Privacy policy

DropOS is run by the operator of DropOS, in Singapore. We handle personal data under Singapore's Personal Data Protection Act. Contact us at support@getdropos.com.

Your account: email address, password (stored only as a hash by our authentication provider), and, if you sell, your store name and Telegram handle.

Your activity: bids, watchlists, orders, dispute messages and notifications, with timestamps.

Payments: winners pay sellers directly, outside DropOS. We record only whether a seller has marked an order as paid.

Technical data: basic server logs that help us keep the service secure and working.

To run auctions, create orders, send notifications, settle disputes, and prevent fraud and abuse.

We don't sell your personal data. We don't send marketing emails.

Other visitors see your bids under an anonymous label, such as “Bidder 3”, and not your identity.

When an auction ends in a sale, the buyer and seller on that order can see each other's email address, and the buyer can also see the seller's Telegram handle, to arrange payment and delivery. Use it only for that order.

In a dispute, the other side on the order and DropOS administrators can read what you write.

Service providers that handle data for us: Supabase (database and login), Resend (email) and Vercel (hosting). Some of them may process data outside Singapore. Telegram is involved only if a seller chooses to announce auctions there.

We may disclose data where the law requires it.

Bids, orders, payments and audit records are kept after an account is deleted, because they're needed to settle disputes and meet legal and financial duties. Deleting a login removes identifying details from your profile and closes any store.

You can ask to see or correct your personal data, or withdraw consent, by contacting us. Withdrawing consent may mean you can no longer use parts of the service.

You can turn off auction alert emails from your account page or from any email. Emails about your own orders and disputes stay on while you have them.

We use only the cookies needed to keep you logged in. We don't use advertising cookies.