Version

1.3

Privacy Policy

Drott Labs LLC (“Drott,” “we,” “us,” or “our”) explains here how we collect, use, disclose and protect personal information, and how you can exercise your privacy rights.

1. What this policy covers

This policy covers personal information we handle as a business or controller when you visit our website, request a briefing, communicate with us, or use an account for our services. This includes business contact, account, billing, support and service-usage information. Personal information means information that identifies you or can reasonably be linked to you.

Customer Content. When Drott processes documents, prompts, files or other Customer Content on behalf of an institutional customer, we act as a service provider or processor under that customer’s instructions and the applicable customer agreement, including any applicable Data Processing Addendum. That processing is governed by those agreements, rather than this general notice. For requests about that information, contact the organization responsible for it; we can help direct your request.

2. Information we collect

The information we collect depends on how you interact with Drott:

  • Information you provide: your name, work email, phone number, company, role, account credentials, onboarding details, billing and transaction information, and communications such as inquiries, feedback and support requests.

  • Information collected automatically: IP address, approximate location derived from it, browser and device information, referring pages, pages viewed, interactions, access times, and usage, diagnostic and performance logs.

  • Information from others: information provided by your organization or workspace administrator, payment and authentication providers, analytics and other service providers, referrals and publicly available business sources.

Customer Content processed on an organization’s behalf is addressed in the scope above.

3. How we use personal information

We use personal information to:

  • Respond to inquiries, arrange briefings, onboard customers and provide support.

  • Operate accounts and workspaces, authenticate users, manage access and administer subscriptions, invoices and transactions.

  • Maintain, troubleshoot and improve our website and services, including measuring usage, reliability and performance.

  • Send service notices and, where permitted by law and consistent with your preferences, marketing communications.

  • Detect and prevent fraud, abuse and unauthorized access; meet legal obligations; resolve disputes; enforce agreements; and support business transactions.

We may use aggregated or deidentified information that cannot reasonably identify you for analytics and service improvement.

4. How we disclose information

We may disclose personal information to:

  • Service providers that support hosting, storage, communications, authentication, analytics, billing, security and customer support, as needed to perform services for us.

  • Your organization’s authorized administrators when you use an organizational account or managed workspace, subject to the applicable agreement and settings.

  • Legal and professional recipients when required by law or reasonably necessary to protect rights, safety or security, investigate misuse, or respond to lawful requests.

  • Parties to a business transaction in connection with an actual or proposed financing, merger, acquisition, reorganization, asset sale or similar event.

  • Other recipients at your direction or with your consent.

We may also disclose aggregated or deidentified information that does not reasonably identify you.

Drott does not sell Customer Content or share it for third parties’ own marketing or cross-context behavioral advertising. We do not use Customer Content to train public or shared foundation models for the benefit of unrelated customers. These statements concern Customer Content and do not change the scope described above.

5. Cookies, analytics and third-party services

We and our service providers may use cookies and similar technologies to maintain sessions, remember preferences, secure our services, understand traffic and usage, improve performance and measure communications or campaigns where permitted.

You can manage cookies through your browser settings. Blocking them may affect functionality. Where applicable law requires consent for non-essential technologies, we request that consent before using them.

Third-party websites, scheduling tools and other services linked from Drott have their own privacy notices. Review those notices when you use those services or provide information to them.

6. Retention and security

We retain personal information for as long as reasonably necessary for the purposes described here. Retention depends on the information, the service or relationship involved, and legal, tax, accounting, security, dispute-resolution and agreement-enforcement needs. Some information may be retained for these purposes after an account or relationship ends. Customer Content retention, return and deletion are governed by the applicable customer agreement.

We use commercially reasonable technical, administrative and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration or disclosure. No system is completely secure. See our Security page for an overview of our approach.

7. International processing

We may store and process personal information in the United States and other countries where we or our service providers operate. Those countries’ privacy laws may differ from those where you live. Where required, we use appropriate safeguards for international transfers. Contact us for information about safeguards relevant to your personal information.

8. Your rights and choices

Depending on your location and applicable law, you may have rights to access, correct, delete or receive a portable copy of your personal information; restrict or object to processing; withdraw consent where we rely on it; and complain to a privacy regulator. These rights are subject to applicable conditions and exceptions.

To make a request, email privacy@drott.ai. We may need to verify your identity and, where relevant, an authorized agent’s authority. Where applicable law provides an appeal right, you can appeal our response through the same address. We will not discriminate against you for exercising applicable privacy rights.

You can update account information through account settings where available. You can unsubscribe from marketing emails using the link in the email or by contacting us. Service, billing, support, security and legal notices may still be sent.

For personal information processed on behalf of a customer, contact that customer as described in Section 1.

9. Additional regional information

United States

Where applicable, state privacy laws may give you rights to know about or access the personal information we collect, correct or delete it, receive a portable copy, and opt out of specified sales, sharing, targeted advertising or profiling. California residents may request information about collection, use and disclosure, subject to legal exceptions. Nevada residents may request to opt out of certain future sales of covered information. Use the contact above to make a request.

Sections 2–4 describe the categories, sources, purposes and recipients of personal information; Section 6 describes retention. Our Customer Content commitments in Section 4 apply to that content.

European Economic Area, United Kingdom and Switzerland

Drott Labs LLC is the controller for the personal information covered by this policy. Where required, we rely on performance of a contract to provide requested services, legitimate interests in operating, securing, improving and administering our business and services, compliance with legal obligations, or consent where required.

You may exercise the rights described in Section 8 and complain to your local data protection authority. Withdrawing consent does not affect the lawfulness of earlier processing. See Section 7 for international processing and contact us with questions about the legal basis or safeguards that apply to your information.

10. Children

Our services are intended for business use and are not directed to anyone under 18. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided personal information to us, contact us so we can review and address it.

11. Changes to this policy

We may update this policy as our practices or legal requirements change. The date at the top identifies the latest revision. We will provide any additional notice required by applicable law for material changes.

12. Contact Drott

For privacy questions or requests:

Drott Labs LLC
17 State Street, 40th Floor
New York, NY 10004
privacy@drott.ai