Privacy Policy

This Privacy Policy explains how Driplyst collects, uses, stores, and shares personal information when you use the platform.

1. Who we are

Driplyst is a private wishlist gifting platform for creators. If you have privacy questions or requests, contact us at [email protected].

2. Information we collect

Depending on how you use Driplyst, we may collect:

• account details such as email address, encrypted password, username, display name, avatar, bio, content category, social profile settings, and creator thank-you message settings;
• creator payout and onboarding information, including connected account identifiers from Stripe;
• order information such as selected gift, amount, optional gift message, anonymous preference, payment status, payout status, and related internal transaction IDs;
• support or contact information you send to us directly; and
• technical and usage information such as IP address, browser or device details, analytics events, and server logs, where collected for security, fraud prevention, troubleshooting, or site improvement.

3. How we use personal information

We use personal information to operate Driplyst, including to:

• create and manage creator and admin accounts;
• display creator profiles and enabled gift options;
• process orders, monitor payment status, and manage payouts;
• send transaction updates, receipts where available, support replies, and creator-written thank-you emails after paid gifts;
• detect, prevent, and investigate fraud, abuse, disputes, or technical issues; and
• meet legal, accounting, tax, security, or compliance obligations.

4. Lawful bases

Where UK data protection law applies, we generally rely on one or more of the following lawful bases:

• performance of a contract or steps requested before entering into a contract;
• our legitimate interests in running, protecting, improving, and administering Driplyst;
• compliance with legal obligations; and
• consent, where consent is specifically requested and relied upon.

5. Payments and Stripe

Payments on Driplyst are processed through Stripe. Stripe collects payment details and may collect customer email addresses, billing details, and related payment information during checkout. We receive limited transaction information from Stripe, such as payment status, Checkout Session ID, Payment Intent ID, customer email where supplied by Stripe, and other information needed to manage orders and payouts.

Stripe acts as an independent provider for payments, and its handling of personal information is governed by Stripe's own privacy documentation and terms.

6. What creators, supporters, and admins can see

Driplyst is designed so that public creator pages show only the profile information the creator chooses to publish, such as display name, username, bio, avatar, selected social profiles, and enabled gift options.

• Supporters can see only the creator's public page information and gift options. They do not see creator login details, private email addresses, payout information, or internal account data.
• Creators can see order summaries needed to run their page, such as the selected gift, optional message, payment status, and payout status. Creator dashboards are designed to avoid exposing unnecessary supporter personal details.
• If a thank-you email is sent, Driplyst sends the creator-written message for the creator. The supporter email address is not shown to the creator through that feature.
• Admins may access broader account and order information where needed to review creators, investigate issues, manage payouts, respond to support requests, or meet legal and compliance obligations.

Where a supporter chooses an anonymous option, we present that choice in creator-facing views accordingly. We may still retain the underlying transaction information internally where needed for payments, fraud prevention, disputes, record keeping, and legal compliance.

7. Sharing information

We may share personal information with providers and processors who help us run the platform, including Stripe for payments, Brevo for transactional emails, hosting providers, analytics providers, and technical support tools. We may also disclose information where required by law, court order, regulation, or to protect rights, safety, systems, or users.

8. Data retention

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including account administration, transaction records, fraud prevention, dispute handling, tax and accounting records, and legal compliance. Retention periods may vary depending on the type of data and the reason it was collected.

9. Your rights

Depending on the laws that apply to you, you may have rights to access, correct, erase, restrict, object to, or request portability of your personal information. You may also have the right to withdraw consent where we rely on consent. To exercise a request, contact us at [email protected].

If you are in the UK, you may also have the right to complain to the Information Commissioner's Office.

10. Security

We use reasonable technical and organisational measures to protect personal information, but no system can be guaranteed completely secure. You are responsible for keeping your login credentials confidential and for notifying us if you believe your account has been compromised.

11. International transfers

Some providers we use may process information outside your country. Where this happens, we take reasonable steps to ensure appropriate safeguards are in place, where required by law.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be posted on this page with the updated date shown above.

13. Contact

If you have questions about this Privacy Policy or how Driplyst handles personal information, contact [email protected].