.

Service Providers

We share data with providers that help us run the Service, each acting on our behalf: Stripe (payments), OpenAI (AI and voice processing), Firecrawl (web rendering/crawling), Resend (email), and our hosting provider. We do not sell your personal information.

Cookies

We use a single essential, http-only session cookie to keep you logged in to your dashboard. The embedded widget stores non-sensitive display settings in the visitor's browser to render correctly. We do not use third-party advertising cookies.

Data Retention

We retain your account and site data for as long as your account is active. When you delete your account, we delete your sites and associated data; some records may be retained as required for legal, accounting, or fraud-prevention purposes.

Your Rights

You can access and update your account information from your dashboard, and you can delete your account at any time. Depending on where you live, you may have additional rights to access, correct, or delete your personal data. Contact us to exercise them.

Children

DropWidget is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information.

Changes

We may update this policy from time to time. We will reflect changes by updating the date above.

Contact

Questions about privacy? Email hello@dropwidget.com.