drop

Home

Privacy Policy

Last updated: 7 June 2026

Who we are

drop (neuronik.io) ("drop", "we") provides a service to publish HTML pages from your AI assistant and share them by link. This policy explains what personal data we process and why.

Data we collect

Account data — when you sign in with Google we receive your email address, name, profile picture and Google account identifier. If you sign in by email instead, we process your email address to send you a one-time sign-in link. We use this data to authenticate you and to place you in an organisation derived from your email domain.

Content you create — the HTML pages, titles and files (images, video, documents) you publish are stored to provide the service. Content you mark public is accessible to anyone with the link; private content is restricted to members of your organisation. Stored content is encrypted at rest.

Technical data — standard request metadata (e.g. IP address, timestamps) processed for security and to operate the service.

Usage analytics — we record aggregate product events (e.g. that a page was viewed or published), without advertising identifiers or cross-site tracking. We do not use your content or personal data to train AI models.

Cookies

We use a single strictly-necessary, HttpOnly session cookie to keep you signed in, and a short-lived cookie during sign-in to protect against cross-site request forgery. We do not use advertising or third-party tracking cookies.

Where your data is stored

Data is hosted on Cloudflare's infrastructure (databases, object storage and key-value storage). Authentication is handled via Google Sign-In or email sign-in links, and transactional emails (sign-in links, workspace invitations) are delivered via Resend. Page thumbnails are rendered on Amazon Web Services (EU region): the page's HTML is sent there transiently for rendering and is not retained after the thumbnail is produced. These providers act as processors on our behalf.

Sharing

We do not sell your personal data. We share it only with the processors above (Google for authentication, Cloudflare for hosting, Resend for email delivery, AWS for thumbnail rendering) as needed to run the service, and with anyone you choose to share a public page link with.

Retention

We keep your account and content while your account is active. You can delete individual pages at any time, and you can request deletion of your account and associated data by contacting us.

Your rights

If you are in the EU/EEA, under the GDPR you have the right to access, correct, delete, export and object to the processing of your personal data. To exercise any of these rights, contact us at contact@neuronik.io.

Changes

We may update this policy from time to time. The "last updated" date above reflects the latest version.

Contact

Questions about this policy? Email contact@neuronik.io.