1. Data controller
DropForge Studio is a digital service run from Italy by the DropForge Studio team. Privacy requests can be sent to support@dropforgestudio.com.
2. Data we process
- Account data: name, email, protected password, verification status, language and newsletter preferences.
- Technical and security data: IP address, login logs, security events, sessions and essential device and browser information.
- Usage data: features used, usage counters, and products or content created or uploaded in the platform.
- Payment data: customer and subscription identifiers and payment status. Full card details are handled by Stripe and are not stored by DropForge Studio.
- Connected-service data: if you connect Etsy or other services, we process the identifiers and tokens needed to provide the features you asked for.
- Communications: support messages and email preferences.
3. Purposes and legal bases
- Providing the service and managing your account and subscription: performance of a contract.
- Security, abuse prevention, diagnostics and defence against claims: legitimate interests and, where applicable, legal obligations.
- Billing, accounting and tax compliance: legal obligation.
- Promotional email and newsletters: consent, which you may withdraw at any time.
- Transactional and security messages: necessary to provide and protect the service.
4. Service providers and recipients
To provide DropForge Studio we may use specialised providers, including:
- Stripe for payments, subscriptions, fraud prevention and applicable tax services.
- Render for hosting and infrastructure.
- OpenAI for certain AI generation features when you request them.
- Resend for transactional email and, with your consent, email communications.
- Etsy when you choose to connect your shop.
- Pinterest when you choose to connect your account to publish pins.
Providers process data under their own applicable terms and agreements. Some processing may involve transfers outside the European Economic Area: where required, lawful transfer mechanisms are used.
We do not sell your personal data.
5. Retention
We keep account data for as long as needed to provide the service and for a reasonable period after closure, unless a longer period is legally required. Security, billing and transaction records may be retained as required by law or to protect legal rights.
6. Your rights
Where the GDPR or equivalent laws apply, you may request access, correction, deletion, restriction, objection and portability, and you may withdraw consent where processing relies on it. You may also lodge a complaint with the competent supervisory authority.
To exercise your rights, write to support@dropforgestudio.com. We may ask for reasonable information to verify your identity.
8. Children
DropForge Studio is intended for adults and is not designed to knowingly collect personal data from minors.
9. Changes
We may update this policy to reflect changes to the service, to providers or to applicable law. The update date is shown above.