Privacy Policy
1. Introduction
Dropsy ("Dropsy," "we," "us," or "our") operates an SMS-based package return facilitation service for residents of participating apartment communities. This Privacy Policy explains what personal information we collect, how we use it, how we protect it, and your rights with respect to it.
By using the Dropsy service, you agree to the collection and use of your information as described in this Privacy Policy.
2. Information We Collect
2.1 Information You Provide
When you register for and use the Service, we collect:
- Name — provided during SMS onboarding
- Phone number — the number from which you text the Dropsy service
- Unit number — provided during SMS onboarding
- Return QR codes — images or text codes you submit when initiating a return
2.2 Information Collected Automatically
When you interact with the Service, we automatically collect:
- Message content and timestamps — the content of SMS messages you send to Dropsy and the time they were sent
- Return history — bag numbers assigned to you, return statuses, and pickup records
- Building association — the apartment community associated with your phone number
2.3 Information We Do Not Collect
We do not collect:
- Payment or financial information (Dropsy does not process tenant payments directly)
- Government-issued ID or Social Security numbers
- Precise GPS or location data
- Browsing history or app usage data
- Any information from third-party social media platforms
3. How We Use Your Information
We use the information we collect solely to operate and improve the Service:
| Purpose | Information Used |
|---|---|
| Register you as a tenant | Name, phone number, unit number |
| Process your return requests | Phone number, QR code, building association |
| Assign and track bag numbers | Phone number, return history |
| Send SMS notifications | Phone number |
| Respond to claims or disputes | Name, phone number, return history, QR codes |
| Detect and prevent fraud | Phone number, return history, message content |
| Improve the Service | Aggregated, de-identified usage data |
We do not use your information for advertising, marketing profiling, or sale to third parties.
4. How We Share Your Information
4.1 Service Providers
We may share limited information with third-party vendors who help us operate the Service:
- Twilio Inc. — our SMS platform provider processes your phone number and message content to deliver SMS communications.
- Cloud infrastructure providers — for hosting and database services. These providers process data only on our behalf and under confidentiality obligations.
4.2 Property Management
We may share aggregated, non-personally-identifiable usage data (e.g., total returns per week) with the property management company of your building for operational reporting. We do not share your name, phone number, or individual return details with property management without your consent, except as required to resolve a dispute or complaint involving your unit.
4.3 Legal Requirements
We may disclose your information if required to do so by law, subpoena, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Dropsy, our users, or the public.
4.4 Fraud and Misuse
If we determine or reasonably suspect that a user has committed fraud or violated our Terms and Conditions, we may share relevant information with the property management company, law enforcement, or other affected parties as appropriate.
4.5 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of Dropsy's assets, your information may be transferred to the acquiring entity. We will provide notice before your information is transferred and becomes subject to a different privacy policy.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Tenant profile (name, phone, unit) | Duration of active tenancy + 12 months |
| Return records and bag assignments | 24 months from return date |
| QR code images | 90 days from return pickup date, then deleted |
| SMS message logs | 90 days |
| Claim records | 36 months from claim date |
When data is no longer needed, we delete or anonymize it. You may request earlier deletion as described in Section 7.
6. Data Security
We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encrypted database storage
- Access controls limiting who within Dropsy can view personal information
- Secure HTTPS transmission for all data in transit
- API key authentication for all administrative access
No method of transmission or storage is 100% secure. In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify affected users as required by applicable law.
7. Your Rights and Choices
7.1 Access and Correction
You may request a copy of the personal information we hold about you, or ask us to correct inaccurate information, by texting MYDATA to the Dropsy service number or emailing privacy@dropsyreturns.com.
7.2 Deletion
You may request deletion of your personal information by texting DELETE to the Dropsy service number or emailing privacy@dropsyreturns.com. We will delete your data within 30 days, subject to any legal obligations to retain certain records.
Note: Deleting your data will deactivate your Dropsy account. You will need to re-register to use the Service again.
7.3 Opt Out of SMS
You may opt out of SMS communications at any time by texting STOP to the Dropsy service number. Note that opting out of SMS will prevent you from using the Service, as SMS is the primary interface.
7.4 Do Not Sell
We do not sell your personal information and therefore no opt-out for sale is required. If this practice changes, we will update this policy and provide an opt-out mechanism.
8. Children's Privacy
The Dropsy service is intended for use by adults (18+) who are residents of participating apartment communities. We do not knowingly collect personal information from anyone under the age of 13. If we become aware that we have collected information from a child under 13, we will delete it promptly.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify active users via SMS and update the "Last Updated" date at the top of this document. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
10. Contact Us
For privacy-related questions, requests, or concerns:
- Email: privacy@dropsyreturns.com
- SMS: Text HELP or MYDATA to the Dropsy service number
- Mail: Dropsy, Austin, TX