Privacy Policy

1. Introduction

Drip ("we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains how we collect, use, store, and protect your information when you use the Drip service ("the Service").

2. Information We Collect

Account Information

When you create an account, we collect your name, email address, and authentication credentials through our identity provider (Clerk). We also store your subscription tier and usage data.

Uploaded Documents

When you use the Service, you upload contract and invoice files (PDF, DOCX, or CSV). These documents are processed to extract billing terms and identify discrepancies. Uploaded files are stored on our secure servers for the duration necessary to complete your scan.

Usage Data

We automatically collect information about how you interact with the Service, including pages visited, features used, scan history, and error logs. This data helps us improve the Service.

Payment Information

Payment processing is handled by Stripe. We do not directly store your credit card number or bank details. Stripe's privacy policy governs the handling of your payment information.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your uploaded documents and generate analysis reports
• Manage your account and subscription
• Enforce usage limits and prevent abuse
• Send you transactional communications (scan completion, account updates)
• Monitor and improve Service performance and reliability
• Comply with legal obligations

4. AI Processing

Your uploaded documents are processed using artificial intelligence (Anthropic's Claude) to extract billing terms and identify potential revenue leakage. Document content is sent to the AI provider for processing. We do not use your documents to train AI models. The AI provider's data processing is governed by their own privacy policy and our data processing agreement with them.

5. Data Retention

Uploaded documents: Stored for the duration of your active subscription or until you delete them, whichever comes first. Documents are permanently deleted within 30 days of account termination.

Scan results: Stored in our database for the duration of your subscription to enable scan history and report access.

Account data: Retained for as long as your account is active. Upon account deletion, personal data is removed within 30 days.

6. Data Sharing

We do not sell your personal information. We share data only with:

• AI processing provider (Anthropic) — document content for analysis
• Authentication provider (Clerk) — account and identity management
• Payment processor (Stripe) — subscription and billing
• Infrastructure provider (Railway, Vercel) — hosting and deployment
• Error monitoring (Sentry) — application error tracking (no document content included)

We may also disclose information when required by law, legal process, or to protect the rights and safety of our users and the Service.

7. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (HTTPS/TLS) for all data transmission
• Secure, isolated file storage for uploaded documents
• Authentication via industry-leading identity provider (Clerk)
• Rate limiting to prevent abuse
• File type and size validation (PDF, DOCX, CSV only; 10 MB limit)

While we take reasonable precautions, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Export your data in a portable format
• Opt out of non-essential communications

To exercise these rights, contact us at privacy@trydrip.ai.

9. Cookies and Tracking

The Service uses essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies, if used, are limited to understanding Service usage patterns and improving performance.

10. Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify active users of material changes via email or in-app notification. The "Last updated" date at the top of this page indicates when this policy was last revised.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at privacy@trydrip.ai.