Privacy Policy

CA DROP Sentinel is operated by Spellweave Labs, LLC (“we,” “us,” “our”). This Privacy Policy describes how we collect, use, and protect information when you use our website and services at cadropsentinel.com.

Information you provide directly:

• Purchase information: When you buy the Product, Stripe collects your name, email address, and payment information. We receive your name and email from Stripe but do not receive or store your full payment card number.
• Lead form submissions: If you use our Risk Calculator, you may voluntarily provide your name, email, and company name.
• AI scrub engine uploads: You may upload CSV files containing consumer personal information (names, emails, phone numbers) from the DROP portal. See Section 4 for how this data is handled.
• Chat messages: Questions you type in the compliance chat are sent to our AI provider for processing.

Information collected automatically:

• Standard web server logs (IP address, browser type, pages visited) for security and analytics purposes.

• To process your purchase and deliver the Product
• To provide AI-powered compliance analysis when you use the scrub engine
• To send alert subscription emails (if you subscribe to the 45-day cycle service)
• To respond to your inquiries
• To improve the Product and our services
• To comply with legal obligations

We do not sell your personal information. We do not use your information for advertising or marketing purposes beyond communications about the Product you purchased.

This section is particularly important because the AI scrub engine processes consumer personal information that you upload:

• Real-time processing only: Uploaded CSV data is processed during your active session and is not stored on our servers after processing is complete.
• Third-party AI processing: Your data is transmitted to Anthropic's Claude API for AI analysis. Anthropic's data processing is governed by their usage policies. Anthropic does not use API inputs to train their models.
• No persistent storage: We do not maintain a database of consumer information uploaded to the scrub engine. Once your browser session ends, the data is no longer accessible through our system.
• Your responsibility: You are responsible for ensuring that your upload of consumer data complies with applicable privacy laws and your own organization's data handling policies.

We use the following third-party services:

• Stripe: Payment processing. Stripe's privacy policy governs how they handle your payment information.
• Anthropic (Claude API): AI-powered analysis. Data sent to the API is subject to Anthropic's commercial API terms, which prohibit using API inputs for model training.
• Vercel / Cloudflare: Website hosting and content delivery.

We implement reasonable technical and organizational measures to protect information transmitted through our services, including HTTPS encryption for all data in transit. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

• Purchase records: Retained for as long as needed for business and tax purposes (typically 7 years).
• Subscriber information: Retained while your subscription is active and for 30 days after cancellation.
• Scrub engine data: Not retained. Processed in real-time only.
• Lead form submissions: Retained until you request deletion.

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information
• Opt out of marketing communications

To exercise any of these rights, contact us at support@cadropsentinel.com.

We may update this Privacy Policy from time to time. Material changes will be communicated via email to active subscribers or posted on this page with an updated “Last updated” date.

For privacy-related questions or requests, contact:

Spellweave Labs, LLC
Email: support@cadropsentinel.com
Website: cadropsentinel.com