Skip to content
Newdrop

Privacy Policy

Last updated: July 12, 2026

This Privacy Policy explains how Newdrop(“we,” “us,” or “our”) collects, uses, and shares information when you use our What's New / changelog Service at getnewdrop.com. By using the Service, you agree to this policy. Our Terms of Service also apply.

Information we collect

  • Account information: email address; name or profile fields if you use Google or Microsoft sign-in; passkey credentials when you enroll them; and team invite emails you add.
  • Changelog content: project names, update titles and bodies, appearance settings, visibility options, custom domain DNS tokens, webhook URLs you configure, and related dashboard settings.
  • Widget visitors:a random anonymous visitor ID stored in the visitor's browser (localStorage) to track unread updates. We do not require widget visitors to create an account.
  • Email subscribers: email addresses people submit through the embeddable widget on your site, after double opt-in confirmation.
  • Payment information: billing is handled by Stripe. We receive your Stripe customer ID and subscription status, not your full card number.
  • Support and draft help: when you use member support chat or AI draft assistance, we process the messages, screenshots, and account context you provide to generate a reply or draft. We may store short support profile notes on your account. Your browser may also keep a local copy of the support chat until you clear it.
  • Technical data: standard server logs (such as IP address, browser type, and request timestamps) for security, abuse prevention, and reliability.

How we use information

We use information to:

  • Provide, operate, and improve the Service
  • Authenticate you and manage your account and team access
  • Send transactional emails (sign-in codes, subscription confirmations, publish notifications, support handoffs)
  • Process payments, refunds within our stated window, and subscriptions
  • Power optional AI replies and drafts you request
  • Prevent abuse, fraud, and security incidents
  • Respond to support, privacy, and security requests

We do not sell your personal information or your end users' personal information. We do not use subscriber emails for our own marketing.

Your responsibilities

If you use Newdrop to collect email subscribers, you are responsible for having a lawful basis to contact them and for your own privacy notices on your website. Only send product updates subscribers reasonably expect. Do not use the Service to send spam. If you paste screenshots into support chat, avoid including unnecessary personal data about third parties.

Third-party service providers

We use trusted providers to run the Service. They process data on our behalf under their own terms and privacy policies:

  • Supabase — database and authentication
  • Stripe — payments and subscription billing
  • Resend — transactional email delivery
  • Vercel — application hosting
  • AI providers — generating support replies and draft assistance when those features are enabled (content you submit may be sent to the provider to produce a response)

Data retention

We retain account and changelog data while your account is active. If you cancel, we may retain certain records as required for billing, security, or legal compliance, then delete or anonymize them when no longer needed. Widget subscribers remain until you or the subscriber removes them. Support chat history stored in your browser remains until you clear it; server-side support notes may be retained to help future conversations until erased with your account request.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or export personal information we hold about you, or to object to certain processing. Email subscribers can unsubscribe via the link in notification emails. To make a request about your account, contact us at privacy@getnewdrop.com.

Security

We use industry-standard measures such as encryption in transit, access controls, and row-level database security. No method of transmission or storage is completely secure. To report a vulnerability, see Security or email security@getnewdrop.com.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

International users

We are based in the United States. If you access the Service from elsewhere, your information may be processed in the United States or other countries where our providers operate.

Billing and refunds (privacy note)

Payment card data is processed by Stripe. Refunds on first payment are described in our Terms (currently a 30-day goodwill window). Contact support@getnewdrop.com for billing help.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the “Last updated” date. Continued use of the Service after changes means you accept the updated policy.

Contact

Privacy questions? Email privacy@getnewdrop.com.