Privacy Policy

1. Introduction

The Dewdrop Group, LLC ("we," "us," "our," or "Company"), operator of Clean My Data, is committed to protecting and respecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal information when you use our document processing services, which extract, parse, convert, and organize data from documents ("Services"), and when you visit our website.

By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our Services.

2. Key Points Summary

Your Data Belongs to You

Your personal data and documents belong to you, not us
We do not sell, rent, or trade your personal data or document data to third parties
Keeping your data secure is our highest priority

What We Collect

Account information (name, email, company details)
Payment and billing information
Uploaded documents and extracted data
Usage data and analytics
Technical information (IP address, browser type, device information)

How We Use Data

To provide our document processing services
To communicate with you about your account and services
To ensure security and prevent fraud
To comply with legal obligations
To improve our Services based on usage patterns (not document content)

Your Rights

You have the right to:

Access your personal data
Correct or update your information
Delete your data
Export your data
Opt-out of marketing communications
Object to certain processing activities

3. Information We Collect

3.1 Account Information

When you create an account, we collect:

First name and last name
Email address
Company or organization name
Password (stored in encrypted form)

3.2 Billing Information

When you subscribe to paid features, we collect:

Billing address
Payment card details (processed securely by our payment processors)
Transaction history

3.3 Document Data

When you use our Services, you upload documents for processing. These may include PDFs, images, Microsoft Office documents, and other file types supported by our Services.

Important Notice: You should not upload documents containing sensitive personal data such as health information, biometric data, or other categories of special personal data. If you inadvertently upload such information, please contact us immediately for removal.

3.4 Automatically Collected Information

We automatically collect:

IP address and general geographic location
Browser type, version, and language settings
Device type and operating system
Pages viewed and features accessed
Date and time of visits
Files uploaded and downloaded

4. How We Use Your Information

4.1 Service Provision

We use your information to:

Create and manage your account
Process and extract data from your uploaded documents
Convert and transform documents between formats
Process payments and manage billing
Provide customer support

4.2 Service Improvement

We analyze usage patterns and aggregated data (not your document content) to improve our Services, fix bugs, and develop new features.

4.3 Communication

We use your information to:

Send operational notifications about your account
Provide updates about new features
Deliver billing statements
Respond to your inquiries

5. Document Data Processing

5.1 How We Process Documents

When you upload documents:

Documents are securely uploaded and stored in encrypted form
Our AI engines analyze documents to extract relevant data
Text, numbers, and structured information are identified and extracted
Documents may be converted between formats as requested
Processed data is made available to you
Documents are retained according to your account settings

5.2 Document Privacy

Your documents are private. We do not:

Share your documents with other users
Sell your documents or extracted data to third parties
Use document content for any purpose other than providing the Services to you

5.3 Your Control Over Documents

You have complete control over your documents:

Upload, download, and delete documents at any time
Export all your extracted data
Configure document retention settings
Delete your account and all associated documents

6. Disclosure and Sharing of Information

We do not sell, rent, or trade your personal data or document data to third parties. We may share information with:

6.1 Service Providers

We share information with trusted service providers who assist us in operating our Services:

Cloud Hosting: For infrastructure and data storage
Stripe: For secure payment processing
Email Delivery: For sending transactional emails (account notifications, password resets, etc.)
Sentry: For error monitoring and debugging (with PII collection disabled)

All service providers are contractually required to protect your data and use it only for the purposes we specify.

6.2 Legal Requirements

We may disclose information when required to:

Comply with laws, regulations, or legal processes
Respond to lawful requests from authorities
Protect our rights, property, or safety
Prevent fraud or security breaches

7. Data Security

We implement comprehensive security measures to protect your information:

7.1 Technical Measures

Encryption in transit (TLS/SSL) and at rest (AES-256)
Multi-factor authentication available
Regular security audits and testing
Firewalls and intrusion detection systems
Automated security monitoring

7.2 Your Responsibilities

Use strong, unique passwords
Enable multi-factor authentication
Keep login credentials confidential
Report suspected security incidents immediately

8. Data Retention

We retain your data only as long as necessary:

8.1 Retention Periods

Active Accounts: Data retained while your account is active
Closed Accounts: Personal data deleted within 60 days of closure
Transaction Records: Retained for 7 years for tax purposes
Documents: Retained according to your settings; you can delete anytime
Backups: Removed as backups age out (typically 30-90 days)

9. Cookies and Tracking Technologies

We use cookies and similar technologies to provide and secure our Services. Cookies are small text files stored on your device that help us maintain your session and protect your account.

9.1 What Cookies We Use

We only use essential cookies necessary for our Services to function properly:

Essential/Strictly Necessary Cookies:

Session Cookies: Maintain your login session and remember you as you navigate through the application
Authentication Cookies: Verify your identity and keep you logged in (provided by Devise authentication)
CSRF Protection Tokens: Prevent cross-site request forgery attacks and protect your account security
Security Cookies: Detect and prevent fraudulent activity

Performance and Monitoring:

Sentry Error Tracking: Helps us identify and fix technical issues. Note: We have configured Sentry to NOT collect personally identifiable information (PII)

Payment Processing:

Stripe: Our payment processor may set cookies to securely process payments and prevent fraud. See Stripe's Privacy Policy

9.2 What We Don't Use

We do NOT use:

Marketing or advertising cookies
Social media tracking pixels (Facebook, LinkedIn, Twitter, etc.)
Third-party analytics services (Google Analytics, etc.)
Retargeting or remarketing cookies

9.3 Managing Cookies

Most web browsers allow you to control cookies through settings. However, please note that disabling essential cookies will prevent you from using our Services, as they are required for authentication and security.

To manage cookies in your browser:

Chrome: Settings → Privacy and security → Cookies and other site data
Firefox: Settings → Privacy & Security → Cookies and Site Data
Safari: Preferences → Privacy → Cookies and website data
Edge: Settings → Privacy, search, and services → Cookies and site permissions

9.4 Cookie Duration

Session Cookies: Deleted when you close your browser
Persistent Cookies: Remain on your device for a set period (typically up to 1 year) to keep you logged in

10. Your Privacy Rights

10.1 Universal Rights

You have the right to:

Access: Request information about your personal data
Correction: Update inaccurate or incomplete information
Deletion: Request deletion of your personal data
Data Portability: Receive your data in a structured format

10.2 GDPR Rights (EEA, UK)

If you are in the EEA or UK, you also have the right to:

Restrict processing of your data
Object to processing based on legitimate interests
Lodge a complaint with a supervisory authority
Withdraw consent at any time

10.3 CCPA Rights (California)

California residents have the right to:

Know what personal information is collected
Request deletion of personal information
Opt-out of the sale of personal information (we do not sell your data)
Non-discrimination for exercising your rights

10.4 Exercising Your Rights

To exercise your privacy rights, email us at support@cleanmydata.app or use the data export/deletion features in your account settings.

11. International Data Transfers

Your data may be transferred to and processed in the United States. We implement appropriate safeguards including:

Standard Contractual Clauses for international transfers
Encryption and access controls
Regular security assessments

12. Children's Privacy

Our Services are not intended for users under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, please contact us immediately.

13. Third-Party Links and Services

Our Services may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through our Services. Your continued use after changes constitutes acceptance of the revised policy.

15. Contact Information

For questions about this Privacy Policy or our privacy practices, please contact us:

The Dewdrop Group, LLC

Product: Clean My Data

Email: support@cleanmydata.app

By using our Services, you acknowledge that you have read and understood this Privacy Policy.