Legal

Privacy Policy

Last updated: [DATE] · Effective: [DATE]
Template notice — replace before publishing. This is a starting draft based on how Drexo works and common US/EU requirements. Bracketed items like [COMPANY LEGAL NAME] must be filled in, and a qualified attorney should review it before you rely on it. It is not legal advice.

Contents

  1. Who we are
  2. Information we collect
  3. How we use your information
  4. Legal bases (EU/UK – GDPR)
  5. How we share information
  6. Cookies & tracking
  7. Data retention
  8. Your privacy rights
  9. California rights (CCPA/CPRA)
  10. International transfers
  11. Security
  12. Children's privacy
  13. Changes to this policy
  14. Contact us

1. Who we are

Drexo ("Drexo," "we," "us," or "our") provides a mobile application and related services that monitor online product pages and notify you about restocks and price changes (the "Service"). This Privacy Policy explains what information we collect, how we use it, and the choices you have.

For the purposes of the EU/UK General Data Protection Regulation (GDPR), the data controller is [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. If you have questions, contact us at privacy@drexoapp.com.

2. Information we collect

Information you provide

Information collected automatically

Information from third parties

3. How we use your information

If you are in the EU, EEA, or UK, we process your personal data under these legal bases:

PurposeLegal basis
Providing the Service you signed up forPerformance of a contract
Sending alerts you configuredPerformance of a contract
Optional analytics cookiesConsent
Security, fraud prevention, product improvementLegitimate interests
Meeting legal/tax obligationsLegal obligation

Where we rely on consent, you can withdraw it at any time. Where we rely on legitimate interests, you can object (see "Your privacy rights").

5. How we share information

We do not sell your personal information. We share it only with:

Key sub-processors include [CLOUD HOST], [PAGE-RETRIEVAL PROVIDER], and [AI PROVIDER]. A current list is available on request.

6. Cookies & tracking

Our website uses a small number of cookies. Strictly necessary cookies are required for the site to function and are always on. Optional analytics cookies are only set if you consent via our cookie banner; you can decline and the site still works. You can change your choice at any time by clearing the site's stored data in your browser. The Drexo app itself does not use advertising trackers.

7. Data retention

We keep personal data only as long as needed for the purposes above — typically for as long as you have an account, plus a limited period afterward for legal, security, and accounting reasons. Tracked-product data is retained while you track the item and removed when you delete it or close your account, subject to short backup-retention windows.

8. Your privacy rights

Depending on where you live, you may have the right to: access your data; correct it; delete it; restrict or object to processing; data portability; and withdraw consent. To exercise these rights, contact privacy@drexoapp.com. We will respond within the time required by applicable law. EU/UK users also have the right to lodge a complaint with their local data protection authority.

9. California privacy rights (CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under California law. You may exercise your rights by contacting privacy@drexoapp.com, and we will not discriminate against you for doing so.

10. International data transfers

We may process and store information in countries other than where you live, including the United States. Where we transfer personal data out of the EEA/UK, we use appropriate safeguards such as Standard Contractual Clauses.

11. Security

We use technical and organizational measures designed to protect your information, including encryption in transit, access controls, and least-privilege practices. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

12. Children's privacy

The Service is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal information. If you believe a child has provided us data, contact us and we will delete it.

13. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date. Material changes will be communicated as required by law.

14. Contact us

Questions or requests? Email privacy@drexoapp.com or write to [COMPANY LEGAL NAME], [REGISTERED ADDRESS].