Privacy Policy

What this page covers

This page describes how the DropAsset product handles information in the version of the service described here. It is a practical notice, not a certification and not a complete statement of every law that might apply to you.

DropAsset is an advertising asset intake product. A publisher creates a request. An advertiser can upload to that request without a DropAsset account.

Information people provide

Publisher accounts use an email address for magic-link sign-in. The account is how a publisher reaches the dashboard, requests, and files.

Request content can include campaign names, slot requirements, publisher instructions, landing URL requirements, and the email addresses a publisher enters when sending a request on a paid plan.

Advertisers may submit files, a landing URL when the slot asks for one, and a note when that field is used. They do not need to create an account.

Advertiser-uploaded files

Files uploaded to a request are stored privately. They are not published as open files. The publisher previews and downloads them from the request. The advertiser reaches the request through its link.

When a safe fix applies to a supported still image, DropAsset keeps the original upload and can also store a Ready-to-Use file.

Request emails

On a paid plan, a publisher can email a request and send a manual reminder. Those messages use the recipient addresses the publisher provides. DropAsset does not run an automated reminder sequence.

Sign-in uses an email message that contains a magic link for the publisher account.

Technical logs and rate limiting

Sign-in and upload flows are rate limited to reduce abuse of accounts and public links. That can involve technical data such as a request identifier and basic connection data needed to apply the limit.

This page does not list every log field. It does not claim a fixed retention period for logs.

How information is used

Information is used to run the product: authenticate publishers, store and validate uploads, prepare a Ready-to-Use file when a safe fix applies, show status on the request, and send the emails described above.

It is not used here to sell advertising audiences or to report campaign performance. DropAsset does not serve ads and does not buy media.

Authentication and storage

Publishers sign in with a magic link sent to their email. Advertiser uploads do not require a DropAsset password or account.

Files stay in private storage tied to the request. This page does not name a specific data-center city or a subprocessor list.

Security

Access to publisher files is through the account and the request, not through a public file directory. Public upload links are scoped to one request. Rate limits apply to sign-in and uploads.

These measures reduce misuse. They are not a promise that unauthorized access is impossible.

Retention

Account information and files are kept while they are needed to operate the request or the account. This page does not set a fixed number of days for deletion.

To ask about access to or removal of information tied to your account or a request, email support@dropasset.co. That request is handled individually. This page does not promise a response-time or deletion deadline.

Location of processing

DropAsset does not publish a fixed country or region list on this page. Where information is processed depends on the infrastructure used to run the service.

This page does not claim a GDPR certification or any other compliance seal.

Updates

This page can change as the product changes. The date at the top is the latest revision of this text. Continued use of DropAsset after an update means the revised page applies to use from that point.

Analytics

DropAsset can use Google Analytics 4 on public pages such as the marketing site, pricing, and this page. It does not load unless you choose Accept. Reject keeps it off.

If you accept, Google may store analytics cookies in this browser, including a cookie named _ga. Those cookies help recognize a returning browser on later public pages. DropAsset does not use them to sell advertising audiences or to report campaign performance.

Advertiser upload links, invitation links, magic-link verification, and individual request pages do not load Google Analytics.

If you accept, a new account created from this browser can be reported to Google Analytics as a signup. DropAsset sends that report from its server using the analytics client and session identifiers already stored in this browser. The report does not include your email address, your name, the magic link, or the address you open after sign-in. If you reject analytics, or you have not chosen, that signup report is not sent.

If you accept, creating a request from this browser can also be reported. The first request in a workspace can be reported separately. Those reports use the same analytics identifiers. They do not include the request name, advertiser details, files, or the request address. Requests created without acceptance are not reported.

The banner offers Accept and Reject with equal weight. The choice is stored in this browser. Use Analytics choice below to reject later or to allow analytics after a rejection. Turning analytics off stops later hits from this browser and clears the analytics cookies DropAsset can remove here. It does not erase information Google may already have from an earlier acceptance. This page does not set a retention period for Google Analytics data.

Contact

Privacy questions go to hello@dropasset.co. This page does not list a phone number, a postal address, or a separate legal entity name.