Privacy Policy
This policy describes what GOMdrop, Inc. collects about you, what we do with it, and who else touches it. It covers gomdrop.com and everything we run under it.
1. What we collect
- Account: your username, email address, and password. Passwords are stored hashed; we cannot read them.
- Profile: whatever you choose to put in it.
- Addresses: shipping addresses you enter, so orders can reach you.
- Marketplace activity: your orders, group order commitments, listings, bids, offers, and the notifications we send you about them.
- Payment: card details go directly to Stripe, our payment processor. We store Stripe customer and transaction identifiers and order amounts, never full card numbers. If you sell, Stripe also collects identity and bank information from you under its own privacy policy to verify you and pay you out.
- Usage: actions you take on the service, plus standard technical logs (IP address, browser, timestamps). We use these to operate, debug, and secure the service.
2. What we do with it
- Run the marketplace: process orders, shipping, payouts, and refunds.
- Index your public listings so buyers can search them.
- Build an interest profile from your order history to curate and recommend items to you. This profile is internal; it is not shown to other users and not shared outside GOMdrop.
- Compute seller track records from fulfillment history. Reliability stats for sellers and GOMs are shown to buyers; that is part of how the marketplace works.
- Assess risk: payment fraud, reserve decisions, and dispute handling.
- Email you (section 4).
We do not sell personal data. We do not run third-party advertising trackers.
3. Who else touches your data
- Stripe processes payments and payouts, verifies sellers, and calculates sales tax.
- EasyPost and shipping carriers receive names and addresses to create labels and deliver packages.
- Postmark delivers our email.
- Google Cloud hosts our infrastructure.
- Sellers and GOMs see what they need to fulfill your order: your username, the order details, and the shipping name and address you provided for it.
Beyond that, we disclose personal information only if the law requires it or to protect the service and its users from fraud or abuse.
4. Email
Transactional email (order updates, payment receipts, account notices) comes with using the service. Marketing email always has an unsubscribe link, and opting out of marketing does not affect transactional email.
5. Cookies
We set a session cookie to keep you signed in. We do not set third-party advertising cookies.
6. Retention and deletion
We keep your data while your account is active. If you close your account, we remove your profile from public view and delete personal information we no longer need. Records of completed transactions are retained as long as accounting rules, dispute windows, and the law require.
7. Security
Traffic is encrypted in transit. Passwords are hashed. Access to production data is restricted to people who need it to run the service. No system is perfectly secure; if we learn of a breach that affects you, we will tell you.
8. Your rights
You can view and correct your account information in settings. To request a copy of your data or its deletion, email [email protected]. Depending on where you live, you may have additional legal rights over your data; we honor them.
9. Children
GOMdrop is not for children under 13, and we do not knowingly collect their data. Buying and selling require being 18 or older.
10. Changes
When this policy changes, we post the new version with a new date. If a change is material, we email account holders before it takes effect.
11. Contact
Privacy questions go to [email protected] or GOMdrop, Inc., 228 Park Ave S, PMB 74365, New York, NY 10003, United States.