Privacy Policy

1. What Data We Collect

We collect only the information necessary to provide the Drop Watch service:

• Email address — used to create your account and send rate drop alerts.
• Booking details — hotel name, check-in and check-out dates, number of nights, and the rate you paid. Used to monitor for lower rates and calculate savings.
• Account activity — basic logs of when alerts are sent and when you interact with the service, used to troubleshoot and improve the service.
• Billing metadata — for paid features, billing status and Stripe customer or subscription identifiers.

We do not collect payment card details, passport or ID data, phone numbers, or any sensitive personal data beyond what is listed above.

2. How We Use Your Data

Your data is used exclusively to:

• Monitor hotel rates matching your booking details
• Send you email alerts when a rate drop is detected
• Calculate and display aggregate savings across all users (shown on the homepage as anonymized totals)
• Manage paid feature access and billing status
• Maintain and improve the service

3. Third-Party Services

Drop Watch uses the following third-party services to operate:

• Supabase— our database and authentication provider. Your account and booking data is stored on Supabase's infrastructure. Supabase is SOC 2 Type II certified. See their privacy policy at supabase.com/privacy.
• Vercel — our hosting and serverless infrastructure provider.
• Resend — our email delivery provider. Your email address is shared with Resend solely to deliver alert and account emails. See their privacy policy at resend.com/legal/privacy-policy.
• Stripe — our billing provider for paid features. Payment card details are handled by Stripe, while Drop Watch may store billing status and Stripe customer or subscription identifiers.

We do not sell, rent, or share your personal data with any other third parties for marketing or advertising purposes.

4. Data Retention

We retain your account and booking data for as long as your account is active. Booking watches are automatically deactivated after your check-out date. If you request account deletion, we will delete or anonymize associated personal data unless limited retention is required for security, legal, or operational reasons.

5. Your Right to Delete Your Account

You can request deletion of your account and associated personal data at any time by contacting us directly at the email below.

6. Contact

If you have questions about this privacy policy or how your data is handled, contact us at hello@drop-watch.com.

7. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email. Continued use of Drop Watch after changes are posted constitutes acceptance of the revised policy.