Privacy Policy

Last updated: July 20, 2026  ·  Effective: July 20, 2026

This Privacy Policy explains how Wints LLC collects, uses, shares, and protects your information when you use the ClawDrop website and any applications, integrations, or services we operate — including apps built on third-party platform APIs such as LinkedIn, Google, and Meta (Facebook and Instagram).

1. Who we are

ClawDrop is operated by Wints LLC ("we," "us," or "our"), a company based in the United States. For the purposes of applicable data protection laws, Wints LLC is the data controller responsible for the personal information described in this policy.

If you have any questions about this policy or how your data is handled, you can reach us at dhruv@clawdrop.org.

2. Scope of this policy

This policy applies to:

• The clawdrop.org website and its subpages;
• The ClawDrop newsletter and any email communications you subscribe to;
• Any applications, tools, or integrations we develop and operate that connect to third-party platform APIs — including, but not limited to, apps built on the LinkedIn, Google, and Meta (Facebook and Instagram) platforms — as well as any other third-party service you choose to connect.

When you authorize one of our applications to connect to a third-party platform, that platform's own privacy policy and terms also apply to the data it holds. This policy governs what we do with information once it reaches us.

3. Information we collect

Information you provide directly

• Contact details — such as your name and email address when you subscribe to the newsletter, submit a build, or contact us.
• Content you send us — messages, submissions, and any information you include when you communicate with us.

Information collected automatically

• Usage and device data — such as IP address, browser type, pages viewed, referring pages, and timestamps, collected through standard web logs and privacy-respecting analytics.
• Cookies and similar technologies — see Cookies & analytics.

Information from connected platforms

When you authorize one of our applications through a third-party platform's login or OAuth flow, we receive information from that platform as described in the next section.

4. Data from connected platforms (LinkedIn, Google, Meta & others)

Our applications may request access to specific data from platforms you connect. We only request the minimum scopes necessary to provide the feature you asked for, and only after you grant explicit consent through the platform's own authorization screen. Depending on the app and the permissions you approve, this may include:

• LinkedIn — basic profile information (such as name, headline, and profile picture), your email address, and, where you authorize it, the ability to read or publish content on your behalf. We use LinkedIn data solely to provide the requested functionality and in compliance with the LinkedIn API Terms of Use.
• Google — profile and email information, and, where you authorize it, access to specific Google services (such as Gmail, Drive, Calendar, or YouTube) limited to the scopes you approve. See Google user data & Limited Use below.
• Meta (Facebook and Instagram) — basic profile information and, where you authorize it, permissions to read or publish content, in compliance with the Meta Platform Terms.
• Other third-party services — any additional platform you choose to connect, limited to the scopes you approve.

5. How we use information

We use the information we collect to:

• Provide, operate, and maintain our website and applications;
• Deliver the specific features you authorize (for example, reading or publishing content on a connected platform at your request);
• Send the newsletter and respond to your messages;
• Monitor, secure, debug, and improve our services;
• Comply with legal obligations and enforce our terms.

We do not sell your personal information, and we do not use data obtained from connected platform APIs to train generalized machine-learning or AI models.

6. Google user data & Limited Use

Where our applications access data from Google APIs, our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We only use Google user data to provide or improve features that are visible and requested by you;
• We do not transfer or sell Google user data for advertising, marketing, or other unrelated purposes;
• We do not use Google user data to train generalized AI/ML models;
• We do not allow humans to read Google user data unless we have your consent for specific messages, it is necessary for security or to comply with the law, or the data has been aggregated and anonymized.

7. How we share information

We share personal information only in these limited circumstances:

• Service providers — trusted vendors that host our infrastructure, deliver email, or provide analytics, acting on our instructions and bound by confidentiality obligations (for example, our website host and email delivery provider).
• Legal and safety — when required by law, legal process, or to protect the rights, property, or safety of our users, the public, or us.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your direction — when you explicitly ask us to share information, such as publishing content to a platform you connected.

We do not sell your personal information or platform data to third parties.

8. Data retention

We retain personal information only for as long as necessary to provide our services, fulfill the purposes described in this policy, comply with our legal obligations, resolve disputes, and enforce our agreements. When you disconnect an application or request deletion, we delete or de-identify the associated platform data within a reasonable period, except where retention is required by law.

9. How we protect data

We use industry-standard technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS), access controls, and secure handling of authorization tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to promptly address any issues.

10. Your rights & choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Request correction or deletion of your information;
• Object to or restrict certain processing;
• Withdraw consent at any time (for example, by disconnecting a connected platform);
• Unsubscribe from our emails using the link in any message.

California residents: Under the California Consumer Privacy Act (CCPA/CPRA), you have the right to know what personal information we collect, to request its deletion, and to not be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA.

To exercise any of these rights, email us at dhruv@clawdrop.org. We will respond within the time required by applicable law.

11. Revoking access & deleting data

You can revoke an application's access to a connected platform at any time directly from that platform's settings:

• LinkedIn — Settings & Privacy → Data Privacy → Permitted Services.
• Google — myaccount.google.com/permissions.
• Meta (Facebook) — Settings & Privacy → Settings → Apps and Websites.

Revoking access stops future data access. To also have us delete data we already hold, email dhruv@clawdrop.org and we will delete it as described in Data retention.

12. Cookies & analytics

We use a small number of cookies and similar technologies to keep the site working, remember preferences, and understand aggregate usage. We use privacy-respecting analytics and do not use cookies to build advertising profiles. You can control cookies through your browser settings; disabling them may affect some features.

13. Children's privacy

Our services are intended for adults and are not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

14. International users

We are based in the United States, and your information may be processed and stored there. If you access our services from outside the United States, you understand your information may be transferred to and processed in a country with different data protection laws than your own. Where required, we rely on appropriate safeguards for such transfers.

15. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of our services after an update means you accept the revised policy.

16. Contact us

For questions, requests, or concerns about this Privacy Policy or your personal information, contact:

Wints LLC
Email: dhruv@clawdrop.org
Website: clawdrop.org

This policy is governed by the laws of the United States and the state in which Wints LLC is established, without regard to conflict-of-law principles.