Privacy Policy

1. Data controller

The data controller is QM Project FZ-LLC, Compass Building, Al Hulaila, Al Hulaila Industrial Zone-FZ, Ras Al Khaimah, United Arab Emirates, provider of Namedrop (getnamedrop.ai). Contact: hello@getnamedrop.ai.

2. Data we collect

• Account and profile: email address, full name and, when you use Google login, profile information that provider sends to Supabase, such as your name or avatar.
• Scans and reports: URL, brand name, keywords, competitors, location, public content retrieved from analyzed websites, AI-engine responses, scores, recommendations and generated PDFs.
• Subscription: selected plan, status, and technical Stripe customer and subscription identifiers. Card data is processed directly by Stripe and is not stored by Namedrop.
• Technical and security data: IP address used for free scans and abuse prevention, technical logs, timestamps, errors and information needed to secure the service.
• Analytics: navigation data collected by Google Analytics 4 through Google Tag Manager only after you consent to analytics cookies.

3. Sources of data

Data comes from you, your authentication provider, Stripe, the public web pages you ask us to analyze and the AI engines queried to provide the service.

4. Purposes and legal bases

• Creating your account, running scans, and generating and delivering reports: contract performance or pre-contractual steps.
• Managing subscriptions, payments, invoices and support requests: contract performance and legal obligations.
• Preventing abuse, securing the platform, diagnosing errors and protecting providers: legitimate interests.
• Measuring audience with Google Analytics: consent, which you can withdraw at any time through cookie settings.
• Responding to data-rights requests and retaining required records: legal obligations.

5. Recipients and processors

• Supabase: database and authentication.
• Vercel: frontend hosting.
• Hostinger: API hosting.
• Stripe: payments, billing and customer portal.
• Resend: transactional email.
• OpenAI, Anthropic, Perplexity and Google Gemini: AI models and engines needed to generate scans and reports.
• Google Analytics and Google Tag Manager: audience measurement after consent.
• Cookiebot/Usercentrics: collection and storage of cookie-consent choices.

6. Data sent to AI providers

To generate a report, Namedrop sends AI providers the analyzed URL, keywords, brand name and excerpts of public content from the relevant websites. Do not submit secrets, sensitive data or confidential content in analysis fields.

7. International transfers

QM Project FZ-LLC is established in the United Arab Emirates and some processors operate in the United States or other countries. Where required by applicable law, transfers rely on mechanisms offered by those providers and recognized by the relevant regulation, including standard contractual clauses or an adequacy decision where available.

8. Retention

• Account, profile, reports and history: for the life of the account, then deleted when the account is deleted, subject to temporary technical backups and legal obligations.
• Free scans linked to an email address: as needed for delivery, possible conversion into an account, service security and until a verified deletion request.
• Abuse-prevention counters: until their technical window expires automatically.
• Billing data and accounting records: for the period required by applicable law; Stripe may retain its own records under its policy.
• Analytics cookies and consent records: for the periods stated in the Cookie Policy and the Cookiebot declaration available on the website.

9. Your rights

Depending on your circumstances and applicable law, you may request access, correction, deletion, restriction or portability of your data, or object to certain processing. You can withdraw consent at any time without affecting processing already carried out.

To exercise a right, email hello@getnamedrop.ai. You may also complain to the data-protection authority in your country, such as the CNIL in France or the FDPIC in Switzerland.

10. Cookies

Necessary cookies support authentication, session and security. Google Analytics cookies are only set after consent. You can change your choice through “Cookie settings” in the footer; details are provided in the Cookie Policy.

11. Automated processing and security

Namedrop uses automated processing to calculate scores and produce recommendations, but does not make decisions that produce legal effects concerning you. Technical and organizational measures are used to limit access, abuse and data loss, although no system can guarantee absolute security.

12. Updates and contact

This policy may change as the service or applicable rules evolve. The latest update date appears at the top of the page. For privacy questions, contact hello@getnamedrop.ai.