Legal · July 2026

Privacy Policy

This policy explains how Greyfeathers Studios Pvt Ltd collects, uses, and protects information when you use Droppnotes.

01

Overview

Droppnotes is a visual feedback tool operated by Greyfeathers Studios Pvt Ltd. This policy applies to the Droppnotes web app, Chrome extension, and related services, and explains what information we collect, how we use it, and how we protect it.

02

Who we are

  • Company: Greyfeathers Studios Pvt Ltd.
  • Product: Droppnotes — Visual Feedback.
  • Contact: support@greyfeathers.io.
  • We are the data controller for information you provide directly and a data processor for screenshots, comments, and other project content submitted on behalf of your organisation or clients.
03

What we collect

  • Your name and email address when you create an account.
  • Screenshots you explicitly capture. Droppnotes never captures your screen passively.
  • Comments, replies, recordings, and files you choose to submit.
  • The page URL, pin coordinates, browser details, and screen size associated with feedback.
  • Authentication tokens needed to keep you signed in and connect authorised integrations.
  • Basic usage events used to understand reliability and improve the product. We do not use third-party advertising analytics.
04

How we use information

  • Create and maintain your account.
  • Show your name and avatar to collaborators in shared projects.
  • Send transactional email and in-app notifications.
  • Send project information to Slack when you connect it.
  • Diagnose bugs, protect the Service, and improve product reliability.

We do not sell your data, use it for advertising, or share it except as described below.

05

How we share information

  • Supabase provides our database, file storage, and authentication infrastructure.
  • Maileroo delivers transactional email.
  • Vercel hosts the web application.
  • Slack receives project names and comment summaries only when you connect a Slack workspace.

We may disclose information where required by law, to protect users or the Service, or as part of a corporate transaction with appropriate safeguards.

06

Chrome extension permissions

The extension requests only the permissions needed to place feedback on websites:

  • Access to all URLs lets the overlay work on the page you choose to review.
  • Active tab, scripting, tabs, and web navigation let the extension open the feedback tools and follow the current page safely.
  • Storage keeps your sign-in and preferences on your device.
  • Alarms support routine token and session maintenance.

A screenshot is captured only when you create a comment. The extension does not read or transmit page content in the background unless you have an active Droppnotes session on that page.

07

Data retention

  • Account information is retained until you delete your account.
  • Project content is retained until the project owner deletes it or the account is closed.
  • Authentication and integration tokens expire or are rotated according to their security settings.
  • Deletion requests are completed from active systems within 30 days, subject to legal backup obligations.
08

Security

  • HTTPS/TLS protects data in transit.
  • Row-level security limits database access.
  • Private storage buckets and signed URLs protect uploaded files.
  • Supabase Auth manages user authentication.
  • Service credentials remain on the server and are not exposed to the browser.

No online service can promise absolute security. If you believe you have found a security issue, contact support@greyfeathers.io so we can investigate promptly.

09

Cookies & local storage

We use cookies and local storage only for authentication and product preferences — not for advertising, tracking, or third-party analytics. The authentication session cookie may remain active for up to 7 days of inactivity, and the extension stores its authorised session token locally on your device.

10

Children

Droppnotes is not intended for children under 16. We do not knowingly collect personal information from children under 16. Contact us if you believe a child has provided us with information.

11

Changes to this policy

We may update this policy when the product or law changes. We will revise the date above and provide notice when a change materially affects your privacy rights.

12

Contact

For privacy questions, access requests, or deletion requests, email support@greyfeathers.io. We aim to respond within 5 business days.

Greyfeathers Studios Pvt Ltd · India