Legal

Privacy Policy

Last Updated: July 4, 2026

Datana Studios LLC, a New Jersey limited liability company located at 971 US Highway 202N, Ste R, Branchburg, NJ 08876, USA ("BaaSdrop", "we", "us"), provides a backend platform for application developers. This policy explains how we handle personal data when we act as a controller: data about visitors to our websites, people who sign up for the BaaSdrop console, and our billing relationship with customers.

If you are an end user of an app built on BaaSdrop: the developer of that app is responsible for your data, and their privacy policy applies. We process end-user data only on the developer's behalf, under our Data Processing Addendum. Please direct requests about your data in a customer's app to that app's developer; if you contact us, we will redirect you to them.

Data We Collect

  • Account data: Name, email, organization, and credentials when you create a console account.
  • Billing data: Plan, transaction history, and payment status. Card details are collected and processed by Stripe, not by us.
  • Platform usage data: API call volumes, feature usage, resource consumption, and console activity — used to operate metering, quotas, and billing.
  • Support communications: Messages you send to our support and sales addresses.
  • Website data: Server logs (IP address, user agent, pages requested) and the minimal analytics described in our Cookie Notice.

How We Use It

| Purpose | Legal basis (GDPR) | |---|---| | Provide the console and Platform account | Performance of a contract | | Metering, quotas, and billing | Performance of a contract | | Service and security notifications | Performance of a contract; legitimate interests | | Improving the Platform; capacity planning | Legitimate interests | | Fraud and abuse prevention | Legitimate interests; legal obligation | | Marketing communications | Consent (opt-in, revocable) | | Legal compliance | Legal obligation |

Sharing

We do not sell personal data. We share it only with the service providers on our Subprocessors page (hosting, payments, error monitoring) acting on our instructions, with authorities when legally required, and in connection with a business transfer (with notice).

International Transfers

We are US-based. Transfers from the EEA/UK/Switzerland rely on Standard Contractual Clauses with our providers, or the EU–US Data Privacy Framework where the provider is certified.

Retention

Account data is kept for the life of your account; billing records for 7 years; server logs and diagnostics for 90 days; usage analytics up to 24 months. When you close your account, we delete controller data on this schedule and handle Customer Data per the DPA and the export window in the Customer Terms.

Your Rights

Wherever you are located, you may access, correct, delete, export, or object to our processing of your personal data, and withdraw consent, by emailing privacy@baasdrop.com. We respond within 30 days. EEA/UK residents may also complain to their supervisory authority. California residents have the corresponding CCPA rights; we do not sell or share personal information as defined by the CCPA.

Security

The security measures in DPA Annex II — encryption in transit and at rest, tenant isolation, least-privilege access, logging — protect controller data as well.

Changes

We will notify you by email or console notice before material changes take effect. The date above identifies the current version.

Contact

privacy@baasdrop.com · Datana Studios LLC, 971 US Highway 202N, Ste R, Branchburg, NJ 08876, USA