Operational draft. This policy is an operational first draft prepared by DropZillas for internal use and future attorney review. It has not been reviewed or approved by an attorney and does not constitute legal advice. Placeholders such as "[legal entity name]" and "[legal contact email]" are filled from the admin-configured legal identity settings once provided. Contact us through the contact page with any questions about a specific term.
This Privacy Policy explains how DropZillas collects, uses, discloses, and safeguards information when you visit the DropZillas website, apply to become a seller, place or fulfill orders, connect a storefront, request repackaging or concierge pickup, or otherwise use the Services.
1. Who we are and scope
DropZillas is a U.S.-based fulfillment operator headquartered in Texas. This policy covers information handled through DropZillas-controlled websites, dashboards, APIs, and back-office systems. Third-party services (carriers, payment processors, e-commerce platforms, marketplaces, printing bridges) that connect to DropZillas have their own privacy practices, which you should review separately.
2. Categories of information we collect
Account and business information. Name, business name, DBA, email, phone, business type, EIN or tax identifiers where you provide them, state and country, business website, sales channels, product categories, and application notes you submit through the seller application, contact form, or account creation.
Order and fulfillment information. Products, quantities, variants, customization/branding instructions, storefront/channel of origin, order references, ship-from and ship-to addresses, customer contact details you submit for fulfillment, packing instructions, pick/pack scan records, printer routing choices, and tracking events.
Repackaging, blind-fulfillment, and concierge-pickup information. Retailer or supplier name, store location or address, pickup or order reference, contact instructions you provide, authorized pickup-agent confirmations, seller notes, uploaded artwork or reference photos, and QC records generated during production.
Payment information. DropZillas uses third-party payment processors to charge cards, ACH, or other supported methods. We do not store full payment card numbers on our own systems. We may retain limited non-sensitive references (last four digits, brand, expiration month, processor token or customer ID) to reconcile charges and refunds.
Storefront and product content. Product titles, descriptions, images, SEO metadata, blog posts, category pages, custom-apparel designs, and marketing assets you or your team publish through the DropZillas platform.
Device and usage information. IP address, user agent, referring URL, timestamps, request paths, error logs, session identifiers, and similar technical data collected when you use our sites and APIs. We use this data to operate, secure, and improve the Services.
Cookies and similar technologies. DropZillas uses cookies and comparable storage to keep you signed in, remember preferences, and support security. Analytics or performance tooling may be enabled on specific surfaces; where required, cookie choices are surfaced in the relevant interface. You can generally control cookies through your browser.
Communications. Contact-form submissions, support messages, and records of correspondence with our team.
3. Where the information comes from
Directly from you, from an authorized user of your account, from an integrated storefront or channel, from a payment processor or carrier we work with on your behalf, and from routine technical logging.
4. How we use the information
- To review reseller applications and manage your account.
- To operate storefronts, catalog, and fulfillment on your behalf.
- To route orders through pick/pack, printing, shipping providers, and optional services such as repackaging, kitting, blind fulfillment, and concierge retail pickup.
- To calculate rates, purchase labels, and hand shipments to carriers.
- To communicate with you about your account, orders, quotes, approvals, invoices, and support requests.
- To detect, investigate, and prevent fraud, abuse, prohibited-goods violations, counterfeit sourcing, and security incidents.
- To comply with legal obligations and respond to lawful requests.
- To improve, secure, and expand the Services.
5. How we share the information
DropZillas does not sell your personal information. We share information only as needed to run the Services or as required by law:
- Service providers and processors — hosting, database, email, logging, analytics, storage, printer bridges, and similar vendors bound to appropriate confidentiality and security expectations.
- Payment processors — to charge, refund, or reconcile transactions. Full card data is submitted to the processor, not stored by DropZillas.
- Shipping providers and carriers — such as (as configured) Shippo, EasyPost, and the carriers they connect to. Fulfillment requires transmitting ship-to name, address, contact details, package attributes, and reference numbers so the carrier can deliver the shipment. Once handed off, the carrier's own privacy practices apply to the transportation leg.
- E-commerce platforms and marketplaces you connect — for order sync, catalog updates, tracking events, and returns.
- Legal, safety, and business transfers — to comply with law, respond to lawful process, protect rights and safety, or in connection with a merger, acquisition, or asset sale (subject to standard successor obligations).
6. Retention
We keep information for as long as reasonably necessary to operate the Services, meet legal and tax obligations, resolve disputes, enforce agreements, defend claims, and maintain business records. Retention windows differ by data category and are periodically reviewed.
7. Security
We use administrative, technical, and physical safeguards designed to protect information appropriate to its sensitivity, including authentication, access controls, encryption in transit for public web traffic, and separation of privileged operations. No security program is perfect and no online service can guarantee absolute security.
8. Children
The Services are not directed to children under 13. If you believe a child has provided personal information to us, contact us and we will take reasonable steps to delete it.
9. U.S. and Texas focus; state privacy rights
DropZillas is a U.S. business primarily serving U.S. sellers and end customers. Depending on where you live, applicable state privacy laws may give you rights to request access, correction, deletion, or a copy of personal information about you, or to object to certain uses. To exercise a right, contact us through the contact page and identify the request and the account or email involved. We may need to verify your identity before acting. We do not knowingly sell personal information or share it for cross-context behavioral advertising as those terms are defined by state privacy laws.
10. International visitors
The Services are hosted in and operated from the United States. If you access them from outside the U.S., you understand that information you submit will be transferred to and processed in the United States, which may have different data-protection rules than your country.
11. Changes
We may update this Privacy Policy from time to time. The effective date at the top of this page reflects the current version. Material changes will be highlighted where appropriate; continued use of the Services after an update means you accept the revised policy.
12. Contact
Reach us through the contact page for privacy questions or requests. Once configured by the admin, the legal contact email published in the DropZillas legal identity settings applies.
This document is one of DropZillas' Legal & Policies. Related policies: Terms & Conditions · Privacy Policy · Reseller / Seller Agreement · Shipping & Fulfillment Policy · Returns & Refund Policy · Prohibited & Restricted Goods Policy.