Privacy Policy

Last Updated: February 5, 2026

This Privacy Policy describes how XG Consulting, Inc., a California corporation ("Company", "we", "us", or "our"), collects, uses, and shares information in connection with your use of ZelloDrop ("Service"). By using the Service, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

Seller Information: When you create a product listing, we collect the product title, description, price, your email address (if provided), and the digital file you upload.
Buyer Information: When you make a purchase, we collect your email address for delivery purposes. Payment information is collected and processed directly by Stripe; we do not receive or store your full credit card details.

1.2 Information Collected Automatically

Log Data: We automatically collect information your browser sends when visiting the Service, including IP address, browser type, pages visited, time and date of visit, and referring URL.
Device Information: We may collect information about the device you use to access the Service, including device type, operating system, and unique device identifiers.
Cookies: We use essential cookies necessary for the Service to function. We do not use tracking or advertising cookies.

1.3 Information from Third Parties

Payment Processor: We receive transaction confirmation data from Stripe, including transaction ID, amount, and payment status.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the Service
Process transactions and deliver digital products
Send transactional communications (purchase confirmations, download links)
Detect, prevent, and address fraud, abuse, and security issues
Comply with legal obligations
Enforce our Terms of Service

We do not sell your personal information. We do not use your information for marketing purposes. We do not send promotional emails.

3. How We Share Your Information

We may share your information in the following circumstances:

Recipient	Purpose	Data Shared
Stripe, Inc.	Payment processing	Email, transaction data
Amazon Web Services	File storage and hosting	Uploaded files
Law Enforcement	Legal compliance	As required by law

We may also share information:

With your consent
To comply with legal process or government requests
To protect our rights, privacy, safety, or property
In connection with a merger, acquisition, or sale of assets

4. Data Retention

Product Files: Stored indefinitely until deleted by the Seller or we discontinue the Service.
Transaction Data: Retained for 7 years for legal and accounting purposes.
Log Data: Retained for up to 90 days.

You may request deletion of your data by contacting us at support@zellodrop.com.

5. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

HTTPS encryption for all data in transit
Encryption at rest for stored files (AWS S3 SSE)
Signed, time-limited download URLs
Access controls and authentication

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal information
Correction: Request correction of inaccurate information
Deletion: Request deletion of your personal information
Portability: Request your data in a portable format
Objection: Object to certain processing of your information

To exercise these rights, contact us at support@zellodrop.com. We will respond within 30 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

Know what personal information we collect, use, and disclose
Request deletion of your personal information
Opt out of the sale of personal information (we do not sell personal information)
Non-discrimination for exercising your privacy rights

To submit a CCPA request, email support@zellodrop.com with subject line "CCPA Request".

8. International Data Transfers

The Service is operated in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to such transfer.

9. Children's Privacy

The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly. If you believe we have collected information from a child, contact us at support@zellodrop.com.

10. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service with a new "Last Updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Do Not Track

We do not respond to Do Not Track signals because we do not track users across third-party websites.

13. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, contact us at:

XG Consulting, Inc.
Email: support@zellodrop.com

14. Data Controller

XG Consulting, Inc. is the data controller responsible for your personal information. For privacy inquiries, contact support@zellodrop.com.