Privacy policy
Skydrop runs warehousing, order confirmation calls and courier dispatch for online sellers in Bangladesh who ship to customers in India. This page says what information we handle to do that, why, who we share it with, and how to reach us about it.
What we collect
- Sellers and their teams: names, email addresses, phone numbers, company details, the bank details we pay you into, and what you do in the seller app — orders, products, stock and support tickets.
- Our sellers’ customers: name, phone number, delivery address, the items ordered and the amount to collect. Sellers give us these so we can confirm the order by phone and deliver it.
- People who request an invite: what you type into the form.
- Visitors to our websites: standard server logs — IP address, browser and time — kept for security.
Why we use it
- To fulfil orders: call the customer to confirm, pick and pack the goods, hand them to a courier, track them, and handle returns.
- To run seller accounts, pay sellers what they are owed, and keep the records tax and accounting law requires.
- To keep the service secure and to answer your questions.
We do not sell personal information, and we do not use our sellers’ customers for our own marketing.
Who we share it with
- Couriers that carry a parcel — such as Delhivery, Shiprocket and the carriers they use — receive the delivery details they need to deliver it.
- The seller whose order it is.
- Providers that run our systems for us: DigitalOcean (servers, database and file storage, in Singapore and India), Cloudflare (network), Resend (email) and Google (encrypted backups, below).
- Authorities, when the law requires it.
Google user data
Skydrop uses its own Google app only to store Skydrop’s encrypted backups in Skydrop’s own Google Drive, with access limited to the files that app creates. It does not request, read or store anyone else’s Google account data, and nothing it stores is shared with anyone.
How long we keep it
Order and account records are kept for as long as we need them to deliver, handle returns and disputes, and meet tax and accounting obligations, then deleted or anonymised. Backups expire on a fixed schedule and are kept no longer than 24 months.
How we protect it
Connections are encrypted, access inside Skydrop is limited by role, sensitive actions are logged, and backups are encrypted before they leave our servers.
Your choices
To see, correct or delete information we hold about you, write to hello@skydrop.online. If you are a customer of one of our sellers, you can also ask the seller. We may have to keep some records the law requires.
Changes
We update this page when our practices change; the date at the top says when it last did.