Privacy Policy
Your privacy is important to us
Last updated: December 6, 2025
Introduction
Welcome to Dripo AI ("we," "our," "us"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and safeguard data when you use our website, mobile app, and services (collectively, the "Platform"). By using the Platform, you agree to this Policy and our Terms of Service.
Who We Are
Dripo AI is an AI-based content creation platform where users can generate and interact with digital creators through AI-powered tools.
Our operations comply with:
- U.S. law (including California Consumer Privacy Act, "CCPA")
- EU law (General Data Protection Regulation, "GDPR")
Information We Collect
We collect the following types of information:
Information You Provide
- Account details: name, email address, password, age confirmation
- Payment details: billing information processed via Airwallex, Apple, or Google (we do not store full card numbers)
- Uploaded content: photos, videos, or text prompts used to create AI content
- Communications: messages, feedback, or support requests
Information We Collect Automatically
- Device and connection data (IP address, browser type, device model, OS version)
- Usage logs (timestamps, actions performed, session duration)
- Cookies and analytics data (for performance and user experience optimization)
Information from Third Parties
- Payment providers (for verifying successful payments)
- Social login or app store accounts (if you use them to sign in)
- Security providers for fraud and abuse prevention
How We Use Your Information
- Provide, personalize, and improve the Platform's services
- Process payments and manage subscriptions
- Enforce our Content Policy and prevent fraud or abuse
- Communicate important updates and respond to support requests
- Comply with legal obligations (e.g., DMCA, COPPA, GDPR)
We do not sell or rent personal data to third parties.
AI Content & Safety Processing
Uploaded images or text may be analyzed by AI models for moderation and safety (e.g., age detection, explicit content detection). These models help prevent illegal or harmful content (such as sexualized depictions of minors). Automated tools never make final legal or account decisions without human review.
Legal Basis for Processing (GDPR)
Account creation, payments — Contract (Art. 6(1)(b))
AI moderation & fraud prevention — Legitimate Interest (Art. 6(1)(f))
Marketing emails — Consent (Art. 6(1)(a))
Legal compliance (e.g., age checks, AML/KYC) — Legal Obligation (Art. 6(1)(c))
Data Retention
- Account information — active use + 2 years after closure
- Payment records — 7 years (financial compliance)
- Moderation logs — 180 days minimum
- Creator agreements — duration of contract + 3 years
- Backups — rolling 30-day cycle
After retention, data is securely deleted or anonymized.
Data Sharing
- Airwallex, Inc. — payment processing
- Amazon Web Services (AWS) — secure cloud hosting
- Google Analytics / Firebase — usage analytics
- OpenAI or other AI vendors — to power generation tools
Each partner acts under a Data Processing Agreement (DPA) and cannot use your data for unrelated purposes.
Cross-Border Data Transfers
- Standard Contractual Clauses (SCCs) for EU users
- Adequacy Decisions recognized by the European Commission
- All transfers maintain appropriate security safeguards
Your Rights
For EU / EEA Users (GDPR):
- Access, correct, or delete your personal data
- Withdraw consent at any time
- Request data portability (structured, machine-readable format)
- Object to or restrict processing
- Lodge a complaint with your local data protection authority
For California Users (CCPA):
- Request disclosure of the categories and sources of personal data we collect
- Request deletion of personal data (subject to exceptions)
- Opt-out of sale or sharing of data (we do not sell personal information)
- Receive equal service and price, regardless of exercising these rights
To exercise any rights, contact us at [email protected]. We will respond within 30 days.
Children's Privacy
We do not knowingly collect or allow content involving individuals under 13 (U.S.) or 16 (EU). If you believe we have collected such information, contact us immediately, and we will remove it promptly.
Security Measures
- HTTPS / TLS encryption
- AES-256 encryption at rest
- Role-based access control
- Regular security audits and monitoring
Despite these safeguards, no online service is completely secure. You share information at your own risk.
Third-Party Links
Our Platform may link to third-party websites or services. We are not responsible for their content, privacy practices, or data collection methods. We encourage you to review their privacy policies.
Changes to This Policy
We may update this Policy from time to time. Material updates will be announced via email or in-app notice at least 7 days before they take effect. The "Effective Date" at the top will reflect the latest version.