Privacy Policy

Who we are

StarDrop ("we", "us") provides a service that helps local sole-trader businesses send SMS review requests to their customers. This policy explains what data we collect, why, and how it's handled.

What we collect

We collect two categories of data:

• Your account and business data — your email address, business name, business type, logo, review platform links, and SMS message template.
• Customer data you enter — when you send a review request, you provide us with your customer's name and mobile number so we can text them on your behalf. We only store this to send the message and track whether the link was clicked.

How we use it

• To send SMS review requests via our SMS provider, Twilio
• To operate your account, dashboard, and billing
• To process subscription payments via Stripe
• To send account and support emails via Resend
• To improve the product and fix problems

Who we share it with

We use a small number of trusted service providers to run StarDrop, each of which processes data only for the purpose of providing their service to us:

• Supabase — hosts our database and handles authentication
• Twilio — delivers the SMS messages you send
• Stripe — processes subscription payments
• Resend — delivers transactional emails
• Vercel — hosts the website and application

We do not sell your data, or your customers' data, to anyone.

Your customers' data

If you use StarDrop to send review requests, you are responsible for having a legitimate business relationship with the customer whose details you enter, and for complying with applicable rules on contacting them by SMS. We process that data solely to deliver the message and track link clicks on your behalf.

How long we keep it

We keep account and business data for as long as your account is active. If you cancel your subscription, we retain your data for a reasonable period in case you resubscribe, after which it may be deleted. You can request deletion at any time — see "Your rights" below.

Cookies

We use a single essential cookie to keep you signed in. We don't use tracking or advertising cookies.

Your rights

Under UK GDPR, you have the right to access, correct, or delete your personal data, and to ask us to export it. To exercise any of these rights, or if one of your customers asks you to remove their data from our systems, contact us via the support page.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll let you know by email or via the dashboard.

Contact

Questions about this policy? Reach us via the support page.