Privacy Policy

Last updated: February 2026

1. Controller

Ersan Yüksel
operating under the business name WTDM
Gothaerstraße 10
27755 Delmenhorst
Germany
Email: support@daily-drop.app

2. General

The protection of personal data is important to us. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR) and only to the extent necessary to provide our SaaS platform DailyDrop.

3. Types of Data Processed

When using DailyDrop, the following personal data may be processed:

• Email address
• User ID
• Authentication data
• Payment and transaction data
• Technical connection data (e.g. IP address)
• Usage data
• Entered and generated content
• Technical log data

4. Purpose of Processing

• Provision and operation of the platform
• User authentication via Google Login
• User account management
• Payment processing and subscription management
• Provision of AI features
• Ensuring system security
• Prevention of misuse
• Fulfillment of legal obligations

5. Legal Basis

Processing is based on:

• Art. 6(1)(b) GDPR — contract performance
• Art. 6(1)(c) GDPR — legal obligation
• Art. 6(1)(f) GDPR — legitimate interest in secure and stable operation of the platform

6. Authentication via Google

Login is provided via Google Login. Personal data such as email address and user ID may be transmitted by Google. This data is used for authentication and provision of the user account.

7. Service Providers and Processors

We use external service providers as processors pursuant to Art. 28 GDPR:

• Supabase, Inc. — Hosting, database and authentication · supabase.com/privacy
• Stripe, Inc. — Payment processing and subscription management · stripe.com/privacy
• OpenAI, L.L.C. — Content processing for AI features · openai.com/privacy
• Google LLC — Authentication via Google Login · policies.google.com/privacy

These service providers process data exclusively according to our instructions and for the provision of the platform.

8. Third-Country Transfers

Personal data may be transferred to countries outside the European Union, particularly the USA. Transfers are made exclusively on the basis of appropriate safeguards pursuant to Art. 46 GDPR, in particular Standard Contractual Clauses of the European Commission or certification under the EU-US Data Privacy Framework.

9. Data Retention

Personal data is retained only as long as necessary for the provision of the platform and the fulfillment of legal obligations. Account data is stored as long as a user account exists. After deletion of the account, personal data is deleted unless legal retention obligations apply.

10. Your Rights

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object (Art. 21 GDPR)

Requests can be directed to support@daily-drop.app

11. Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority. The competent authority is: Die Landesbeauftragte für den Datenschutz Niedersachsen.

12. Automated Decision-Making

Automated decision-making within the meaning of Art. 22 GDPR does not take place.

13. Security

We use technical and organizational security measures, including HTTPS encryption, access controls and secure infrastructure, to protect personal data against loss, misuse or unauthorized access.