Privacy Policy

Scope

This Privacy Policy explains how Helton Labs LLC ("we," "our," or "us") handles information in connection with BookingDrop ("the Service"). By using the Service you agree to this policy.

Information We Collect

• Account Information - Your name, email address, and authentication credentials (stored hashed).
• Booking Data - Drops you create or book, interest-list signups, appointment details, and attendee records.
• Payment Information - Transaction and payout records. Card payments are processed by Stripe; we do not store full card numbers.
• Communications - Notifications and emails we send you about drops, bookings, and account activity.
• Technical Data - IP addresses, request logs, and error/diagnostic data used for security and reliability.

How We Use Information

• To provide, operate, secure, and improve the Service;
• To process payments and prevent fraud and abuse;
• To communicate with you about your account, security, and service changes;
• To comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use Customer Content to train AI models.

Controller and Processor Roles

When a host collects attendee information through a drop, the host is the data controller for that information and Helton Labs LLC acts as a data processor. Hosts are responsible for their own use of attendee data.

Third-Party Sub-Processors

We share data only with service providers who help us operate the Service, under appropriate confidentiality and data-protection obligations:

• Stripe (payments and Connect payouts)
• Hosting and email-delivery providers used to operate the service

Data Retention

We retain personal data for as long as your account is active or as needed to provide the Service, and thereafter only as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data.

Data Security

We use industry-standard safeguards including encryption in transit, hashed credentials, access controls, and reputable hosting infrastructure. No method of transmission or storage is completely secure, but we work to protect your information.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below.

• GDPR - If you are in the EEA/UK, you have rights under the GDPR; we process data under appropriate legal bases.
• CCPA - If you are a California resident, you have rights under the CCPA. We do not sell personal information.

International Transfers

Your information may be processed in the United States and other countries where we or our sub-processors operate. We rely on appropriate safeguards for such transfers where required.

Children's Privacy

The Service is not directed to children under 13 (or the applicable age in your jurisdiction), and we do not knowingly collect personal information from them.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted with an updated "Last Updated" date and, where material, communicated to you directly.

Contact Information

If you have any questions about this Privacy Policy, please contact us at:

Related