Privacy Policy
This policy explains what personal data EasyDropshipping collects when you use easydropshipping.online, why we collect it, who processes it on our behalf, how long we keep it, and what you can ask us to do with it.
1. Who we are
EasyDropshipping is a suite of eight free AI tools for dropshippers, available at easydropshipping.online. The service is run by a private individual, not by a registered company. That person is the data controller for the personal data described here.
The way to reach them is support@easydropshipping.online. It is the only contact channel for the service, and it is read by the person who actually runs it. If you need the operator's full identity — to make a formal data protection request, for example — ask at that address and it will be given to you.
2. What we collect
Account data
To create an account you give us an email address and choose a password. Registration is not finished until you click the confirmation link we send to that address. The password is never stored in readable form: it is hashed by Supabase, our authentication provider, and is not visible to the operator at any point. We also keep the date the account was created.
What you put into the tools
The tools work on what you submit: product URLs, product titles and descriptions, keywords, supplier queries, ad or listing text, and similar inputs. Please do not paste other people's personal data into the tools — they are not designed to hold it.
Results we store for you
We store the analyses you run — the input you submitted and the result the tool produced — and link them to your account, so that your history is there when you sign back in.
Technical data
The application runs on a virtual private server rented from a hosting provider. That server keeps ordinary web logs: IP address, browser user agent, the page or endpoint requested, and a timestamp. They exist for security, abuse prevention and debugging, and the hosting provider stores them on our behalf.
Cookies
One first-party session cookie, es_session, keeps you signed in. There is no third-party advertising or tracking cookie on this site. See the Cookie Policy for the details.
3. Why we use it, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Create and run your account, sign you in | Email, password hash, session cookie | Performance of a contract |
| Run the AI tools and return results | What you submit to a tool | Performance of a contract |
| Show your past analyses in your account | Stored inputs and results | Performance of a contract |
| Account emails (confirmation, password reset, service notices) | Email address | Performance of a contract |
| Security, abuse prevention, rate limiting, debugging | Server logs, IP address | Legitimate interests — keeping a free service usable and not abused |
| Meeting legal obligations if we are required to | Whatever the obligation covers | Legal obligation |
We do not sell personal data, we do not share it with advertising networks, and we do not build advertising or behavioural profiles about you. All eight tools are free, so there is no payment step and we never ask for or store card or billing details.
4. Who processes data for us
We use a small number of service providers to run the service. Each one only handles the data it needs for its own part of the job, on its own systems.
| Provider | What it does | What it sees |
|---|---|---|
| Supabase | Authentication and the database that stores accounts and saved analyses | Email address, password hash, your stored inputs and results |
| DeepSeek | Runs the AI analysis behind the tools | The text you submit to a tool for analysis |
| AliExpress (official API) | Supplies product and pricing data used by the tools | The product identifiers or search terms a tool looks up — not your account data |
| Namecheap Private Email | Delivers transactional email sent from support@easydropshipping.online | Your email address and the content of that message |
| Our hosting provider | Rents us the virtual private server the application runs on, and stores the server logs on our behalf | Server logs, and whatever is held on the server or passing through it |
These providers run on their own infrastructure, and some of them operate outside the UK and the European Economic Area. Where your data leaves your own region, that transfer relies on the safeguards each provider has put in place for its customers — standard contractual clauses, for instance. Those safeguards are the providers' own; we have not entered into any separate transfer arrangement of our own, and the current terms are published on each provider's site.
5. How long we keep it
- Account data — for as long as your account exists. If you ask us to delete the account, it goes, along with the analyses attached to it.
- Saved analyses — until you delete them or delete your account.
- Session cookie — 30 days from sign-in, or until you sign out.
- Server logs — 30 days, then deleted. That is long enough to investigate an incident and no longer.
6. Your rights
If the GDPR or a comparable law applies to you, you have the right to:
- Access — get a copy of the personal data we hold about you.
- Rectification — have inaccurate data corrected.
- Erasure — have your account and its data deleted.
- Portability — receive your data in a structured, machine-readable format.
- Restriction — ask us to pause processing while a dispute is resolved.
- Objection — object to processing we base on legitimate interests.
- Withdraw consent — where we rely on your consent for something, take it back at any time, without affecting what was done before.
- Complain — if you are in the UK, the EU/EEA or another region with data protection law, lodge a complaint with the data protection authority for your own country.
7. Security
The site is served over HTTPS. Passwords are hashed by our authentication provider and are never visible to us. The session cookie is HttpOnly and Secure, so it cannot be read by scripts in the browser and is never sent over an unencrypted connection. No system is perfectly secure, but we keep the surface small: no payment data, no advertising trackers, no data broker feeds.
8. Children
The service is meant for people running or starting a business and is not directed at children under 16. We do not knowingly collect data from them. If you believe a child has created an account, tell us and we will remove it.
9. Changes to this policy
If we change how we handle data, we update this page and move the "last updated" date. Material changes will also be announced by email to registered users.
10. Contact
Everything to do with your data — questions, corrections, deletion, or a copy of what we hold — goes to support@easydropshipping.online. The service is run by an individual rather than a company, so there is no registered office and no other channel; that address is it. The operator's full identity is available on request to the same address.