Privacy Policy

At DRYVN (“DRYVN,” “We,” “Us,” or “Our”), accessible from www.dryvn.com, one of our main priorities is the privacy of our visitors and clients. This Privacy Policy describes the types of information we collect, how we use it, and the choices you have regarding your information.

If you have additional questions or require more information about our Privacy Policy, do not hesitate to contact us.

This Privacy Policy applies to our website and to the DRYVN platform and Services, including information we receive when you connect third-party platform accounts (such as Meta, Google, Shopify, or Microsoft Advertising) to DRYVN. It is not applicable to information collected offline or via channels other than the website and Services.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Information We Collect

The personal information we ask you to provide, and the reasons why we ask for it, will be made clear at the point of collection.

If you contact us directly, we may receive additional information about you, including your name, email address, phone number, the contents of the message and/or attachments you send, and any other information you choose to provide.

When you register for our Services, we may ask for your contact information, including items such as name, company name, address, email address, and telephone number.

DRYVN does not share mobile numbers, text messaging originator opt-in data, or consent with any third parties or affiliates for marketing or promotional purposes.

Mobile information may be shared only with subcontractors and service providers that support the delivery of SMS services, such as messaging platforms, telecommunications providers, or customer support vendors. This information is used solely to provide and operate the messaging service.

All other use case categories exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.

How We Use Your Information

We use the information we collect in various ways, including but not limited to:

• Provide, operate, and maintain our website and Services
• Improve, personalize, and expand our website and Services
• Understand and analyze how you use our website
• Develop new products, services, features, and functionality
• Communicate with you, either directly or through one of our partners, including for customer service, updates, and marketing and promotional purposes
• Send you emails and other communications
• Detect and prevent fraud

DRYVN follows a standard procedure of using log files. These files log visitors when they visit the website. Information collected by log files includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and number of clicks. These are not linked to any personally identifiable information and are used to analyze trends, administer the site, track users’ movement, and gather demographic information.

We will not sell your personal or business information to any third party for any reason.

Platform Integrations and Connected Account Data

DRYVN’s Services allow clients to connect third-party business and advertising accounts — such as Meta (Facebook and Instagram), Google, Shopify, and Microsoft Advertising — so that we can provide reporting, analysis, and account management services. When you authorize a connection, we may collect and store:

• Access credentials (OAuth access and refresh tokens) that authorize DRYVN to access the connected account on your behalf. Tokens are encrypted at rest using industry-standard authenticated encryption (AES-256-GCM), decrypted only server-side to perform the authorized service, and every access of stored credentials is recorded in an internal audit log.
• Account identifiers and metadata, such as ad account IDs, Page and business asset identifiers, store identifiers, and property/site identifiers.
• Performance and business data from the connected platform, such as advertising performance metrics, analytics data, product catalog data, and order/sales data, used solely to deliver the Services to the client that owns the connection.

We use connected-account data only to provide, operate, and improve the Services for the client who authorized the connection — including reporting, analysis, campaign and catalog management where engaged — and for no other purpose. We do not sell connected-account data. We do not use it for advertising to third parties, credit decisions, or surveillance. We share it only with service providers (such as our hosting and database providers) as necessary to operate the Services, under obligations consistent with this policy.

Connected-account data is retained while the connection remains active and as needed to provide the Services. When a connection is disconnected or a verified deletion request is received, associated stored credentials are revoked and deleted and associated platform data is deleted, except where limited retention is required by law. See our Data Deletion page for how to disconnect and request deletion.

Meta Platform Data

When you connect a Meta account through Facebook Login for Business, the data we receive (such as ad account, Page, and catalog identifiers, and advertising insights) is “Platform Data” under the Meta Platform Terms. We process Meta Platform Data in accordance with the Meta Platform Terms and Developer Policies: we use it only to provide the requested Services to the client that authorized access, we do not sell it, and we maintain administrative, technical, and physical safeguards — including encryption at rest and access logging — to protect it. You can revoke DRYVN’s access at any time from your Meta settings (Settings & Privacy → Business Integrations) and request deletion as described on our Data Deletion page.

Google API Services — Limited Use Disclosure

DRYVN’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data (such as Google Analytics, Search Console, and Business Profile data) is used only to provide and improve the user-facing features of the Services for the client that authorized the connection; it is not used for advertising, not sold, and not transferred except as necessary to provide the Services, to comply with law, or as part of a merger or acquisition with notice. Humans do not read this data except with the client’s affirmative consent, for security purposes, to comply with law, or where the data is aggregated and anonymized. You can revoke DRYVN’s access at any time at myaccount.google.com/connections.

Shopify and Commerce Platform Data

When a client connects a Shopify store, we access store data (such as products, orders, and customers where authorized) solely to provide reporting, analysis, and commerce operations services to that client. We honor platform data-subject obligations, including processing customer data-deletion and shop-deletion requests issued by the platform. Access can be revoked at any time by uninstalling the DRYVN app from the store; stored credentials are then revoked and deleted per our Data Deletion page.

Cookies and Web Beacons

Like any other website, DRYVN uses cookies. These cookies store information including visitors’ preferences and pages visited. The information is used to optimize the user experience by customizing web page content based on visitors’ browser type and other information.

You can choose to disable cookies through your individual browser options. For more information about cookie management, refer to your browser’s documentation.

Third Party Privacy Policies

DRYVN’s Privacy Policy does not apply to other advertisers or websites. We advise you to consult the respective Privacy Policies of any third parties you may encounter through the use of our site, as they may include their own practices and opt-out instructions.

California-Specific Policies (CCPA Compliance)

The California Consumer Privacy Act of 2018 (“CCPA”) provides California resident consumers with specific rights regarding their personal information. This section describes your CCPA rights and explains how to exercise them.

Access to Specific Information and Data Portability Rights

You have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. Once we receive and confirm your verifiable consumer request, we will disclose to you:

• The categories of personal information we collected about you
• The categories of sources for the personal information we collected
• Our business or commercial purpose for collecting that personal information
• The categories of third parties with whom we share that personal information
• The specific pieces of personal information we collected about you (data portability request)
• If we sold or disclosed your personal information for a business purpose, two separate lists: sales identifying personal information categories each recipient purchased, and disclosures for a business purpose identifying categories each recipient obtained

Deletion Request Rights

You have the right to request that we delete any of your personal information that we collected and retained, subject to certain exceptions. Once we receive and confirm your verifiable consumer request, we will delete (and direct our service providers to delete) your personal information from our records unless an exception applies.

We may deny your deletion request if retaining the information is necessary for us or our service providers to:

• Complete the transaction for which we collected the personal information, provide a good or service you requested, or otherwise perform our contract with you
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities
• Debug products to identify and repair errors that impair existing intended functionality
• Exercise free speech or ensure the right of another consumer to exercise their free speech rights, or exercise another right provided for by law
• Comply with the California Electronic Communications Privacy Act (Cal. Penal Code § 1546 et seq.)
• Engage in public or peer-reviewed scientific, historical, or statistical research in the public interest that adheres to all other applicable ethics and privacy laws
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us
• Comply with a legal obligation
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it

Exercising Access, Data Portability, Deletion, and Opt-Out Rights

To exercise the access, portability, deletion, or opt-out rights described above, please submit a verifiable consumer request to us by emailing privacy@dryvn.com or by calling (904) 315-6166.

Only you, or a person registered with the California Secretary of State that you authorize to act on your behalf, may make a verifiable consumer request related to your personal information. You may also make a verifiable consumer request on behalf of your minor child.

You may only make a verifiable consumer request for access or data portability twice within a 12-month period. The verifiable consumer request must:

• Provide sufficient information that allows us to reasonably verify you are the person (or an authorized representative) whose personal information we collected
• Describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it

We cannot respond to your request or provide personal information if we cannot verify your identity or authority to make the request. Making a verifiable consumer request does not require you to create an account with us.

Response Timing and Format

We endeavor to respond to a verifiable consumer request within 45 days of receipt. If we require more time (up to 90 days), we will inform you of the reason and extension period in writing. Any disclosures we provide will only cover the 12-month period preceding the request. We do not charge a fee to process or respond to a verifiable consumer request unless it is excessive, repetitive, or manifestly unfounded.

Non-Discrimination

We will not discriminate against you for exercising any of your CCPA rights. Unless permitted by the CCPA, we will not deny you goods or services, charge you different prices, provide a different level or quality of goods or services, or suggest that you may receive different treatment based on exercising your rights.

Data Security

We maintain administrative, technical, and physical safeguards designed to protect your information, including encryption of stored access credentials at rest (AES-256-GCM), restriction of credential decryption to server-side systems, access audit logging, role-based access controls, and centralized secret management. No method of transmission or storage is 100% secure, but we work to protect your information consistent with industry practice and applicable platform requirements (including the Meta Platform Terms and the Google API Services User Data Policy).

Changes to Our Privacy Policy

We reserve the right to amend this Privacy Policy at our discretion and at any time. When we make changes, we will notify you by email or through a notice on our website.

Contact Information

If you have questions or comments about this Privacy Policy, the ways in which we collect and use your personal information, or wish to exercise your rights under applicable laws, please contact us: