Privacy Policy

1. Information We Collect

We only collect data strictly necessary to generate your SaaS conversion diagnostics and support your account:

• Public SaaS URLs: The website URL you submit for instant conversion leak audits.
• Diagnostic Telemetry: Anonymized behavioral drop-off indicators, step completion percentages, and friction signals.
• Account Information: When signing in with Google OAuth, we receive your email address, name, and profile identifier for authentication.
• Billing & Purchase Records: Transaction IDs and subscription statuses securely managed by Dodo Payments. We never store or see your credit card or CVV details.
• Support Messages: Inquiries submitted via our Contact Us form (delivered securely via Resend).

2. Lightweight Tracking Script & Telemetry

Dropwhy uses a lightweight 60-second tracking snippet (embedded via HTML script tag, Google Tag Manager, or npm) to capture anonymized funnel event milestones (such as page views, signups, and checkout visits). We do not record keystrokes, personal passwords, or invasive session recordings. Only non-personally-identifiable funnel telemetry is transmitted.

3. End-to-End Encryption (AES-256-GCM)

All data, payment tokens, and client-server API payloads are encrypted using military-grade AES-256-GCM authenticated encryption. Your diagnostics and project information remain confidential and protected from unauthorized third parties.

4. Session Lifetime & Tab Isolation

Dropwhy enforces strict session isolation. When you close your browser tab or exit the browser, active session storage is automatically destroyed. Protected routes require active re-authentication, preventing session hijacking or shared-computer credential leakage.

5. Third-Party Service Providers

We work with reputable infrastructure partners to deliver our services:

• Cloudflare: Edge network hosting, DDoS prevention, and Workers AI inference.
• Supabase: Encrypted database storage and OAuth authentication.
• Dodo Payments: PCI-DSS compliant checkout and payment gateway processing.
• Resend: Secure transactional support and contact email routing.

6. We Never Sell or Monetize Your Data

We have never sold, rented, or shared user data with data brokers or ad networks, and we never will. Your conversion metrics and funnel benchmarks belong exclusively to you.

7. Your Data Rights (GDPR & CCPA)

Regardless of your location, you have the right to request a full copy of your data, update your project details, or request permanent deletion of your account and diagnostic history. To exercise your rights, email us at support@panaisoft.in.

8. Contact Our Privacy Team

For questions, concerns, or requests regarding this Privacy Policy, please reach out through our Contact Page or email support@panaisoft.in.