Privacy Policy

1. Data Controller

The data controller for your personal data is DropSquad, operated via photonicgrid.com. For any privacy-related inquiries, please contact us at privacy@photonicgrid.com.

2. Data We Collect

We collect the following categories of personal data:

Account Data

Email address, display name, and avatar.

Payment Data

Payment information is processed by Stripe. We do not store your card numbers or full payment details on our servers.

Usage Data

Auction participation history, purchase records, and chat messages.

Technical Data

IP address, device information, and browser type.

Analytics Data

Collected via Firebase Analytics (Google) and Vercel Analytics to understand platform usage and improve our services.

3. How We Use Your Data

We use your personal data for the following purposes:

• Provide, operate, and improve the DropSquad platform.
• Process payments and token transactions.
• Send notifications about auctions, orders, and account activity.
• Prevent fraud, enforce our terms, and ensure platform security.
• Perform analytics to improve the user experience.

4. Legal Basis (GDPR)

We process your personal data under the following legal bases:

• Contract performance: Processing necessary to provide your account, process purchases, and deliver services.
• Legitimate interest: Analytics to improve the platform and security measures to protect users.
• Consent: Marketing communications and push notifications, which you can opt out of at any time.

5. Data Sharing

We share personal data with the following third-party service providers, solely for the purposes described:

• Stripe: Payment processing.
• Firebase / Google: Authentication, database, and analytics.
• PubNub: Real-time messaging for chat and auction events.
• Vercel: Hosting and analytics.

We do not sell your personal data to any third party.

6. Data Retention

We retain your data for the following periods:

• Account data: Retained while your account is active and for a reasonable period after deletion.
• Transaction records: 7 years, as required by law.
• Chat messages: 30 days.
• Analytics data: 26 months.

7. Your Rights (GDPR)

Under the GDPR, you have the following rights regarding your personal data:

• Right to access your data.
• Right to rectification of inaccurate data.
• Right to erasure ("right to be forgotten").
• Right to data portability.
• Right to object to processing.
• Right to withdraw consent at any time.

To exercise any of these rights, please contact us at privacy@photonicgrid.com. We will respond to your request within 30 days.

8. Cookies & Tracking

DropSquad uses the following types of cookies:

• Session cookies: Required for authentication and core platform functionality.
• Analytics cookies: Used by Firebase and Vercel to help us understand how the platform is used.

We do not use third-party advertising cookies.

9. Children's Privacy

DropSquad is not intended for users under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete that information promptly.

10. International Transfers

Your data may be processed in the European Union and the United States, where our service providers (Firebase, Stripe, PubNub, Vercel) operate servers. Appropriate safeguards are in place, including Standard Contractual Clauses, to ensure your data is protected in accordance with GDPR requirements.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Users will be notified of material changes via email or an in-app notification.

12. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at privacy@photonicgrid.com.