Privacy Policy

Last updated: July 2026

DropPay ("we", "us", or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights regarding that information. We comply with applicable privacy laws in the jurisdictions where we operate.

1. Information we collect

When you create an account or use DropPay, we may collect:

  • Your name and email address when you sign up
  • Your XRP wallet address and destination tag when you add them to your profile
  • Payment request details you create (amounts, descriptions, dates, order IDs)
  • Customer name and email if captured during checkout
  • Usage information such as pages visited and features used
  • Your IP address and browser type for security and rate-limiting purposes
  • XRPL wallet addresses of parties making payments to your account via API, checkout, x402, or tip page
  • API request metadata such as timestamps, endpoints called, and payment amounts

2. How we use your information

We use the information we collect to:

  • Provide and improve the DropPay service
  • Send you email notifications about your account and payments
  • Respond to your support requests
  • Detect and prevent fraud or abuse
  • Provide payment analytics in your dashboard
  • Understand how people use DropPay so we can make it better

3. Payments and funds

DropPay does not process, hold, or have access to your customer funds at any point. All payments flow directly between XRP wallets on the XRP Ledger. We record payment request details (amounts, dates, status, transaction hashes) so you can track them in your dashboard, but we never touch your money.

When a payment request includes a reference currency (such as USD), the amount shown to the customer is converted to XRP at the rate locked at the time the payment page is opened. We record the reference amount and the XRP amount received. We do not guarantee any particular exchange rate.

4. PayPal billing

If you subscribe to DropPay Pro using PayPal, your billing is handled directly by PayPal. DropPay does not store or see your card number, bank account, or any other financial credentials. We receive a PayPal subscription ID to identify your active subscription and a notification from PayPal when payments succeed, fail, or are cancelled.

PayPal may collect and process your personal information in accordance with their own Privacy Policy. We encourage you to review PayPal's privacy practices at paypal.com.

5. Checkout and customer data

When a customer pays through a DropPay checkout page, we may collect and store:

  • The customer's name and email address if entered into the checkout form
  • The XRPL wallet address that sent the payment
  • The order ID and any other reference fields passed by the merchant

This information is stored on behalf of the merchant and is visible in their dashboard. Merchants are responsible for informing their customers that payment data is collected and processed by DropPay as part of the checkout flow.

6. Tip pages

When a supporter pays through a DropPay tip page (droppayxrp.com/tip/{handle}), we record the XRPL wallet address that sent the payment and the tip amount. No name or email is collected from tip page visitors. This data is visible to the tip page owner in their dashboard. Supporters are not required to create an account to send a tip.

7. API and AI agent access

If you use the DropPay API, MCP server, or x402 payment endpoints, we may collect additional data, including:

  • Your API key and the requests made with it
  • The XRPL wallet address of any party paying your account via x402
  • The API path, timestamp, and payment amount for each x402 transaction

This data is used to power dashboard analytics, detect abuse, and maintain accurate payment records. It is not shared with third parties beyond what is described in section 8.

If you use the DropPay MCP server to connect an AI assistant to your account, that assistant can read your payment history and create payment requests on your behalf using your API key. You are responsible for controlling which tools and systems have access to your API key.

8. Cookies and analytics

We use cookies to keep you logged in and remember your preferences. With your consent, we also use analytics tools to understand how people navigate the site. You can reject analytics cookies using the banner shown when you first visit. Rejecting analytics cookies does not affect your ability to use DropPay.

9. Sharing your information

We do not sell your personal information. We may share limited information with:

  • Service providers who help us run DropPay (such as our email provider)
  • PayPal, solely to manage your Pro subscription billing
  • Law enforcement when required by law

We do not share your information with advertisers or data brokers.

10. Data storage and location

Your data is stored on servers operated by DropPay and its service providers. By using DropPay, you acknowledge that your information may be processed and stored in a country other than your own. We take reasonable steps to ensure that any cross-border transfers are handled in accordance with applicable privacy law.

11. Data retention

We keep your account information for as long as your account is active. Payment records are retained for accounting and dispute purposes. If you delete your account, we remove your personal information within 30 days, except where we are required to keep it for legal reasons.

12. Your rights

You have the right to:

  • Access the personal information we hold about you
  • Request that we correct or delete your information
  • Withdraw consent for analytics at any time by clearing your browser storage

To exercise any of these rights, contact us via email.

13. Security

We take reasonable steps to protect your information, including using encrypted connections, hashed passwords, and secure third-party billing via PayPal. However, no system is completely secure. Please use a strong password and keep your recovery phrase safe.

14. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or by showing a notice on the dashboard. The date at the top of this page shows when it was last updated.

15. Contact

If you have any questions about this policy, please reach out via email or use the support page.

Also see our Terms of Service.