SpotDrops Privacy Policy
Effective Date: May 25, 2026
Last Updated: May 25, 2026
1. Introduction
SpotDrops is a shared community-card direct mail service. “SpotDrops” is a brand name used by Seek First Development LLC (“Seek First,” “SpotDrops,” “we,” “us,” or “our”), a Wyoming limited liability company. This Privacy Policy describes the information we collect, how we use and share it, and the choices you have when you use our website at spotdrops.app and related services (the “Service”).
By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service. This policy applies to information we collect through the Service and does not apply to third-party sites or services we link to.
2. Information We Collect
2.1 Information You Provide
We collect information you give us directly, including:
- Contact & account info— name, business name, email address, phone number, and account credentials when you create an account, purchase a Spot, or submit the inquiry form.
- Business profile info— business category, address, website, social-media links, hours, logo, photos, and any other content you choose to include on your Spot.
- Payment info— processed by Stripe on our behalf. We do not store full payment-card numbers on our servers. We receive a payment confirmation, transaction ID, and (where applicable) the last four digits and brand of the card used.
- Communications— messages you send us through the inquiry form, email, or our chat widget.
2.2 Information We Collect Automatically
When you visit the Service, scan a QR code on a SpotDrops card, or interact with a Spot landing page, we automatically collect:
- Usage data— pages viewed, links clicked, time on page, referring URL, and similar activity.
- Device & network data— browser type, operating system, device type, language preference, and approximate location derived from IP address. IP addresses are hashed for engagement analytics to limit the personal identifiability of the data we retain.
- QR-scan events— when a SpotDrops card’s QR code is scanned, we record the Spot scanned, the time of the scan, and the same device and network data described above.
- Cookies & similar technologies— we use a small number of cookies and similar technologies for authentication, session management, analytics, and error monitoring (see Section 8).
2.3 Information From Third Parties
When you provide a business address or link a business profile, we may retrieve publicly available information from third-party providers (such as Google Places) to pre-fill or enrich your profile. We do not buy contact lists from third parties.
3. How We Use Information
We use the information described above to:
- Provide, design, print, and mail your Spot on a SpotDrops community card and operate your Advertiser dashboard;
- Process payments and send transactional emails (receipts, proofs, approval reminders, refund confirmations);
- Measure engagement on your Spot (QR scans, clicks, calls, directions) and report it to you in your dashboard;
- Respond to inquiries and provide customer support;
- Operate, secure, debug, and improve the Service, including fraud prevention and abuse detection;
- Send you occasional non-marketing operational messages (e.g., upcoming Drop schedules, renewal opportunities, or service announcements);
- Send marketing communications you opt in to receive (you can opt out at any time);
- Comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of others.
4. How We Share Information
We do not sell personal information. We share information only as described below.
4.1 Service Providers
We share information with vendors that operate parts of the Service on our behalf, under contracts that require them to protect your information and use it only for the purposes we direct. Our key service providers include:
- Stripe— payment processing.
- Clerk— account authentication and user management.
- Convex— database, file storage, and backend infrastructure.
- Resend— transactional and campaign email delivery.
- Vercel— web hosting and edge-network delivery.
- Sentry— error monitoring and performance debugging.
- DataFastand similar analytics tools — aggregate website analytics.
- Crisp— live chat widget for customer support.
- Google Places— business-profile lookups.
- Print & mail vendors— printing partners and the United States Postal Service for card production and delivery.
4.2 Legal & Safety
We may disclose information when we believe in good faith that disclosure is required by law, regulation, legal process, or governmental request, or is necessary to protect the rights, property, or safety of SpotDrops, our users, or others — including to investigate fraud, security issues, or violations of our Terms.
4.3 Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, or sale of all or part of our business or assets, your information may be transferred as part of that transaction, subject to the protections of this policy.
4.4 With Your Consent
We may share information for any other purpose with your consent.
5. Data Retention
We retain information for as long as needed to provide the Service, comply with legal obligations (such as tax and accounting recordkeeping), resolve disputes, and enforce our agreements. Engagement event data (QR scans, clicks, page visits) is retained in aggregated and de-identified form for as long as it is useful for analytics. We may delete or anonymize information that is no longer needed.
6. Data Security
We use reasonable administrative, technical, and physical safeguards to protect information, including encryption in transit (HTTPS) and at rest with our infrastructure providers, role-based access controls, and routine monitoring. No system is perfectly secure, so we cannot guarantee the security of information transmitted to or stored by us. If you believe your account has been compromised, please contact us immediately at [email protected].
7. Your Rights & Choices
7.1 Access & Correction
You can view and update most of your account and business profile information directly from your Advertiser dashboard. For information you cannot update yourself, contact us at [email protected].
7.2 Deletion
You can request that we delete your account and the information associated with it. We will honor verified requests except where we are required or permitted to retain information by law (for example, to satisfy tax, accounting, or fraud-prevention obligations).
7.3 Marketing Opt-Out
You can opt out of marketing emails by using the unsubscribe link in any marketing message or by visiting spotdrops.app/unsubscribe. Even after opting out of marketing, we may still send transactional messages (such as receipts, proofs, and service notices) because they are needed to deliver the Service.
7.4 State-Specific Rights
Depending on where you live, you may have additional rights under applicable state privacy laws — such as the right to know, access, correct, delete, or opt out of certain processing of your personal information. To exercise these rights, contact us at [email protected]. We do not sell personal information or share it for cross-context behavioral advertising.
8. Cookies & Tracking
We use a small number of cookies and similar technologies for purposes such as:
- Essential— authentication, session management, security, and load balancing. Disabling these will break the Service.
- Functional— remembering your preferences and recent activity.
- Analytics— understanding how visitors use the Service so we can improve it.
- Error monitoring— capturing client-side errors so we can fix bugs.
Most browsers allow you to control cookies through their settings. We do not respond to “Do Not Track” browser signals, as there is no consensus on how to do so.
9. Children
The Service is intended for users 18 years and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will delete it.
10. International Users
The Service is operated from the United States and is intended for users located in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers operate.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top of this page and, where appropriate, notify you through the Service or by email. Your continued use of the Service after changes take effect constitutes your acceptance of the updated policy.
12. Contact Us
Questions about this Privacy Policy or our handling of your information? Contact us at [email protected].
Seek First Development LLC
Wyoming limited liability company · USA