Privacy Policy

PRIVACY POLICY

Welcome to Drommo (“the Platform,” “we,” “us,” “our,” or “Drommo”).

This Privacy Policy explains how we collect, use, store, protect, and share the personal information of users who access or use our services available at:

https://drommo.com

Our commitment is to protect the privacy of our users and to process their personal data in accordance with applicable law, including, where applicable:

• The European Union General Data Protection Regulation (GDPR).
• The Mexican Federal Law on the Protection of Personal Data Held by Private Parties.
• The California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).
• Other applicable national and international privacy and data protection laws.

This Policy forms an integral part of the Drommo Terms and Conditions.

By accessing, registering for, or using any of our services, the user acknowledges having read this Policy and consents to the processing of their data in accordance with it.

1.1 Our Commitment

Drommo is committed to:

• Transparency.
• Information security.
• Privacy protection.
• The responsible processing of personal data.
• Compliance with applicable law.
• The continuous improvement of our security measures.

Our goal is to collect only the information necessary to provide a secure, efficient, and personalized platform.

1.2 What Is Drommo?

Drommo is a digital platform specializing in Artificial Intelligence resources.

Users may access content such as:

• Prompts for image generation.
• Prompts for video generation.
• Prompts for web development.
• Prompts for applications.
• Templates.
• HTML resources.
• Demos.
• Examples.
• Free resources.
• Paid content available by purchase or subscription.

In addition, the Platform incorporates Artificial Intelligence-based tools to help generate new prompts and improve user productivity.

1.3 Scope of This Policy

This Policy applies to the processing of data carried out when the user:

• Visits our website.
• Creates an account.
• Signs in through Clerk.
• Purchases products.
• Subscribes to a paid plan.
• Uses the AI-powered prompt generators.
• Downloads free resources.
• Downloads paid resources.
• Contacts support.
• Subscribes to the newsletter.
• Interacts with our email campaigns.
• Uses any of the features available on Drommo.

1.4 What This Policy Governs

This Policy explains:

• What information we collect.
• How we obtain it.
• What we use it for.
• With whom we share it.
• How long we retain it.
• How we protect the information.
• What rights users have.
• How to exercise those rights.

1.5 Related Documents

This Policy should be read together with:

• The Terms and Conditions.
• The Cookie Policy.
• Any specific policies relating to promotions.
• The purchase terms.
• The paid subscription policies.

In the event of any conflict regarding the processing of personal data, this Privacy Policy shall prevail.

1.6 Future Changes

Drommo may update this Policy when necessary due to:

• Technological changes.
• Legal changes.
• The addition of new services.
• New providers.
• Security improvements.
• New features.

When changes are material, users will be notified through appropriate means.

The controller of the personal data processed through Drommo is:

Magzin LLC

Address:

800 Third Avenue Associates

New York, NY 10022

United States

Website:

https://drommo.com

Support email:

help@drommo.com

Magzin LLC is responsible for determining the purposes and means by which the personal data collected by the Platform is processed.

2.1 Contact Information

For any questions regarding this Privacy Policy, users may contact us by:

Email

help@drommo.com

2.2 Managed Services

Magzin LLC manages, develops, and operates:

• Drommo.
• The technology infrastructure.
• The paid plans.
• Sales of digital resources.
• Subscriptions.
• Technical support.
• Communication campaigns.
• Artificial Intelligence-related systems.

2.3 Technology Providers

To provide our services, we use various specialized providers, including:

• Clerk
• Stripe
• MongoDB Atlas
• Cloudflare R2
• Google Gemini
• Cloudflare Analytics
• Resend
• Cloudflare

Each provider processes only the information necessary to provide the corresponding service and in accordance with its own contractual obligations and privacy policies.

2.4 Scope of Our Responsibility

Drommo is the controller of the personal data that it manages directly.

External providers act as processors or independent controllers, depending on the nature of the service provided and applicable law.

2.5 Privacy Contact

Requests relating to:

• Data protection.
• Deletion of information.
• GDPR rights.
• ARCO rights.
• CCPA rights.
• Security.
• Privacy-related incidents.

must be sent to:

help@drommo.com

This Privacy Policy governs the processing of personal data carried out by Drommo in connection with all services offered through the website:

https://drommo.com

This Policy applies to any person who interacts with the Platform, regardless of their country of residence, to the extent permitted by applicable law.

3.1 Persons to Whom It Applies

This Policy applies to:

• Website visitors.
• Registered users.
• Users with free accounts.
• Users with a paid plan.
• Purchasers of digital products.
• Subscribers.
• Affiliates.
• Persons who contact support.
• Persons who subscribe to the newsletter.
• Persons who use the Artificial Intelligence generators.
• Persons who download free resources.
• Persons who download paid resources.

3.2 Covered Services

This Policy governs the processing of data related to:

• Registration and sign-in through Clerk.
• Profile management.
• Purchase of prompts.
• Purchase of digital resources.
• Paid subscriptions.
• Billing through Stripe.
• The Stripe customer portal.
• Prompt generation through Google Gemini.
• Downloads of digital resources.
• HTML demos stored in Cloudflare R2.
• The affiliate program.
• Communications through Resend.
• Metrics through Cloudflare Analytics.
• Customer service.

3.3 Services Not Covered

This Policy does not govern the processing of data carried out directly by third-party services once the user leaves Drommo.

These include, for example:

• External websites.
• Platforms linked from Drommo.
• Social networks.
• External gateways.
• Third-party-owned sites.

Each of these services has its own privacy policies.

3.4 Territorial Scope

Drommo offers services to users in different countries.

Depending on the user’s place of residence, different regulations may apply, including:

• General Data Protection Regulation (GDPR).
• Federal Law on the Protection of Personal Data Held by Private Parties (Mexico).
• California Consumer Privacy Act (CCPA).
• California Privacy Rights Act (CPRA).
• Other local privacy laws.

Drommo will endeavor to comply with the obligations applicable under the relevant law in each case.

3.5 Third-Party Services

The Platform integrates services provided by specialized third parties, including:

• Clerk.
• Stripe.
• MongoDB Atlas.
• Cloudflare R2.
• Google Gemini.
• Cloudflare Analytics.
• Resend.

Each provider processes information only to the extent necessary to provide the corresponding service.

3.6 Exclusions

This Policy does not govern:

• Information collected outside Drommo.
• Third-party websites.
• Services not managed by Magzin LLC.
• Processing carried out by third parties over which Drommo has no control.

3.7 Acceptance

By using any of Drommo’s services, the user acknowledges having read this Policy and consents to the processing of their data in accordance with it.

Where required by law, additional consent will be requested through the appropriate mechanisms.

Drommo collects only the information necessary to provide its services, improve the user experience, ensure the security of the Platform, and comply with applicable legal obligations.

The information collected will depend on the services used by each user.

4.1 Information Provided Directly

When a user creates an account or interacts with the Platform, they may provide information such as:

• Name.
• Email address.
• Username.
• Profile picture (where applicable).
• Account preferences.
• Language.
• Country.
• Contact information.
• Information submitted through forms.

4.2 Authentication Information

Through Clerk, the Platform may process information relating to:

• Unique user identifier.
• Authentication status.
• Active sessions.
• Session tokens.
• Sign-in methods.
• Email verification.
• Metadata associated with the account.
• Information generated through webhooks.

Passwords are managed by Clerk, and Drommo does not directly store users’ passwords.

4.3 Purchase-Related Information

When a user makes a purchase or acquires a paid subscription, data such as the following may be processed:

• Customer identifier.
• Products purchased.
• Active subscriptions.
• Purchase history.
• Payment status.
• Invoices.
• Currency used.
• Billing country.

Financial data is processed through Stripe.

Drommo does not store full bank card numbers or security codes (CVV/CVC).

4.4 Information Stored in MongoDB Atlas

The MongoDB Atlas database may store information relating to:

• Users.
• Profiles.
• Preferences.
• Activity history.
• Downloaded resources.
• Favorite prompts.
• Purchases.
• Subscription status.
• The affiliate program.
• User settings.
• Technical logs necessary for the operation of the Platform.

4.5 AI-Related Information

When the user uses tools based on Google Gemini, data such as the following may be processed:

• Text entered by the user.
• Instructions provided.
• Selected settings.
• Generated output.
• Technical information necessary to execute the request.

This data is used to train our own artificial intelligence models only while the account's training permission is on, and anyone who turns it off stops contributing from that moment (Section 15).

4.6 Technical Information

During browsing, data such as the following may be collected automatically:

• IP address.
• Browser type.
• Operating system.
• Browser language.
• Screen resolution.
• Device type.
• Time zone.
• Pages visited.
• Time spent on the site.
• Referral source.
• Session identifiers.

This information is used to ensure the security, performance, and stability of the Platform.

4.7 Analytics Information

Through Cloudflare Analytics, statistical data may be collected relating to:

• Number of visitors.
• Interaction events.
• Site performance.
• Conversion.
• Time spent on the site.
• Navigation flow.
• Resource downloads.
• Use of paid features.
• Page performance.
• Technical errors.

This information is used to improve the Platform and understand general user behavior.

Since October 10, 2026 we record in Cloudflare Workers Analytics Engine, without cookies or storage on your device, the pages you visit and the buttons you use inside Drommo (never the text you type), along with a summary of the tools you use (chat, images, web pages, documents and others) and the credits you spent in the last 30 days. If tips and news emails are on, we use that summary to choose which tips and which plan to recommend to you. You can turn those emails off in Settings > Privacy or with the unsubscribe link in any email.

With that data we also calculate, to improve the service: whether your usage dropped compared with your previous weeks, how likely you are to be interested in a paid plan (based on the credits you use, how often you open Pricing and the tools you try), whether you came to Drommo from one of our emails, and how much you have paid in total (copied from Stripe). We also classify the general topic of your chat messages (for example, social media or programming) with automatic rules and keep only that label, never the text, to learn which services to offer. With emails on, you may get a message if your usage drops or a plan offer; we never make decisions with legal effects based on these calculations.

4.8 Communications Information

When the user interacts with our emails sent through Resend, data such as the following may be recorded:

• Delivery confirmation.
• Email opens (where technically possible).
• Link clicks.
• Delivery errors.
• Unsubscribes.
• Contact list status.

This data helps us ensure that our communications function properly and improve the user experience.

Drommo collects the information that the user voluntarily chooses to provide when using the Platform.

The amount and type of information will depend on the features used, the account settings, and the services purchased.

Our goal is to collect only the data reasonably necessary to provide the requested services.

5.1 Account Registration

When the user creates an account through Clerk, they may provide information such as:

• Name.
• Email address.
• Username.
• Profile photo (optional).
• Preferred language.
• Country or region.
• Account settings.

Depending on the authentication method selected, Clerk may manage additional information necessary to verify the user’s identity.

5.2 Profile Information

The user may voluntarily update information relating to their profile, including:

• Display name.
• Profile picture.
• Preferences.
• Language.
• Personal settings.
• Optional information related to their account.

All of this information may be modified or deleted using the tools available on the Platform or through Clerk, as applicable.

5.3 Information Submitted Through Forms

When the user completes forms available on Drommo, we may collect the information included in them, for example:

• Support inquiries.
• Bug reports.
• Feature requests.
• Comments.
• Feedback.
• Complaints.
• Privacy-related requests.
• Contact forms.

The information will be used exclusively to handle the corresponding request.

5.4 Purchases and Subscriptions

When the user purchases a paid resource or a subscription, they may provide information such as:

• Purchaser’s name.
• Email address.
• Billing country.
• Tax information where necessary.
• Data required by Stripe to complete the transaction.

Drommo does not have access to complete bank card information.

5.5 Affiliate Program

When the user participates in the affiliate program, we may collect information relating to:

• Affiliate code.
• Referral links.
• Attributed sales.
• Commissions earned.
• Payment status.
• Referral history.

This data is used solely to properly administer the affiliate program.

5.6 Use of Artificial Intelligence Tools

When the user uses the prompt generators powered by Google Gemini, they may provide information such as:

• Descriptions.
• Instructions.
• Initial prompt.
• Preferences.
• Generation parameters.
• Subsequent corrections.

This information will be used to generate the requested content and improve the user experience of the tool.

This data is used to train our own artificial intelligence models only while the account's training permission is on, and anyone who turns it off stops contributing from that moment (Section 15).

5.7 Communications with Support

When the user contacts our support team, we may process information such as:

• Email address.
• Name.
• Message content.
• Attachments sent voluntarily.
• Conversation history.
• Technical information necessary to resolve the issue.

This information will be used exclusively to provide assistance and improve the quality of the service.

5.8 Voluntarily Provided Information

The user may choose to provide additional information while using the Platform.

Drommo recommends not sending sensitive information, including:

• Full bank card numbers.
• Passwords.
• Official identity documents.
• Medical information.
• Confidential financial information.
• Any other data not necessary for the provision of the service.

In addition to the information provided directly by the user, Drommo automatically collects certain technical data necessary for the operation, security, and analysis of the Platform.

This information is obtained through standard Internet technologies, cookies, and analytics tools.

6.1 Device Information

When a user accesses Drommo, data such as the following may be collected:

• Device type.
• Operating system.
• Browser version.
• Browser language.
• Screen resolution.
• Time zone.
• Regional settings.
• Technical identifiers necessary for the session.

This data helps ensure the compatibility and proper functioning of the site.

6.2 Browsing Information

During browsing, data such as the following may be recorded:

• Pages visited.
• Resources viewed.
• Time spent on the site.
• Navigation sequence.
• Buttons used.
• Downloads made.
• Errors encountered.
• Load time.
• Date and time of access.

This information allows us to understand how users interact with the Platform and to detect potential operational issues.

6.3 IP Address

Drommo may record the IP address used during the connection.

The IP address may be used to:

• Detect suspicious activity.
• Prevent fraud.
• Protect the Platform.
• Analyze general statistics.
• Comply with legal obligations.

Where possible, anonymization or identifying-information minimization mechanisms will be applied in accordance with the options offered by the providers used.

6.4 Information Through Cloudflare Analytics

Cloudflare Analytics collects metrics relating to:

• Site speed.
• Response time.
• Performance.
• Technical errors.
• Availability.
• User experience.

This information allows us to continuously optimize Drommo’s infrastructure.

6.5 Cookies and Similar Technologies

The Platform uses cookies and equivalent technologies to:

• Keep the user signed in.
• Remember preferences.
• Analyze site usage.
• Improve performance.
• Protect security.
• Measure conversions.

Cookies are described in detail in the corresponding section of this Policy.

6.6 Technical Logs

To protect the Platform and ensure its operation, Drommo may generate technical logs relating to:

• System errors.
• Authentication failures.
• Suspicious activity.
• Access events.
• Service status.
• Security-related events.
• Webhook operation.

These logs are used exclusively for technical, security, and legal compliance purposes.

To provide Drommo’s services in a secure, efficient, and personalized manner, we use various specialized technology providers.

Depending on the services used by the user, we may receive information from those providers.

Each provider processes only the information necessary to deliver its respective service, in accordance with its own privacy policies and the contractual agreements in effect.

7.1 Information received from Clerk

Drommo uses Clerk as its authentication and identity management provider.

Through Clerk, we may receive information such as:

• Unique user identifier.
• Verified email address.
• User’s name.
• Profile photo (if any).
• Authentication status.
• Active session information.
• Account creation date.
• Public metadata.
• Authorized private metadata.
• Events generated through webhooks.

This information is used exclusively to:

• Create and manage the account.
• Maintain secure sessions.
• Verify identity.
• Protect access.
• Synchronize information with MongoDB Atlas.

Drommo does not directly receive or store users’ passwords.

7.2 Information received from Stripe

When a user makes a purchase or subscribes to a paid plan, Stripe may share information related to the transaction with Drommo, including:

• Customer identifier.
• Payment status.
• Subscription identifier.
• Billing history.
• Invoices.
• Refund status.
• Cancellation status.
• Payment method status.
• Events generated through webhooks.

Drommo does not receive or store:

• Full card number.
• CVV code.
• PIN.
• Full banking details.

All financial information is managed directly by Stripe.

7.3 Information received from MongoDB Atlas

MongoDB Atlas is Drommo’s primary database.

The following, among other things, is stored through this infrastructure:

• Profile information.
• Preferences.
• Purchased resources.
• Purchase history.
• Downloads.
• User activity.
• Subscription status.
• Affiliate program.
• Custom settings.
• Prompt generation history.
• Technical information necessary for the operation of the service.

7.4 Information received from Google Gemini

When the user uses the Artificial Intelligence generators, Google Gemini may process:

• The prompt entered.
• Selected parameters.
• Generation settings.
• Generated output.
• Technical information necessary to execute the request.

Drommo uses this information exclusively to generate the content requested by the user.

This data is used to train our own artificial intelligence models only while the account's training permission is on, and anyone who turns it off stops contributing from that moment (Section 15).

7.5 Information received from Cloudflare R2

Cloudflare R2 stores digital resources used by the Platform, including:

• HTML demos.
• Static files.
• Downloadable resources.
• Paid material.
• Free resources.
• Multimedia files.

Cloudflare R2 may generate technical logs related to:

• Downloads.
• Availability.
• Performance.
• Access.
• Bandwidth usage.

These logs are used solely to ensure the proper operation of the service.

7.6 Information received from Resend

When Drommo sends emails through Resend, it may receive information related to:

• Delivery confirmation.
• Bounced emails.
• Sending status.
• Errors.
• Unsubscribes.
• Open statistics (when technically available).
• Clicks on links in the email (when enabled).

This data allows us to improve the quality of our communications.

7.7 Information received through analytics tools

Drommo uses various analytics tools to understand how the Platform operates.

These include:

Cloudflare Analytics

May provide metrics related to:

• Speed.
• Performance.
• Availability.
• Errors.
• User experience.

All of this information is used exclusively for statistical and continuous improvement purposes.

7.8 Information received through Webhooks

Drommo uses webhooks to keep various services synchronized.

Webhooks may communicate events such as:

• New user registrations.
• Profile updates.
• Payment confirmations.
• Subscription cancellations.
• Renewals.
• Refunds.
• Account deletions.
• Changes in subscription status.

Webhooks contain only the information necessary to properly synchronize the Platform.

Drommo processes personal data only for legitimate, specific purposes of which the user has been informed in advance.

We do not use the information for purposes incompatible with those for which it was collected.

8.1 Provision of the service

We use personal data to:

• Create accounts.
• Manage profiles.
• Maintain sessions.
• Provide access to free resources.
• Provide access to paid resources.
• Manage subscriptions.
• Enable content downloads.
• Operate the Platform.

8.2 Authentication

Information managed through Clerk is used to:

• Identify the user.
• Maintain active sessions.
• Recover accounts.
• Reset passwords.
• Protect access.
• Detect unauthorized access.

8.3 Purchases

Purchase-related data is used to:

• Process payments through Stripe.
• Issue invoices.
• Confirm orders.
• Manage subscriptions.
• Process refunds.
• Handle payment-related issues.

8.4 Artificial Intelligence

When the user uses the prompt generators, the information provided is used to:

• Process the request.
• Generate content through Google Gemini.
• Improve the user experience.
• Maintain conversation continuity where applicable.

This data is used to train our own artificial intelligence models only while the account's training permission is on, and anyone who turns it off stops contributing from that moment (Section 15).

8.5 Personalization

We may use information related to the use of the Platform to:

• Remember preferences.
• Display relevant resources.
• Recommend prompts.
• Organize content.
• Improve the browsing experience.

These recommendations do not produce legal effects on the user.

8.6 Customer support

We use information submitted to support to:

• Resolve issues.
• Respond to inquiries.
• Fix errors.
• Handle complaints.
• Improve the service.

8.7 Security

Information may also be used to:

• Detect fraud.
• Protect accounts.
• Prevent improper access.
• Investigate incidents.
• Detect automated activity.
• Protect the technology infrastructure.

8.8 Marketing

Where the user has given consent, we may use their email address to send:

• News and updates.
• Promotions.
• New prompts.
• New collections.
• Free resources.
• Paid plan updates.
• News related to Artificial Intelligence.

The user may unsubscribe from these communications at any time.

8.9 Legal compliance

Certain information may be used to:

• Comply with legal obligations.
• Respond to requests from authorities.
• Comply with tax obligations.
• Resolve disputes.
• Defend legal rights.
• Perform contracts.

8.10 Continuous improvement

Finally, we use statistical information to:

• Analyze performance.
• Optimize speed.
• Fix errors.
• Add new features.
• Improve the user experience.
• Develop new tools.

These activities are carried out with the aim of minimizing the processing of personal data and, where possible, using aggregated or anonymized information.

Where the processing of personal data is subject to Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Drommo will process information only when there is a valid legal basis under that regulation.

The legal basis relied upon will depend on the type of service used by the user and the specific purpose of the processing.

9.1 Consent

Drommo will request the user’s consent where required by applicable law.

Consent may be relied upon, among other cases, for:

• Sending email marketing campaigns.
• Placing analytics cookies.
• Placing advertising cookies, where applicable.
• Promotional communications.
• Voluntary participation in studies or surveys.
• Additional purposes requiring express authorization.

Consent will be:

• Freely given.
• Specific.
• Informed.
• Unambiguous.

The user may withdraw it at any time.

9.2 Performance of a contract

Much of the processing carried out by Drommo is necessary for the performance of the contract entered into with the user.

This legal basis allows the processing of information necessary to:

• Create the account.
• Keep the user signed in.
• Manage paid resources.
• Process purchases.
• Manage subscriptions.
• Download files.
• Issue invoices.
• Manage payments through Stripe.
• Provide support.

Without this processing, it would not be possible to properly provide the contracted services.

9.3 Compliance with legal obligations

Drommo may process personal data where necessary to comply with legal obligations, including:

• Tax obligations.
• Accounting obligations.
• Court orders.
• Administrative orders.
• Fraud prevention.
• Retention of mandatory documentation.
• Compliance with data protection regulations.

9.4 Legitimate interest

In certain cases, Drommo may process information on the basis of its legitimate interest, provided that such interest is not overridden by the user’s rights and freedoms.

Such processing may include:

• Fraud protection.
• Information security.
• Attack prevention.
• Detection of suspicious access.
• Performance improvement.
• Internal statistics.
• Audits.
• Infrastructure protection.

Before relying on this legal basis, we will seek to assess the balance between our interests and the user’s rights.

9.5 Protection of vital interests

In exceptional circumstances, Drommo may process personal data where necessary to protect the vital interests of the user or another person, in accordance with applicable law.

9.6 Changes to the legal basis

If, in the future, a processing purpose requires a legal basis different from the one originally relied upon, Drommo will inform the user before beginning such processing where required by applicable law.

9.7 Data minimization

Drommo seeks to collect only the information strictly necessary for each purpose.

We will not request data that is not reasonably necessary to provide our services.

9.8 Accuracy

We strive to keep personal data up to date.

The user may correct their information through:

• Their profile.
• Clerk.
• Contacting support.

It is the user’s responsibility to keep the data provided up to date.

9.9 Storage limitation

Personal data will be retained only for as long as necessary to:

• Provide the service.
• Comply with legal obligations.
• Resolve disputes.
• Defend legal rights.
• Prevent fraud.

Thereafter, it may be deleted or anonymized.

9.10 Transparency

Drommo is committed to clearly informing users of:

• What data it collects.
• How it uses that data.
• How long it retains that data.
• With whom it shares that data.
• What rights the user has.

Drommo uses Clerk as its official provider for secure account authentication and management.

Clerk provides specialized infrastructure to manage user registration, authentication, and security.

10.1 Registration

The user may create an account using the authentication methods enabled through Clerk.

Depending on the Platform’s configuration, these methods may include:

• Email.
• Password.
• Magic Links.
• Verification codes.
• Supported OAuth providers.
• Multi-factor authentication.

10.2 Information managed by Clerk

Clerk may process information such as:

• Name.
• Email address.
• Unique identifier.
• Verification status.
• Active sessions.
• Tokens.
• Public metadata.
• Private metadata.
• Profile image.
• Authentication history.

Drommo accesses only the information necessary to provide its services.

10.3 Passwords

Passwords are managed exclusively by Clerk.

Drommo:

• Does not store passwords.
• Cannot view passwords.
• Does not retrieve passwords.
• Does not retain authentication credentials.

All authentication is performed using the secure infrastructure provided by Clerk.

10.4 Sessions

Clerk manages user sessions through secure mechanisms.

This makes it possible to:

• Keep the user signed in.
• Prevent unauthorized access.
• Remember the authentication status.
• Revoke compromised sessions.
• Manage multiple devices.

10.5 Webhooks

Drommo uses webhooks provided by Clerk to automatically synchronize account-related events.

These include:

• User creation.
• Profile updates.
• Account deletions.
• Email verification.
• Metadata changes.
• Session updates.

These webhooks contain only the information necessary to keep the Platform synchronized.

10.6 Security

Clerk implements advanced mechanisms designed to protect accounts, including:

• Encryption.
• Secure session management.
• Protection against automated attacks.
• Identity verification.
• Secure account recovery.
• Multi-factor authentication when enabled.

10.7 Account deletion

The user may delete their account at any time using the tools available in Clerk or by submitting a request to:

help@drommo.com

Once the account is deleted:

• Access will be terminated.
• The process of deleting or anonymizing the data stored in Drommo will begin.
• Promotional communications will be canceled where applicable.

Information that must be retained by law may be kept for the period required by applicable regulations.

10.8 Synchronization with MongoDB Atlas

Information managed by Clerk may be synchronized with MongoDB Atlas to maintain:

• User profile.
• Subscription status.
• Purchase history.
• Preferences.
• Settings.
• Activity necessary for the operation of the Platform.

Drommo seeks to limit this synchronization solely to the information strictly necessary to provide the contracted services.

Drommo uses Stripe as its official provider for the secure processing of payments related to digital products, paid subscriptions, and other paid services available on the Platform.

Stripe acts as an independent payment service provider and processes financial information in accordance with its own terms, privacy policies, and international security standards.

Drommo does not store full bank card information, account numbers, or security codes (CVV/CVC).

11.1 Paid products and services

Stripe may be used to process:

• One-time prompt purchases.
• Paid bundle purchases.
• Monthly subscriptions.
• Annual subscriptions.
• Automatic renewals.
• Electronic invoicing.
• Refunds.
• Cancellations.
• Promotional credits when available.

11.2 Information processed by Stripe

Depending on the type of transaction, Stripe may process information such as:

• Name of the payer.
• Email address.
• Billing country.
• Billing address.
• Customer identifier.
• Payment method.
• Payment status.
• Transaction identifier.
• Invoices.
• Subscription status.
• Payment history.

Drommo receives only the information necessary to confirm the outcome of the transaction and provide the contracted services.

11.3 Information that Drommo does not store

For security reasons, Drommo does not directly store:

• Full card number.
• CVV or CVC code.
• PIN.
• Online banking password.
• Full bank account details.
• Financial authentication information.

All of this information remains within Stripe’s secure infrastructure.

11.4 Payment confirmation

Once the payment has been processed, Stripe may send information to Drommo through secure webhooks, including events such as:

• Payment completed.
• Payment declined.
• Payment pending.
• Successful renewal.
• Cancellation.
• Refund.
• Chargeback.
• Payment method update.
• Subscription expiration.

These events make it possible to automatically synchronize the status of the user’s account.

11.5 Fraud prevention

Stripe incorporates advanced mechanisms to detect and prevent fraudulent activity.

As part of this process, Stripe may analyze:

• IP address.
• Country.
• Device used.
• Payment history.
• Transaction behavior.
• Fraud risk.

Drommo receives only the outcome necessary to determine whether the transaction can be completed.

11.6 Billing

Where applicable, Stripe may issue or manage:

• Invoices.
• Receipts.
• Payment history.
• Tax documentation.

Drommo may retain the information necessary to comply with tax and accounting obligations in accordance with applicable law.

11.7 Refunds

When a refund is approved in accordance with Drommo’s Terms and Conditions, Stripe will process the refund using the corresponding payment method.

The time it takes for funds to be credited will depend on:

• Stripe.
• The financial institution.
• The payment method used.
• Applicable law.

11.8 Retention of financial information

Drommo will retain only the information necessary to:

• Confirm purchases.
• Comply with tax obligations.
• Resolve disputes.
• Handle chargebacks.
• Prevent fraud.
• Comply with legal obligations.

Sensitive financial information remains under Stripe’s management.

Drommo offers certain services through paid subscriptions. The current paid plans are Basic, Pro and Studio 5x; their prices and what each includes are on the pricing page. Subscriptions purchased before October 16, 2026 (Premium, Creator, Pro and Studio) keep their price and have the limits of the equivalent plan.

These subscriptions provide access to exclusive resources and additional features.

12.1 Included Services

Depending on the plan purchased, the user may access:

• Paid prompts.
• Exclusive collections.
• Paid HTML resources.
• Advanced templates.
• Unlimited downloads, where applicable.
• Additional Artificial Intelligence tools.
• Exclusive content.
• New features available only to subscribers.

Specific features may vary over time.

12.2 Activation

Once payment has been confirmed through Stripe:

• The subscription will be activated automatically.
• The account will be updated.
• MongoDB Atlas will synchronize the subscription status.
• Clerk will maintain the corresponding access.

The user may immediately use the features included in their plan, unless a different timeframe is expressly indicated.

12.3 Automatic Renewal

When the user purchases a recurring subscription, it may renew automatically at the end of each subscribed period, unless the user cancels it before the renewal date.

The renewal will use the payment method registered with Stripe.

Where required by applicable law, Drommo will provide the necessary information about automatic renewal prior to purchase.

12.4 Cancellation

The user may cancel their subscription at any time through:

• The Stripe Customer Portal.
• Their account settings.
• Contacting:

help@drommo.com

Cancellation will prevent future renewals but will not affect access to the previously paid period, unless applicable law provides otherwise.

12.5 Plan Changes

Where the Platform allows it, the user may:

• Upgrade their plan.
• Downgrade their plan.
• Change the billing frequency.
• Reactivate a canceled subscription.

Changes will be processed through Stripe and may take effect immediately or at the end of the current period, depending on the plan configuration.

12.6 Refunds

Subscription refunds will be subject to:

• The Drommo Terms and Conditions.
• Applicable law.
• Stripe’s policies, where applicable.

Not all payments will be refundable.

Cases will be evaluated individually where there is a legal obligation or an exceptional situation.

12.7 Record Retention

Drommo may retain subscription-related information in order to:

• Comply with tax obligations.
• Resolve disputes.
• Respond to audits.
• Handle chargebacks.
• Comply with legal obligations.
• Maintain the account history.

Retention will be limited to the time necessary under applicable law.

12.8 Subscription Termination

Once the subscription has ended:

• The user will keep their free account, if available.
• Access to paid features will be disabled.
• Resources acquired through a one-time purchase will remain available where the purchase terms so provide.
• Account information will remain protected in accordance with this Privacy Policy.

Termination of the subscription does not automatically entail the deletion of the account or of personal data, unless the user expressly requests their deletion.

Drommo uses MongoDB Atlas as its primary platform for the secure storage of the information necessary for the operation of the services.

MongoDB Atlas provides a managed infrastructure with high standards of availability, redundancy, and security to ensure the integrity of stored data.

Drommo implements reasonable measures to ensure that only authorized personnel and necessary systems have access to the stored information.

13.1 Stored Information

Depending on the services used by the user, MongoDB Atlas may store information such as:

• User identifier.
• Profile.
• Name.
• Email address.
• Preferences.
• Language.
• Subscription status.
• Purchase history.
• Acquired resources.
• Downloaded resources.
• Favorites.
• Activity history.
• Custom settings.
• Affiliate program.
• Prompt generation history.
• Technical logs necessary for the operation of the service.

13.2 Synchronized Information

MongoDB Atlas may synchronize information from various services, including:

• Clerk.
• Stripe.
• Google Gemini.
• Resend.
• Cloudflare R2.

Synchronization is limited solely to the information necessary to properly provide the contracted services.

13.3 Activity History

In order to improve the user experience, Drommo may retain records related to:

• Downloaded resources.
• Favorite resources.
• Prompts used.
• Purchase history.
• Subscription status.
• Use of paid features.
• Affiliate program activity.
• User settings.

This information facilitates the recovery of resources and the continuity of the experience within the Platform.

13.4 Data Integrity

Drommo adopts technical measures to protect the integrity of stored information, including:

• Data validation.
• Access controls.
• Encryption in transit via HTTPS/TLS.
• Backups managed by the infrastructure.
• Permission restrictions.
• Internal audits, where applicable.

13.5 Retention

Data stored in MongoDB Atlas will be kept only for as long as necessary to:

• Keep the account active.
• Provide the services.
• Comply with legal obligations.
• Resolve disputes.
• Prevent fraud.
• Defend legal rights.

Thereafter, it may be deleted or anonymized in accordance with this Policy and applicable law.

13.6 Deletion of Information

When a user requests the deletion of their account, Drommo will initiate a process to delete or anonymize the information stored in MongoDB Atlas, except for information whose retention is required by law.

Deletion may include, among other things:

• Profile.
• Preferences.
• Favorites.
• Settings.
• Activity history.
• Affiliate information.
• Resources associated with the account.

Certain records related to tax obligations, fraud prevention, or legal compliance may be retained for the period required by applicable regulations.

13.7 Security

MongoDB Atlas implements security mechanisms that may include:

• Encryption of data at rest.
• Encryption in transit.
• Secure authentication.
• Role-based access control.
• Infrastructure monitoring.
• Protection against unauthorized access.

Drommo supplements these measures with internal controls to limit access to authorized personnel only.

13.8 Backups

In order to ensure service continuity, the infrastructure may generate backups of the stored information.

These backups are used exclusively for:

• Disaster recovery.
• Restoration of information.
• Operational continuity.
• Protection against accidental data loss.

Backups will be subject to the same security standards that apply to the primary database.

Drommo offers a combination of free and paid resources intended to make working with Artificial Intelligence tools easier.

Digital resources may include:

• Prompts for images.
• Prompts for video.
• Prompts for web development.
• Prompts for applications.
• Templates.
• HTML resources.
• Demos.
• Examples.
• Specialized collections.

14.1 Free Resources

Free resources may be downloaded or used in accordance with the specific terms indicated in each listing.

Access to certain free resources may require:

• A registered account.
• Email verification.
• Acceptance of the Terms and Conditions.
• Compliance with the usage policies.

14.2 Paid Resources

Paid resources will be available only to:

• Users who have purchased the corresponding resource.
• Users with an active paid subscription.
• Users who have access through authorized promotions.

Access will be enabled automatically once payment has been confirmed through Stripe.

14.3 Purchase History

Drommo may keep a history of:

• Acquired resources.
• Purchase date.
• Access status.
• Downloads made.
• Versions acquired.
• Associated licenses.

This information makes it possible to restore access where appropriate and to verify the user’s rights to the acquired resources.

14.4 Downloads

When a user downloads a resource, Drommo may record information such as:

• Download date.
• Resource downloaded.
• User identifier.
• Download status.
• Technical information necessary to ensure delivery.

These records are used to improve the user experience and to resolve download-related issues.

14.5 Favorites

Drommo may allow the user to mark resources as favorites.

Information related to favorites may be stored in order to:

• Personalize the experience.
• Make future reference easier.
• Organize the user’s content.

The user may modify this information at any time from their account.

14.6 Usage Licenses

The purchase or download of a resource does not entail the transfer of its intellectual property.

Each resource will be subject to the usage license indicated on its corresponding page.

The user must respect the restrictions on use, redistribution, and commercialization set forth in that license.

14.7 AI-Generated Content

Some prompts may have been created or assisted by Artificial Intelligence tools.

Drommo reasonably reviews such resources before publication; however, it does not guarantee that all results obtained by the user will be identical, as AI models may generate variable responses.

14.8 Resource Updates

Drommo may update, correct, or improve certain digital resources.

Where possible, users who have purchased a resource may access updates in accordance with the specific terms indicated for that product.

Since October 2026 the Drommo chat runs mainly on models hosted by Cloudflare Workers AI (for example GPT-OSS, Gemma 4, Qwen, GLM, Mistral Small, Llama 4 Scout and FLUX image models) and on our own model “1.0 Dro”. Cloudflare processes the text of each turn, the part of the conversation the turn includes and the photos you attach, only to produce the answer.

Photos you add to the chat (camera, gallery or file) are analyzed by Cloudflare vision models; they are no longer sent to Google for that purpose. Google Gemini, described in the rest of this Section, may still be used in specific Drommo tools.

Video creation and video analysis are not available in the chat for now.

Drommo incorporates Artificial Intelligence tools using Google Gemini to help users create, optimize, and improve prompts intended for different AI models.

These tools are designed to assist the user and do not replace human judgment or constitute professional advice.

15.1 Purpose of the Service

The Artificial Intelligence tools available in Drommo are intended to:

• Generate new prompts.
• Improve existing prompts.
• Optimize instructions.
• Create structures for images.
• Create structures for video.
• Create structures for websites.
• Create structures for applications.
• Assist with creative tasks.
• Increase the user’s productivity.

15.2 Information Sent to the AI

When the user uses the AI generators, they may submit information such as:

• Prompt text.
• Description of the request.
• Generation parameters.
• Selected settings.
• User preferences.
• Subsequent corrections.
• Conversations necessary to generate the requested result.

This information may be temporarily processed by Google Gemini to generate the corresponding response.

15.3 Purpose of Processing

Information sent to the AI model is used exclusively to:

• Process the user’s request.
• Generate the requested content.
• Maintain session continuity, where applicable.
• Improve the technical operation of the Platform.
• Detect errors.

Prompts and content are used to train our own Artificial Intelligence models only while the training permission is on.

Use of your data to feed and improve AI models. From October 10, 2026, outside the European Union, the European Economic Area (Iceland, Liechtenstein and Norway), the United Kingdom and Switzerland, every account has the training permission on by default for all of Drommo, including earlier accounts that never chose and those that had given it for the chat only; anyone who turned it off keeps it off. In Settings > Privacy, the notice "Your data helps improve Drommo" explains it with a "Turn off" button, and the "Use my generations to improve models" switch turns it off or on at any time. In those countries, and when we cannot tell which country the person connects from, the permission stays off until the person gives it: Settings > Privacy asks with the notice "Will you help us improve Drommo?" and the "Allow" button. While the permission is on, Drommo may use the following, with their results and your ratings (including the "This helped" and "This didn't help" buttons), to train, feed and evaluate its AI models (such as our own model "1.0 Dro"):

• The prompts you type or dictate in the chat (text, images and web pages) and the photos you add to a message. Of your voice only the transcribed text is used: the audio is never stored.
• The questions to your Drommis and the passages from their files used to answer.
• Drommo Docs: your instructions, the connected sources (PDFs, web pages, notes) and the resulting document or slides.
• The image and video canvases and Cinema: prompts, the reference photos, frames and clips you add, and the generated images and videos.
• Section edits of web pages and scheduled tasks.
• Academy practice: the prompt you write after each example and the review by the Academy coach. Your name, your exam answers and your certificates are not used for training.

Not used for training: your saved projects as such, your add-ons' credentials, or the raw responses of their tools. The conditions are:

• The permission is optional: turning it off does not affect credits or access to the Platform. Where the permission is asked for, if you press "Not now" or close the notice, nothing is used.
• If you connect from the European Union, the European Economic Area, the United Kingdom or Switzerland, the permission is never on by default: it is used only if you press "Allow", and you can withdraw it at any time just as easily. You can also object by writing to our privacy contact.
• Only an adult can give permission; a minor's data is never used for training (Section 32).
• Only content generated while permission is active is used; never anything from before it was granted.
• Emails, phone numbers, names and other personal data are removed before anything is stored for training, and any content containing passwords or keys is discarded.
• Only pairs the user marked as "This helped" are used to train the prompt-improvement model, without the user's identity.
• The user can withdraw permission at any time from Settings > Privacy. From then on, their data is no longer used in new versions of the datasets and models.
• Permission given before October 9, 2026 covered only the chat. Outside the European Union, the European Economic Area, the United Kingdom and Switzerland it extends to all of Drommo from October 10, 2026, and the person can turn it off at any time. In those countries it remains valid for the chat only, and everything else is used only if the user extends it with the "Extend to all of Drommo" button.

15.4 Generated Content

Responses generated by Artificial Intelligence may contain:

• Errors.
• Omissions.
• Inaccuracies.
• Unexpected results.
• Incomplete information.

The user is responsible for carefully reviewing any generated content before using it for professional, commercial, or personal purposes.

Drommo does not guarantee that generated content will be completely accurate, original, or suitable for a particular purpose.

15.5 Prohibited Content

Users must not use the AI tools to generate content that:

• Is illegal.
• Infringes copyright.
• Violates registered trademarks.
• Promotes violence.
• Incites hatred.
• Contains malware.
• Facilitates unlawful activities.
• Violates the privacy of third parties.
• Contains confidential information whose disclosure is not authorized.

Drommo may limit or block the use of the tools when it detects activities that breach these principles or the Terms and Conditions.

15.6 Retention of Requests

Drommo may temporarily retain certain AI requests for the following purposes:

• Recovering sessions.
• Improving the user experience.
• Resolving technical issues.
• Detecting abuse of the service.
• Ensuring the stability of the Platform.

Where possible, the information will be anonymized or deleted once it is no longer needed.

15.7 Security of Requests

Communications between Drommo and the Google Gemini services are carried out over encrypted connections using secure protocols.

Drommo adopts reasonable measures to reduce unauthorized access to the information submitted by users.

15.8 Ownership of Generated Content

Unless otherwise provided in the specific license of the service or by applicable law:

• The user retains the rights legally afforded to them over the prompts they create.
• Drommo does not claim ownership of content generated by the user.
• The AI models used may produce similar results for different users due to the probabilistic nature of Artificial Intelligence.

Accordingly, Drommo does not guarantee the absolute exclusivity of the generated results.

Drommo uses Cloudflare R2 as its primary system for storing the digital resources distributed through the Platform.

Cloudflare R2 makes it possible to offer fast, secure, and scalable access to the files used by users.

16.1 Stored Resources

Cloudflare R2 may store, among other things:

• Downloadable prompts.
• Paid resources.
• Free resources.
• HTML files.
• Demos.
• Templates.
• Images.
• Demonstration videos.
• ZIP files.
• Static assets.
• Product-related documentation.

16.2 Purpose of Storage

Files stored in Cloudflare R2 are intended to:

• Facilitate downloads.
• Improve access speed.
• Reduce loading times.
• Ensure the availability of resources.
• Optimize the international distribution of content.

16.3 Technical Information

Cloudflare R2 may generate logs related to:

• Downloads made.
• File requests.
• Bandwidth usage.
• Access errors.
• Service availability.
• Infrastructure performance.

Drommo uses this information exclusively for technical, statistical, and security purposes.

16.4 Access Control

Paid resources are protected by mechanisms that restrict access to authorized users only.

These may include:

• Authentication verification through Clerk.
• Validation of purchases made with Stripe.
• Paid subscription verification.
• Temporary download tokens.
• Internal access controls.

16.5 Availability

Drommo makes reasonable efforts to keep digital resources available.

However, interruptions may occur as a result of:

• Maintenance.
• Updates.
• Infrastructure issues.
• Cloudflare incidents.
• Connectivity failures.
• Force majeure events.

16.6 Security

Files stored in Cloudflare R2 are protected by security measures that may include:

• Encryption in transit.
• Access controls.
• Administrative restrictions.
• Distributed infrastructure.
• Availability monitoring.
• Protection against unauthorized access.

16.7 Deletion of Resources

When a resource is no longer available or is removed from the Platform, Drommo may delete it from Cloudflare R2.

However, backups may be retained for the time strictly necessary for:

• Disaster recovery.
• Operational continuity.
• Compliance with legal obligations.

16.8 Downloaded Resources

Once the user downloads a resource to their own device, Drommo has no control over:

• Its storage.
• Its distribution.
• Its modification.
• Its deletion.

The user is responsible for protecting downloaded files and using them in accordance with the corresponding license.

Drommo uses Resend as its official provider for sending emails related to the operation of the Platform, purchases made by users and, where the corresponding consent exists, email marketing campaigns.

Resend acts as a technology provider specialized in email delivery and processes only the information necessary to ensure the delivery, security, and tracking of communications.

17.1 Purpose of Emails

Drommo may send emails to:

• Confirm account registration.
• Verify email addresses.
• Confirm purchases.
• Confirm subscriptions.
• Send invoices.
• Confirm payments.
• Reset passwords.
• Report account changes.
• Notify of security incidents.
• Announce important Platform updates.
• Respond to requests sent to support.

17.2 Information Processed by Resend

To provide the email service, Resend may process information such as:

• Email address.
• Recipient name (when available).
• Message subject.
• Date and time sent.
• Delivery status.
• Open status (when technically possible).
• Link clicks (when this feature is enabled).
• Delivery errors.
• Bounces.
• Unsubscribes.

Drommo uses this information solely to properly manage the communications sent.

17.3 Transactional Emails

Transactional emails are those necessary for the operation of the Platform.

These include:

• Account activation.
• Password recovery.
• Purchase confirmations.
• Payment confirmations.
• Billing.
• Security changes.
• Subscription confirmations.
• Important service-related notifications.

These emails may be sent even when the user has opted out of receiving promotional communications, as they are necessary for the provision of the service.

17.4 Email Security

Drommo adopts reasonable measures to protect communications sent through Resend.

These measures may include:

• Domain authentication.
• Encryption in transit.
• Protection against spoofing.
• Sender validation.
• Deliverability monitoring.
• Bounce management.

17.5 Record Retention

Drommo may retain records related to the emails sent in order to:

• Confirm delivery.
• Resolve issues.
• Handle complaints.
• Comply with legal obligations.
• Detect abuse.
• Prevent fraud.

Retention will be limited to the time necessary for those purposes.

17.6 Deletion of Contacts

When the user deletes their account or requests the deletion of their personal data, Drommo will adopt reasonable measures to remove their information from the lists managed through Resend, except where a legal obligation requires its retention.

17.7 International Transfers

Due to the nature of the service provided by Resend, certain information may be processed on servers located outside the user’s country of residence.

Where applicable, Drommo will endeavor to ensure that such transfers are carried out using appropriate mechanisms in accordance with the GDPR and other applicable law.

17.8 Independent Provider

Resend acts as an independent provider of technology services.

Processing carried out directly by Resend is also subject to its own Privacy Policy and terms of service.

Drommo may send promotional communications related to its products and services when the user has given the consent required by applicable law.

Our goal is to keep users informed about relevant news without sending excessive or unwanted messages.

18.1 Promotional Communications

Promotional campaigns may include information related to:

• New prompts.
• New collections.
• Free resources.
• Paid resources.
• Platform updates.
• New AI tools.
• Promotions.
• Discounts.
• Events.
• Artificial Intelligence news.

18.2 Consent

Where required by applicable law, Drommo will request prior consent before sending promotional communications.

Consent may be obtained through:

• Registration forms.
• Opt-in checkboxes.
• Preference settings.
• Equivalent tools permitted by law.

The absence of consent will not prevent general use of the Platform.

Affiliate program and Founders crowdfunding information. On the affiliate program and Founders crowdfunding pages you can leave your email to receive information about that program, even without an account. We store your email, the program, the language, the date and the text of the box you ticked. We send you an email to confirm and, if you do not confirm within 7 days, we delete it. After you confirm you receive a few emails about that program, at most one every 20 hours, each with a one-click unsubscribe link. When you unsubscribe we keep only your email and the unsubscribe date, so we do not write to you again. Emails are sent with Resend.

18.3 Unsubscribing

The user may opt out of receiving promotional communications at any time through any of the following mechanisms:

• The “Unsubscribe” link included in each email.
• Account preferences, when available.
• A request sent to:

help@drommo.com

The unsubscribe request will be processed within a reasonable period of time.

18.4 Mandatory Communications

Unsubscribing from the newsletter will not prevent Drommo from sending communications necessary for:

• Security.
• Account recovery.
• Purchases.
• Billing.
• Payment confirmation.
• Subscription renewals.
• Material changes to the Terms and Conditions.
• Significant changes to the Privacy Policy.
• Compliance with legal obligations.

These communications are not advertising in nature.

18.5 Segmentation

With the user’s consent, Drommo may segment communications based on information such as:

• Language.
• Country.
• Acquired resources.
• Paid subscription.
• Categories of interest.
• General activity within the Platform.

The purpose of segmentation is to send more relevant content and reduce unnecessary communications.

18.6 Statistics

Drommo may use statistical information related to campaigns to analyze:

• Delivery rate.
• Open rate.
• Clicks.
• Unsubscribes.
• Delivery errors.
• Campaign performance.

These statistics are used exclusively to improve the quality of our communications.

18.7 Protection of Information

Email lists managed by Drommo will not be sold, rented, or transferred to third parties for commercial purposes.

Access to these lists will be limited to authorized personnel and to the technology providers necessary to provide the service.

18.8 Withdrawal of Consent

The user may withdraw at any time the consent given to receive promotional communications.

Withdrawal will not affect the lawfulness of processing carried out before its withdrawal, nor will it prevent the sending of communications strictly necessary for the provision of the contracted services.

Drommo uses cookies and similar technologies to ensure the proper operation of the Platform, improve the user experience, analyze site usage, optimize performance, and provide certain features.

Cookies are small text files that are stored on the user’s device when they visit our website.

Where required by applicable law, Drommo will request the user’s consent before placing cookies that are not strictly necessary.

A notice at the bottom of the screen asks once per browser session whether to accept or reject optional cookies. The full list of cookies, providers and durations is in the Cookie Policy at drommo.com/cookies.

19.1 What Are Cookies?

Cookies make it possible to remember certain information related to the user’s browsing.

Depending on their purpose, cookies may be used to:

• Maintain active sessions.
• Remember preferences.
• Analyze statistics.
• Improve performance.
• Enhance security.
• Optimize the user experience.

Cookies may be:

• First-party cookies.
• Third-party cookies.
• Session cookies.
• Persistent cookies.

19.2 Strictly Necessary Cookies

These cookies are essential for the operation of Drommo.

Among other functions, they make it possible to:

• Keep the user signed in.
• Verify authentication.
• Remember the account status.
• Protect security.
• Detect suspicious access.
• Manage essential preferences.

Drommo does not currently place third-party analytics cookies. If it starts using them, it will update the Cookie Policy and ask for the user’s consent first.

Disabling these cookies may prevent certain features of the Platform from functioning properly.

19.3 Analytics Cookies

Drommo uses analytics tools to understand general user behavior and continuously improve the service.

These cookies make it possible to collect statistical information such as:

• Number of visitors.
• Most visited pages.
• Time spent on the site.
• Navigation flow.
• Downloaded resources.
• Conversion.
• Devices used.
• Browsers.
• Approximate country or region.

Drommo does not currently place third-party analytics cookies. If it starts using them, it will update the Cookie Policy and ask for the user’s consent first.

The information collected is used solely for statistical purposes and to improve the service.

19.4 Authentication-Related Cookies

Clerk may use technical cookies to:

• Maintain the user’s session.
• Manage authentication.
• Remember trusted devices.
• Verify identity.
• Prevent automated attacks.
• Manage multi-factor authentication when enabled.

These cookies are essential to the security of the Platform.

19.5 Payment-Related Cookies

When the user makes a purchase or manages a subscription, Stripe may use cookies and similar technologies to:

• Process payments.
• Detect fraud.
• Verify transactions.
• Manage the Customer Portal.
• Comply with regulatory obligations.
• Improve the security of the payment process.

Drommo does not directly control these cookies.

19.6 Infrastructure-Related Cookies

Drommo is hosted on Cloudflare’s infrastructure.

Cloudflare may use technical cookies related to:

• Load balancing.
• Content delivery.
• Performance optimization.
• Security.
• Protection against attacks.
• Service availability.

These cookies are necessary to ensure the proper operation of the site.

19.7 Cookie Management

The user may manage cookies through:

• The consent banner displayed by the Platform, where applicable.
• Their browser settings.
• Device privacy tools.
• Specific browser add-ons.

Disabling certain cookies may affect the operation of some features.

19.8 Retention

Cookies may remain active:

• For the duration of the current session.
• Until the configured expiration date.
• Until the user deletes them manually.
• Until the user withdraws their consent, where applicable.

Drommo periodically reviews the cookies it uses in order to minimize their duration where possible.

19.9 Consent

Where required by applicable law, Drommo will request prior consent before placing non-essential cookies.

The user may:

• Accept them.
• Reject them.
• Change their preferences at a later time.

The withdrawal of consent will not affect the lawfulness of processing carried out prior to such withdrawal.

This section is intentionally left blank. The numbering is kept so references to other sections of this Policy do not change.

This section is intentionally left blank. The numbering is kept so references to other sections of this Policy do not change.

Drommo uses Cloudflare Analytics to monitor the technical performance of the website, optimize infrastructure, and ensure a fast and stable browsing experience.

Cloudflare Analytics focuses primarily on metrics related to the operation of the site and is not intended to personally identify users.

22.1 Purpose

Cloudflare Analytics allows Drommo to:

• Measure site performance.
• Detect errors.
• Optimize speed.
• Analyze load times.
• Monitor stability.
• Improve the user experience.
• Detect bottlenecks.
• Evaluate general traffic behavior.

22.2 Information Collected

Cloudflare Analytics may collect technical information such as:

• Page load time.
• Latency.
• Server performance.
• Infrastructure status.
• Browser type.
• Device type.
• Operating system.
• Screen resolution.
• Approximate region.
• Performance-related events.

This information is used exclusively to optimize the operation of the Platform.

22.3 Performance Metrics

The metrics obtained through Cloudflare Analytics make it possible to identify aspects such as:

• Load speed.
• Frontend performance.
• Backend performance.
• Service availability.
• Infrastructure errors.
• Platform stability.
• Resource optimization.
• Bandwidth consumption.

22.4 Infrastructure Monitoring

Drommo uses Cloudflare Analytics to continuously monitor:

• Site availability.
• Server status.
• Function response.
• System errors.
• Infrastructure performance.
• Service stability.

This monitoring makes it possible to detect and correct problems more quickly.

22.5 Use of Information

Information collected through Cloudflare Analytics is used exclusively to:

• Improve performance.
• Increase stability.
• Optimize the user experience.
• Reduce response times.
• Detect technical incidents.

Drommo does not use this information for advertising purposes.

22.6 Retention

Metrics collected through Cloudflare Analytics will be retained only for as long as necessary to:

• Compile statistics.
• Detect incidents.
• Analyze trends.
• Improve performance.

Thereafter, they may be deleted or anonymized in accordance with applicable policies.

22.7 Security

Drommo limits access to information collected through Cloudflare Analytics solely to authorized personnel who need to use it for:

• Technical administration.
• Development.
• Security.
• Service optimization.

22.8 Responsible Use

Drommo uses Cloudflare Analytics exclusively for purposes related to:

• Performance.
• Availability.
• Optimization.
• Technical security.

It is not used to individually identify users or to make automated decisions that produce legal effects on them.

Drommo uses webhooks to keep the various services that make up the Platform synchronized.

Webhooks allow systems to exchange information automatically when a specific event occurs, ensuring the consistency and security of data.

Drommo uses webhooks solely to provide the services requested by the user and to maintain the integrity of the Platform.

23.1 What Is a Webhook?

A webhook is an automated communication mechanism between services that sends information when a given event occurs.

Unlike periodic polling, webhooks allow systems to react immediately when a relevant change takes place.

23.2 Purpose

Drommo uses webhooks to:

• Synchronize users.
• Confirm payments.
• Update subscriptions.
• Manage purchases.
• Record cancellations.
• Delete accounts.
• Update profiles.
• Manage technical events.
• Maintain consistency across the various services used by the Platform.

23.3 Clerk Webhooks

Clerk may send events related to:

• User creation.
• Email verification.
• Profile updates.
• Account deletion.
• Sign-in.
• Sign-out.
• Metadata changes.
• Session updates.
• Authentication-related events.

Drommo uses this information to keep the user’s account synchronized within MongoDB Atlas.

23.4 Stripe Webhooks

Stripe may send events related to:

• Completed payments.
• Failed payments.
• Pending payments.
• Refunds.
• Chargebacks.
• Cancellations.
• Automatic renewals.
• Payment method updates.
• Billing.
• Subscription expiration.

These events make it possible to automatically enable or disable access to paid resources.

23.5 Integration with MongoDB Atlas

Events received through webhooks may automatically update the information stored in MongoDB Atlas, including:

• Subscription status.
• Purchase history.
• Subscription status.
• User profile.
• Preferences.
• Activity necessary to provide the service.

23.6 Integration with Resend

Drommo may use events related to:

• Successful registration.
• Account confirmation.
• Completed purchase.
• Subscription renewal.
• Password recovery.
• Important account changes.

These events make it possible to automatically send the corresponding emails through Resend.

23.7 Webhook Security

Drommo implements reasonable measures to verify that webhooks genuinely originate from the corresponding provider.

These measures may include:

• Cryptographic signatures.
• Secret tokens.
• Origin validation.
• HTTPS/TLS.
• Event verification.
• Access restrictions.

These measures help prevent the submission of fraudulent information.

23.8 Log Retention

Drommo may retain technical logs related to webhooks in order to:

• Resolve incidents.
• Audit operations.
• Detect errors.
• Ensure the integrity of information.
• Comply with legal obligations.
• Protect the security of the Platform.

These logs will be retained only for as long as necessary for such purposes.

23.9 Integrations (MCP servers and skills)

You can connect third-party MCP servers and open-source skills to your chat. When a turn uses a complement, Drommo sends that server the tool request the model decides to make, which may include part of your message. That third party processes the data under its own terms and privacy policy.

We store the tokens or keys you give us for a complement encrypted, use them only for your chat and do not share them with other users. You can disconnect a complement at any time and its credentials are deleted.

23.10 Agenda (scheduled tasks)

When scheduled tasks are available, we will store the request, the schedule you choose and the results of each run to show them in your chat. Each run follows the same rules as a normal turn, parental controls included. You can delete a task at any time.

23.11 Saved projects

When you save a canvas, a document or an automation to your account, we store its name, its content (notes, texts, blocks and links to the images or videos you generated) and a thumbnail to show it in My projects. You can save up to 50 projects of each type. What you do not save stays only in your browser. You can rename or delete a project at any time and its content is removed from your account.

23.12 Automations

When automations are available for your account, we store their blocks, the schedule you choose and a record of each run (date, result, credits used and errors) to show you the latest 20 in the automation. Each run follows the same rules as a regular chat turn, including parental controls.

If an automation sends its result to an MCP server you installed, Drommo sends that server the text, images and data you set in the block. That third party handles them under its own terms and privacy policy. If you delete the automation, its schedule and run history are deleted too.

23.13 Drommo Academy

The Academy (/academia) offers free courses. When you use its practice, we send the prompt you write, together with the lesson, to an AI model hosted on Cloudflare Workers AI that reviews it and answers what works, what is missing and an improved version. That review is automatic, can be wrong, is not sent to the chat and uses no credits. Your prompt draft and your progress are kept only in your browser.

When you take a course's final exam, we grade your answers on our servers. If you pass, we store your certificate: the name you type, the course, your score, the completion date and a verification code. Anyone with the certificate's link can see it to check it; that page is not shown in search engines. We do not store your exam answers.

With the training permission on, your practice (the prompt and its review, without personal data) may be used to improve Drommo's models, as Section 15 describes. Your name, your exam answers and your certificates are never used for training. You can delete a certificate at any time; if you delete your account, your certificates are deleted.

Drommo may offer an affiliate program through which certain users may recommend the Platform using referral links or codes.

Participation in the program is voluntary and will be subject to the specific Terms and Conditions of the affiliate program.

24.1 Information Collected

When a user participates as an affiliate, Drommo may collect information such as:

• Affiliate identifier.
• Affiliate code.
• Referral link.
• Registration date.
• Affiliate status.
• Referral history.
• Commissions earned.
• Payments made.
• Payment status.

24.2 Purpose

The information collected is used to:

• Identify affiliates.
• Correctly attribute referrals.
• Calculate commissions.
• Prevent fraud.
• Generate reports.
• Administer the program.

24.3 Affiliate Cookies

When the user accesses the Platform through an affiliate link, Drommo may use cookies or similar technologies to:

• Record the referral.
• Associate the corresponding purchase.
• Calculate the commission.
• Avoid duplicates.

These cookies will be subject to the Cookie Policy and, where applicable, to the user’s consent.

24.4 Fraud Prevention

Drommo may review activity related to the affiliate program in order to detect:

• False referrals.
• Simulated purchases.
• Link manipulation.
• Mass account creation.
• Automated use.
• Any other activity intended to obtain commissions improperly.

When suspicious activity is detected, Drommo may:

• Temporarily suspend the affiliate.
• Withhold payments.
• Request additional information.
• Terminate participation in the program.
• Take other measures provided for in the Terms and Conditions.

24.5 Retention of Information

Records related to the affiliate program may be retained for as long as:

• There is an active relationship with the affiliate.
• It is necessary to calculate commissions.
• Tax obligations exist.
• Audits must be addressed.
• It is necessary to resolve disputes.
• Applicable law requires certain documentation to be retained.

24.6 Payments

When the program provides for payments to affiliates, Drommo may retain the information necessary to:

• Process payments.
• Issue tax documentation.
• Comply with tax obligations.
• Verify the identity of the payee.

Drommo will request only the information strictly necessary to make such payments.

24.7 Affiliate Rights

Affiliates retain the same privacy rights granted to any Drommo user, including, where applicable:

• Access.
• Rectification.
• Erasure.
• Portability.
• Restriction.
• Objection.
• Withdrawal of consent.

Requests may be sent to:

help@drommo.com

24.8 Termination of Participation

When an affiliate stops participating in the program:

• Their referral links will be deactivated, where applicable.
• Only the information necessary to comply with legal obligations will be retained.
• Pending commissions may be processed in accordance with the program conditions.
• Deletion of the account will not affect information whose retention is required by law.

Drommo recognizes that the protection of personal information is an essential part of providing its services.

Accordingly, we implement reasonable technical, organizational, and administrative measures designed to protect personal data against unauthorized access, loss, alteration, destruction, or improper disclosure.

However, no system connected to the Internet can guarantee absolute security.

25.1 Security principles

The measures implemented by Drommo are intended to:

• Ensure confidentiality.
• Protect the integrity of information.
• Maintain the availability of the services.
• Detect security incidents.
• Reduce technological risks.
• Protect our users’ personal data.

25.2 Encryption of information

Drommo uses secure connections through encryption protocols, including:

• HTTPS.
• TLS (Transport Layer Security).

These technologies help protect information while it is transmitted between the user’s device and our servers or technology providers.

Where the services used allow it, certain data may also be stored using encryption-at-rest mechanisms.

25.3 Access control

Access to personal information is restricted solely to those persons who need to use it to perform their duties.

The measures implemented include:

• Role-based access control.
• Secure authentication.
• Permission management.
• Restriction of administrative privileges.
• Logging of administrative access where appropriate.

25.4 Authentication security

Drommo uses Clerk to securely manage:

• User registration.
• Sign-in.
• Active sessions.
• Account recovery.
• Multi-factor authentication where available.
• Email verification.

Passwords are managed exclusively by Clerk and are not stored directly by Drommo.

25.5 Payment security

All payments made on Drommo are processed through Stripe.

Drommo does not store:

• Full card numbers.
• CVV/CVC codes.
• Bank PINs.
• Financial credentials.

Stripe applies international security standards to the processing of financial information, including compliance with PCI DSS (Payment Card Industry Data Security Standard).

25.6 Database security

Information stored in MongoDB Atlas is protected through mechanisms that may include:

• Encryption.
• Access control.
• Monitoring.
• Backups.
• Connection restrictions.
• Infrastructure protection.

Drommo configures the database following the principle of least privilege.

25.7 Oversight and monitoring

Drommo may continuously monitor the operation of the Platform in order to detect:

• Unauthorized access.
• Suspicious activity.
• Automated attacks.
• Fraud attempts.
• Critical errors.
• Infrastructure issues.
• Availability failures.

The information obtained is used exclusively to protect the Platform and its users.

25.8 Incident management

If a security incident affecting personal data is detected, Drommo will assess:

• The nature of the incident.
• The data affected.
• The level of risk.
• The necessary corrective measures.
• The obligation to notify the competent authorities.
• The obligation to inform users where required by applicable law.

Drommo will act to minimize the impact of the incident and restore the security of the service.

Drommo retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or for the period required by applicable law.

Once the corresponding retention period has ended, the data will be deleted, anonymized, or blocked in accordance with applicable regulations.

26.1 Retention criteria

The retention period will depend on factors such as:

• The nature of the data.
• The purpose of the processing.
• The existence of an active account.
• Legal obligations.
• Tax obligations.
• Pending claims.
• Fraud prevention.
• The defense of legal rights.

26.2 Account information

Account-related information may be retained for as long as:

• The account remains active.
• The user continues to use the services.
• It is necessary to provide the Platform.

When the user deletes the account, Drommo will begin the deletion or anonymization process in accordance with this Policy.

26.3 Purchase-related information

Purchase-related information may be retained for as long as necessary to:

• Comply with tax obligations.
• Handle refunds.
• Resolve chargebacks.
• Manage claims.
• Comply with accounting obligations.
• Defend legal rights.

The specific period will depend on the applicable law in each jurisdiction.

26.4 Subscription information

Records related to paid subscriptions may be retained in order to:

• Manage renewals.
• Resolve issues.
• Manage cancellations.
• Handle claims.
• Comply with legal obligations.

Once these purposes have been fulfilled, the information may be deleted or anonymized.

26.5 Analytics information

Information collected through:

• Cloudflare Analytics.

will be retained in accordance with the retention periods configured in each service and the policies of their respective providers.

Where possible, Drommo will use aggregated or anonymized information for statistical purposes.

26.6 Technical logs

Logs related to:

• Security.
• Authentication.
• Errors.
• Performance.
• Webhooks.
• Infrastructure.

may be retained for as long as necessary to:

• Detect incidents.
• Resolve technical issues.
• Protect the Platform.
• Comply with legal obligations.

26.7 Backups

Backups may retain information for a limited additional period for the purposes of:

• Disaster recovery.
• Business continuity.
• Information restoration.
• Protection against accidental loss.

Once such backups are no longer necessary, they will be deleted in accordance with Drommo’s internal procedures.

26.8 Deletion and anonymization

When information is no longer necessary and there is no legal obligation to retain it, Drommo may:

• Permanently delete the data.
• Anonymize the information.
• Block access to certain records where required by applicable law.

Anonymization will be carried out with the aim of ensuring that the information can no longer reasonably be associated with an identified or identifiable person.

26.9 Automatic deletion of unverified, suspicious or unused accounts

To avoid keeping data that is no longer needed and to limit fake or bulk-created accounts, Drommo automatically deletes accounts in these cases:

• Unverified email: if the account's email is still unverified 7 days after sign-up, we send a notice to that email and delete the account 7 days after the notice if it is still unverified.
• Unused suspicious account: if the account did not receive the Free plan gift credits because it looked duplicated, fake or bulk-created (section 26.10) and has not been used in 30 days, we send a notice and delete it 30 days after the notice if it is not used again.
• Unused account: if the account has not been used in 12 months, we send a notice and delete it 30 days after the notice if it is not used again.

"Using the account" means signing in or having an active session on Drommo. To keep the account, simply sign in before the date given in the notice (and, in the first case, verify your email). We never automatically delete an account that has or had a subscription, a credit purchase, paid credits or credits gifted by Drommo, a crowdfunding contribution or an affiliate program application.

When an account is deleted, the account and its data are erased as described in section 27 (Account Deletion) of this Policy, except information the law requires us to keep. As a record we keep only the account's internal identifier, the rule applied and the dates of the notice and the deletion, without email or name. If the notice email could not be sent, the account is not deleted.

26.10 Checks against fake accounts

Free plan gift credits are given only once per person. To decide this, Drommo checks that the email is verified and not from a temporary email service, and compares hashed fingerprints (SHA-256, never the plain data) of the normalized email (lowercase, without "+tag" and, for Gmail, without dots), of third-party sign-in accounts (such as Google or Apple) and of the browser. It also uses the network you connect from (a hashed fingerprint of the IP address and the day, deleted automatically after two days) to limit how many accounts receive gift credits from the same network on the same day, the country reported by Cloudflare (including the Tor network) and email signals such as aliases or many digits. From these signals we compute a risk score; if it is high, the account can still be used but does not receive the gift credits. These checks rely on our legitimate interest in preventing fraud and abuse of the Free plan. If you believe your account was classified by mistake, write to help@drommo.com.

Drommo recognizes users’ right to delete their account and request the erasure of their personal data, in accordance with applicable law.

The user may request the deletion of their account at any time using the tools available on the Platform or by contacting our support team.

Account deletion will not affect data whose retention is mandatory under legal provisions.

How to ask us to delete your data: email help@drommo.com with the subject “Delete my data” from the email address of your Drommo account. We will verify your identity, delete or anonymize your data and email you when it is done, within 30 days at most. If you came from Instagram or Facebook: Drommo does not store data from your Instagram or Facebook account; if you write to us, we also delete any data we received from those platforms.

27.1 Deletion from the Platform

When the functionality is available, the user may delete their account directly from their profile settings.

The process may include security measures designed to verify the account holder’s identity before proceeding with the deletion.

27.2 Deletion through Clerk

Authentication and account management are performed through Clerk.

When an account is deleted:

• Active sessions will be revoked.
• Data managed by Clerk will be deleted in accordance with its policies.
• Drommo will be notified via webhooks to synchronize the deletion.
• Future access with that account will be prevented, unless the user creates a new one.

27.3 Deletion in MongoDB Atlas

Once the deletion request is received, Drommo will begin the process of deleting or anonymizing the information stored in MongoDB Atlas, including, where applicable:

• User profile.
• Preferences.
• Favorite resources.
• Custom settings.
• Activity history.
• Affiliate records.
• Data associated with the account.

Records that must be retained due to legal obligations will remain protected for the period required by applicable regulations.

Specifically, when the account is deleted (at the person's request or automatically, section 26.9) we immediately delete its chats and messages, canvases, documents, brand kits, automations, scheduled tasks, connected complements (with their keys), preferences and activity history. We keep only: the credit history and balance and purchases (section 27.4), crowdfunding contributions and affiliate program records that involve payments, the record of the training permissions you gave or withdrew, the hashed fingerprints that prevent receiving the gift credits again (section 26.10) and the record of the automatic deletion (section 26.9). Files (images, videos or documents) stored separately are deleted as described in section 26.7.

Training data. If the training permission was on (Section 15), the examples the account already contributed to the training datasets are kept after the account is deleted: they are stored without emails, phone numbers, names or other personal data. To have those examples removed as well, turn off the training permission in Settings > Privacy before deleting the account, or write to our privacy contact, and they will stop being used in new versions of the datasets and models. The account's generations and its separately stored files (images, videos, reference photos, Drommi files and web pages, including published ones) are deleted as soon as those examples finish processing, and at most 7 days after the account is deleted.

27.4 Purchases made

Account deletion does not necessarily entail the immediate deletion of records related to:

• Purchases.
• Invoices.
• Payments.
• Refunds.
• Accounting information.
• Tax obligations.

These records may be retained for as long as a legal obligation so requires.

27.5 Paid subscriptions

When the user deletes their account:

• Active subscriptions must be canceled beforehand or will cease to renew in accordance with the terms of service.
• Access to paid resources will end once the contracted period has concluded.
• Drommo may retain the information strictly necessary to comply with legal obligations related to the subscription.

27.6 Emails

Following account deletion:

• The email address will be removed from the marketing lists managed by Resend.
• Newsletters and promotions will no longer be sent.
• Communications may continue to be sent where there is a pending legal obligation or where it is necessary to complete processes initiated before the deletion.

27.7 Backups

Certain information may remain temporarily in protected backups.

These backups are used exclusively for:

• Disaster recovery.
• Business continuity.
• System restoration.

The information will be deleted when the corresponding backups are replaced in accordance with normal backup cycles.

27.8 Deletion requests

Requests related to account deletion may be sent to:

Email:

help@drommo.com

Drommo will respond within a reasonable period and, where applicable, within the time limits established by applicable law.

Where the processing of personal data is subject to the General Data Protection Regulation (GDPR), users may exercise the rights recognized by that regulation.

Drommo will facilitate the exercise of these rights free of charge, except in cases permitted by applicable law.

28.1 Right of access

The user may request confirmation as to whether Drommo processes personal data concerning them.

If so, they may request access to such information and obtain details regarding:

• The data processed.
• The purposes.
• The categories of data.
• The recipients.
• The retention period.
• The rights available.

28.2 Right to rectification

The user may request the correction of inaccurate or incomplete personal data.

Where possible, they may also update their information directly from their account settings.

28.3 Right to erasure (“Right to be forgotten”)

The user may request the deletion of their personal data when:

• The data are no longer necessary for the purpose for which they were collected.
• They withdraw their consent and there is no other legal basis for the processing.
• They object to the processing and there are no overriding legitimate interests.
• The processing is unlawful.
• There is a legal obligation to delete the data.

This right may be subject to the exceptions provided for by applicable law.

28.4 Right to restriction of processing

The user may request that Drommo temporarily restrict the processing of their data when:

• They contest the accuracy of the information.
• The processing is unlawful and they prefer restriction instead of deletion.
• Drommo no longer needs the data, but the user requires them to establish, exercise, or defend legal claims.
• A decision on an objection to the processing is pending.

28.5 Right to data portability

Where applicable, the user may request to receive their personal data in a structured, commonly used, and machine-readable format.

They may also request that such data be transmitted to another controller where technically feasible.

28.6 Right to object

The user may object to the processing of their personal data based on legitimate interests.

Drommo will stop processing such data unless there are compelling legitimate grounds or the processing is necessary for the establishment, exercise, or defense of legal claims.

28.7 Right to withdraw consent

Where the processing is based on consent, the user may withdraw it at any time.

The withdrawal of consent will not affect the lawfulness of processing carried out prior to the withdrawal.

28.8 Right to lodge a complaint

If the user believes that Drommo has processed their personal data in a manner contrary to the GDPR, they may lodge a complaint with the competent supervisory authority in their country of residence or in the place where the alleged infringement occurred.

They may also first contact Drommo at:

help@drommo.com

in order to try to resolve the matter amicably.

Where the processing of personal data is subject to Mexican law, users may exercise the rights recognized by the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and other applicable provisions.

Drommo will facilitate the exercise of these rights free of charge, except in cases expressly permitted by applicable law.

29.1 ARCO Rights

Users have the right to exercise the so-called ARCO Rights, which comprise:

• Access.
• Rectification.
• Cancellation.
• Opposition.

These rights may be exercised with respect to the personal data processed by Drommo.

29.2 Right of Access

The user may request information about:

• What personal data Drommo holds.
• How the data were obtained.
• What the data are used for.
• With whom the data are shared.
• The expected retention period.
• The general protection measures applied.

Drommo will respond within the time limits established by Mexican law.

29.3 Right of Rectification

When personal data are inaccurate, incomplete, or out of date, the user may request their correction.

Whenever possible, the update may also be made directly from the account settings.

29.4 Right of Cancellation

The user may request the cancellation of their personal data when they consider that the data are no longer necessary for the purposes for which they were collected.

Cancellation may involve:

• Deletion.
• Blocking.
• Anonymization.

However, Drommo may retain certain information where a legal or contractual obligation so requires.

29.5 Right of Opposition

The user may object to the processing of their personal data when:

• There are legitimate grounds relating to their particular situation.
• The processing is not necessary to comply with legal obligations.
• Mexican law recognizes that right.

Drommo will review each request in accordance with applicable regulations.

29.6 Revocation of consent

Where the processing is based on the user’s consent, the user may revoke it at any time.

Revocation will not have retroactive effect on processing carried out before such request.

29.7 Procedure for exercising rights

Requests related to ARCO rights must be sent to:

Email:

help@drommo.com

The request should include, where possible:

• Name of the data subject.
• Email address associated with the account.
• The right they wish to exercise.
• A clear description of the request.
• Sufficient information to identify the corresponding account.

Drommo may request additional information where necessary to verify the requester’s identity.

29.8 Competent authority

If the user believes that Drommo has processed their personal data in a manner contrary to Mexican law, they may contact the competent authority for personal data protection.

However, we recommend first contacting Drommo to try to resolve the matter amicably.

Where applicable, residents of the State of California may exercise the rights recognized by the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

Drommo will respect these rights to the extent they are applicable under the relevant law.

30.1 Right to know

The user may request information about:

• The categories of personal data collected.
• The sources from which the data were obtained.
• The purposes of the processing.
• The categories of third parties with whom the information is shared.
• The categories of information disclosed during the relevant period.

30.2 Right of access

Where applicable, the user may request a copy of the personal data processed by Drommo.

The information will be provided in a reasonably accessible format, in accordance with applicable law.

30.3 Right to deletion

The user may request the deletion of the personal data collected by Drommo, except where the law permits certain information to be retained in order to:

• Comply with legal obligations.
• Complete transactions.
• Detect security incidents.
• Prevent fraud.
• Defend legal claims.
• Comply with tax obligations.
• Exercise rights provided for by law.

30.4 Right to correction

The user may request the correction of inaccurate personal information maintained by Drommo.

Where possible, they may also update their profile directly.

30.5 Right to limit the use of sensitive information

If Drommo were to process categories of information considered sensitive under the CPRA, the user may request that such processing be limited where the law so permits.

Drommo currently endeavors not to collect sensitive personal information that is not necessary for the provision of its services.

30.6 Right to non-discrimination

Drommo will not discriminate against any user for exercising the rights recognized by the CCPA or the CPRA.

The exercise of these rights will not result in:

• Unjustified denial of service.
• Additional charges.
• Arbitrary reduction of functionality.
• Unequal treatment.

However, certain features may cease to be available where they necessarily require the processing of data whose deletion has been requested.

30.7 Sale and sharing of information

Drommo does not sell personal data to third parties.

Likewise, Drommo does not share personal information for “cross-context behavioral advertising” purposes, unless the user is expressly informed in the future and consent is obtained where required by law.

30.8 Exercising rights

Users may exercise their rights by sending a request to:

Email:

help@drommo.com

Drommo may request reasonable information to verify the requester’s identity before handling the request.

Drommo operates as a digital platform accessible from different countries and uses technology providers located in various jurisdictions to provide its services.

As a result, the user’s personal data may be processed or stored outside their country of residence.

Drommo takes reasonable measures to ensure that such transfers are carried out in accordance with applicable law and with an adequate level of protection.

31.1 Nature of the transfers

Personal data may be transferred internationally when necessary to:

• Authenticate users.
• Process payments.
• Store information.
• Send emails.
• Generate content using Artificial Intelligence.
• Analyze the Platform’s performance.
• Provide technical support.
• Maintain the technology infrastructure.

These transfers are part of the normal operation of Drommo.

31.2 Transfer destinations

Depending on the services used by the user, the information may be processed by providers located in different countries.

The services used by Drommo include, among others:

• Authentication services.
• Payment processing.
• Databases.
• File storage.
• Cloud infrastructure.
• Artificial Intelligence.
• Analytics.
• Email.

Providers may process information in data centers located in the United States or other jurisdictions where their infrastructure operates.

31.3 Safeguards applied

When an international transfer is subject to the General Data Protection Regulation (GDPR), Drommo will endeavor to use mechanisms recognized by applicable law, including, where appropriate:

• Standard Contractual Clauses.
• Adequacy decisions issued by the competent authorities.
• Additional technical and organizational measures.
• Other legally recognized mechanisms.

31.4 Transfers necessary to provide the service

By using Drommo, the user acknowledges that certain international transfers are necessary for the operation of services such as:

• Sign-in.
• Subscription management.
• Payment processing.
• Resource downloads.
• Sending emails.
• AI-powered prompt generation.

Without these transfers, certain features of the Platform might not be available.

31.5 Protection measures

Drommo endeavors to select providers that implement appropriate security measures, such as:

• Encryption in transit.
• Encryption of stored information where available.
• Access controls.
• Security monitoring.
• Regulatory compliance programs.
• Security audits.

31.6 Access limitation

Drommo limits access to transferred personal data solely to:

• Authorized personnel.
• Necessary technology providers.
• Competent authorities where there is a legal obligation.

We do not authorize indiscriminate access to personal information.

31.7 User rights

International transfers do not affect the rights granted to the user under:

• General Data Protection Regulation (GDPR).
• Mexico’s Federal Law on the Protection of Personal Data.
• California Consumer Privacy Act (CCPA).
• California Privacy Rights Act (CPRA).
• Other applicable legislation.

The user may exercise their rights using the mechanisms described in this Policy.

31.8 Changes in providers

Drommo may replace its technology providers with equivalent ones when necessary for technical, commercial, or security reasons.

In all cases, we will endeavor to ensure that new providers maintain an adequate level of protection for personal data.

The age of majority depends on the country, and in some countries on the state or province: for example 18 in Mexico, Spain or most of the United States, 19 in South Korea, 20 in Thailand or New Zealand and 21 in Puerto Rico or Egypt. Drommo applies the rule of the country you state.

32.1 Date of birth and country

When parental controls are active, when you start using your account we ask for your date of birth, your country and, where relevant, your state or province. We preselect the country with the country header Cloudflare sends, and you can change it. With these details we place your account as an adult, a minor who needs a guardian’s approval, or a person below the minimum age; your age is worked out from the date. You can correct these details in My profile, except a change that lifts an age limit (for example, from minor to adult): that one goes through help@drommo.com.

You can also state your gender (female, male, non-binary, other or prefer not to say). It is optional, does not change what you can use, can be changed or removed in My profile, and we only use it to address you and in aggregate statistics that do not identify you. We do not ask for identity documents or other sensitive data.

32.2 Minimum age

People below the minimum age of their country cannot use Drommo, even with a guardian’s approval. We apply each country’s age of digital consent: 13 in the United States under COPPA, 13 to 16 in the European Union depending on the member state under GDPR art. 8, and similar ages elsewhere. If we learn that we collected data from a person below that age, we will delete it.

32.3 Guardian approval

A minor between the minimum age and the age of majority can generate content only after their parent or legal guardian, with an adult Drommo account, approves the account. The minor writes their guardian’s email and we send an invitation with a link and a one-time code; the minor can also share the code directly. When the guardian signs in or creates their account with that same verified email, they see the request in Parental controls with the minor’s name, email and age, choose what the minor can use and approve or decline it; if they decline, the code stops working and the minor sees that it was declined. Until the guardian approves the account, the minor cannot use Drommo. By approving it, the guardian confirms their relationship with the minor and consents to the processing of the minor’s data described in this Policy. The next time the minor signs in, they see a notice that they have permission and what they can use.

32.4 Data we process for parental controls

• Date of birth, country and, where relevant, state or province.
• The guardian’s account identifier and the approval date.
• The limits the guardian chose: chat modes, models, complements and monthly credits.
• The credits the minor used in the current month.
• The link code, which we store only as a hash and which expires after seven days.
• The guardian’s email the minor sent the invitation to (at most three a day), which we delete when the guardian approves the account, and the date the guardian declined it, if they did.
• Your gender, if you choose to state it.

We process this data to comply with the law that applies to minors and, for a minor, with their guardian’s consent. We apply the limits on our servers on every request.

32.5 What the guardian sees

The guardian sees the name or email of the minor’s account, their age, the limits and the credits used in the month. The guardian does not see the minor’s conversations, prompts or results.

32.6 Model training

We never use a minor’s data to train models. When a minor’s date of birth is recorded we withdraw any earlier training consent, and a minor cannot give it again.

32.7 Communications and marketing

Drommo does not direct marketing campaigns at minors or use their data for advertising. Communications with a minor are limited to those the service needs.

32.8 Purchases

The guardian is responsible for purchases made from a minor’s account. A minor may not contribute to the crowdfunding campaign. We may cancel transactions made in breach of these rules.

32.9 Retention and deletion

We keep this data while the account exists. When the minor reaches the age of majority the limits stop applying. The guardian can withdraw the approval at any time from Parental controls. To request deletion of a minor’s data, write to help@drommo.com; we will verify the request and handle it under applicable law.

32.10 AI-generated content

Drommo’s AI tools are not designed specifically for minors. Guardians should supervise their use and can limit the modes, models and complements available.

Drommo implements measures intended to protect the transactions carried out by users and to reduce the risk of fraud during the purchase process for digital products and subscriptions.

Payments are processed by specialized providers that comply with international security standards.

Drommo does not directly process sensitive financial information.

33.1 Secure Payment Processing

All payments made on Drommo are processed through platforms specializing in electronic payments.

Processing includes, among others:

• One-time purchases.
• Paid subscriptions.
• Automatic renewals.
• Refunds.
• Cancellations.
• Payment method updates.

Financial information is managed directly by the relevant payment provider.

33.2 Information Drommo Does Not Store

For security reasons, Drommo does not directly store:

• Full bank card numbers.
• CVV or CVC codes.
• Bank PINs.
• Banking credentials.
• Complete bank account information.
• Complete digital wallet data.

Financial information remains within the payment provider’s secure infrastructure.

33.3 Transaction Confirmation

Once a transaction has been processed, Drommo may receive information such as:

• Payment confirmation.
• Purchase status.
• Transaction identifier.
• Subscription status.
• Payment date.
• Information necessary to activate the products purchased.

This information is used solely to provide the contracted service.

33.4 Fraud Prevention

In order to protect both users and Drommo, mechanisms may be applied to detect:

• Fraudulent purchases.
• Compromised payment methods.
• Automated activity.
• Improper chargebacks.
• Misuse of promotions.
• Mass account creation.
• Suspicious access.

Where necessary, certain transactions may be verified before they are approved.

33.5 Refunds

Refunds, where applicable under Drommo’s Terms and Conditions, will be processed using the same payment method used by the user, unless the law or the payment provider provides for a different solution.

Crediting times will depend on the relevant financial provider.

33.6 Record Retention

Drommo may retain transaction-related information in order to:

• Comply with tax obligations.
• Handle claims.
• Resolve disputes.
• Manage chargebacks.
• Detect fraud.
• Comply with legal obligations.

The information will be retained only for as long as necessary for those purposes.

33.7 Compliance with Security Standards

Drommo endeavors to use providers that implement international security standards applicable to electronic payment processing, including, where applicable:

• PCI DSS (Payment Card Industry Data Security Standard).
• Encryption of communications.
• Anti-fraud monitoring.
• Strong authentication.
• Protection against unauthorized access.

33.8 User Responsibility

The user is responsible for:

• Using authorized payment methods.
• Keeping their banking credentials secure.
• Periodically reviewing their financial transactions.
• Immediately reporting any unauthorized transaction.

Drommo will not be liable for losses arising from the misuse of financial credentials beyond its control.

Drommo incorporates Artificial Intelligence tools intended to assist users in creating prompts and content related to generative models.

Our goal is to provide a secure, transparent, and privacy-respecting environment when these tools are used.

34.1 Protection of Requests

Prompts submitted by users are processed using secure connections.

Drommo takes reasonable measures to protect the information transmitted during content generation.

34.2 Information Used

The information submitted to the Artificial Intelligence tools may include:

• Prompt text.
• Instructions.
• Selected settings.
• User preferences.
• Generation parameters.

This information is used exclusively to generate the requested content.

34.3 Confidential Content

Drommo recommends that users not enter confidential information, including:

• Passwords.
• Banking information.
• Trade secrets.
• Medical data.
• Identity documents.
• Private financial information.
• Information protected by confidentiality agreements.

AI tools should not be used to process highly sensitive information.

34.4 Limitations of Artificial Intelligence

Results generated by AI models may:

• Contain errors.
• Be incomplete.
• Not reflect up-to-date information.
• Produce similar results for different users.
• Vary between runs.

Drommo recommends carefully reviewing any content before using it for professional or commercial purposes.

34.5 Protection Against Misuse

Drommo may restrict access to the AI tools when it detects:

• Abusive automated activity.
• Attempts to exploit the system.
• Generation of unlawful content.
• Violations of the Terms and Conditions.
• Risks to the security of the Platform.

These measures are intended to protect both users and the technology infrastructure.

34.6 Temporary Retention

Certain requests may be retained temporarily where necessary to:

• Maintain service continuity.
• Resolve technical issues.
• Detect errors.
• Investigate fraudulent activities.
• Comply with legal obligations.

Once the information is no longer necessary, it will be deleted or anonymized in accordance with this Policy.

34.7 Ownership of Generated Content

Unless otherwise provided in the Terms and Conditions or applicable law:

• The user retains the rights to which they are legally entitled in the prompts they create.
• Drommo does not automatically claim ownership of user-generated content.
• Results obtained through AI may not be exclusive due to the probabilistic nature of generative models.

34.8 Responsible Use

The user agrees to use the Artificial Intelligence tools responsibly and in accordance with applicable law.

Drommo may suspend or restrict access to these tools when it detects use that:

• Violates the rights of third parties.
• Infringes copyrights.
• Promotes unlawful activities.
• Compromises the security of the Platform.
• Breaches these Terms and Conditions.

Drommo offers digital resources intended to facilitate working with Artificial Intelligence tools, including prompts, templates, HTML files, examples, images, videos, documentation, and other digital materials.

This Privacy Policy governs only the processing of personal data and does not replace the intellectual property provisions contained in the Terms and Conditions.

35.1 Ownership of the Platform

All rights relating to:

• The design of Drommo.
• The visual identity.
• Logos.
• Trademarks.
• Interfaces.
• Proprietary source code.
• The organization of content.
• Databases protected under applicable law.
• Original documentation.

belong to Magzin LLC or to their respective owners, as applicable.

Nothing in this Policy implies the transfer of such rights to the user.

35.2 Digital Resources

Drommo may offer digital resources such as:

• Prompts for image generation.
• Prompts for video generation.
• Prompts for web development.
• Prompts for applications.
• Templates.
• HTML demos.
• Components.
• Downloadable files.
• Free resources.
• Paid resources.

Each resource may be subject to a specific license indicated on its corresponding page.

35.3 User-Created Content

Prompts, instructions, and other content entered by the user continue to belong to their author to the extent recognized by applicable law.

By using Drommo, the user retains the rights to which they are legally entitled in the content they create.

Drommo does not automatically claim intellectual property rights in content generated by users.

35.4 Content Generated Using Artificial Intelligence

Results obtained through Artificial Intelligence tools may depend on generative models provided by third parties.

Due to the probabilistic nature of such models:

• Similar results may be generated for different users.
• Drommo does not guarantee the exclusivity of results.
• The user is responsible for verifying that the use of generated content does not infringe the rights of third parties.

35.5 Usage Licenses

The purchase or download of a digital resource grants only the usage license indicated for that resource.

Unless the license expressly provides otherwise, the purchase of a resource does not entail the assignment of intellectual property rights.

The user must comply with the limitations on use, reproduction, redistribution, and commercialization set forth in the corresponding license.

35.6 Infringement of Rights

Drommo respects the intellectual property rights of third parties.

If a person believes that any content available on the Platform infringes their rights, they may contact:

help@drommo.com

The request must include sufficient information to identify the content and to establish ownership of the rights asserted.

Drommo will evaluate the request and, where appropriate, take the reasonable measures provided for under applicable law.

35.7 Content Protection

Drommo may implement measures intended to protect digital resources against:

• Unauthorized access.
• Automated downloads.
• Unlawful redistribution.
• Fraudulent use.
• Reverse engineering, where applicable.
• Unauthorized exploitation of the resources.

These measures are intended to protect both Drommo and the creators who publish content on the Platform.

35.8 Third-Party Content

Certain resources available on Drommo may belong to third parties.

In such cases:

• The intellectual property rights will continue to belong to their respective owners.
• The user must comply with the corresponding terms of use.
• Drommo will endeavor to properly identify the authorship or license where applicable.

Drommo may update this Privacy Policy when necessary to reflect legal, technological, commercial, or operational changes.

Changes will be made with the aim of maintaining an adequate level of transparency and information for users.

36.1 Reasons for Updates

The Policy may be amended due to:

• Legislative changes.
• Regulatory changes.
• New features.
• New services.
• New technology providers.
• Changes in infrastructure.
• Security improvements.
• The addition of new Artificial Intelligence tools.
• Changes in payment methods.
• Changes in analytics tools.

36.2 Publication of Changes

The current version of this Policy will be permanently available at:

https://drommo.com

The date of the last update will appear at the beginning or end of the document for ease of reference.

36.3 Notice of Material Changes

When a change significantly affects the processing of personal data, Drommo may notify users through one or more of the following mechanisms:

• A prominent notice on the website.
• Email.
• In-account notification.
• Informational banner.
• Other reasonable means of communication.

Where required by applicable law, the user’s consent will be requested again.

36.4 Effective Date of Changes

Changes will take effect on the date indicated in the updated version of this Policy.

Where no specific date is indicated, changes will take effect upon publication.

36.5 Continued Use

Continued use of Drommo after a change takes effect constitutes acceptance of the updated version of this Policy, except where applicable law requires additional consent.

If the user does not agree with the changes, they may:

• Stop using the Platform.
• Delete their account.
• Cancel their subscriptions.
• Request the deletion of their personal data in accordance with this Policy.

36.6 Previous Versions

Drommo may retain previous versions of this Policy for the purposes of:

• Legal compliance.
• Audits.
• Dispute resolution.
• Verification of the terms applicable at a given time.

36.7 Consistency with Other Policies

This Policy must be read together with:

• The Terms and Conditions.
• The Cookie Policy.
• Specific policies relating to purchases.
• The paid subscription terms.
• Any other legal document published by Drommo.

In the event of a conflict regarding the processing of personal data, this Privacy Policy will prevail.

36.8 Contact for Inquiries

If the user has questions about changes to this Policy or about the processing of their personal data, they may contact:

Email:

help@drommo.com

Drommo will endeavor to respond to inquiries within a reasonable period and in accordance with applicable law.

Drommo makes communication channels available to users to address inquiries related to privacy, the processing of personal data, and the exercise of the rights recognized by applicable law.

Our goal is to respond to requests clearly, transparently, and within the time limits established by the relevant regulations.

37.1 Data Controller

The controller of the personal data collected through Drommo is:

Magzin LLC

800 Third Avenue Associates

New York, NY 10022

United States

Website

https://drommo.com

Support email

help@drommo.com

37.2 Privacy-Related Requests

Users may contact Drommo to request information regarding:

• Access to their personal data.
• Correction of information.
• Account deletion.
• Deletion of personal data.
• Portability.
• Objection to processing.
• Restriction of processing.
• Withdrawal of consent.
• Unsubscribing from email marketing.
• Questions related to this Privacy Policy.

37.3 How to Submit a Request

Requests must be sent to:

Email

help@drommo.com

To protect our users’ personal information, Drommo may request additional information that allows it to reasonably verify the requester’s identity before handling the request.

37.4 Recommended Information

To expedite the handling of the request, we recommend including:

• Name of the account holder.
• Registered email address.
• The right you wish to exercise.
• A detailed description of the request.
• Additional information that allows the corresponding account to be located.

Where necessary, Drommo may request additional documentation solely to verify the requester’s identity.

37.5 Response Time

Drommo will endeavor to respond to requests within a reasonable period.

Where applicable law establishes specific time limits, those time limits will prevail over any other internal criteria.

If a request requires additional time due to its complexity, Drommo will inform the user in a timely manner.

37.6 Cost

The exercise of data protection rights will, as a general rule, be free of charge.

However, Drommo may charge a reasonable fee when:

• The law permits it.
• The request is manifestly unfounded.
• The request is excessive or repetitive.
• There are extraordinary administrative costs permitted by the regulations.

37.7 Identity Verification

Before handling certain requests, Drommo may verify the requester’s identity in order to prevent unauthorized access to personal information.

This verification may be carried out using:

• The registered email address.
• The authenticated account.
• Previously provided security information.
• Other reasonable and proportionate mechanisms.

37.8 Privacy-Related Communications

Responses to privacy requests may be sent via:

• Email.
• Notifications within the Platform.
• Other appropriate electronic means.

Drommo will endeavor to use the same means the user used to submit the request, unless it is more appropriate to use another channel.

If a user believes that Drommo has not properly processed their personal data, they may contact the competent data protection authorities in accordance with applicable law.

Drommo recommends first contacting our support team to try to resolve any issue amicably.

38.1 Users in the European Union

Users subject to the General Data Protection Regulation (GDPR) may lodge a complaint with the competent supervisory authority of the Member State where:

• They habitually reside.
• They work.
• The alleged infringement took place.

38.2 Users in Mexico

Users located in Mexico may exercise the rights provided for under the Federal Law on the Protection of Personal Data Held by Private Parties.

If they believe that Drommo has failed to comply with that law, they may file a complaint with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI) or the authority that legally replaces it in the future.

38.3 Users in California

Residents of the State of California may exercise the rights provided for under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

If they believe that their rights have not been respected, they may contact the competent authorities in accordance with current law.

38.4 Other Countries

Users located in other countries may contact the competent data protection or consumer protection authorities in accordance with the law applicable in their jurisdiction.

38.5 Cooperation with Authorities

Drommo will cooperate with the competent authorities when:

• There is a legal obligation.
• It is necessary to respond to official investigations.
• Court orders must be complied with.
• It is necessary to protect its own rights or those of third parties.

All cooperation will be carried out in accordance with the principles of lawfulness, necessity, and proportionality.

38.6 Amicable Resolution

Before contacting a competent authority, we invite the user to contact Drommo at:

help@drommo.com

Our goal will be to resolve any privacy-related question, complaint, or issue quickly, transparently, and in good faith.

38.7 Retention of Evidence

Drommo may retain records related to privacy requests and complaints in order to:

• Demonstrate compliance with applicable law.
• Respond to audits.
• Resolve disputes.
• Defend legal rights.

The retention of these records will be limited to the period necessary under applicable law.

38.8 Good Faith

Drommo will handle all privacy-related requests in good faith, endeavoring to ensure respect for users’ rights and compliance with applicable legal obligations.

This Privacy Policy takes effect as of the date indicated at the end of this document and will remain in effect until it is replaced by a subsequent version published by Drommo.

Drommo may update this Policy when necessary to reflect legal, technological, operational, or commercial changes, as set forth in Section 36.

39.1 Effective Date

This Privacy Policy takes effect on:

July 10, 2026

The effective date may be updated when a new version of this document is published.

39.2 Current Version

The official and current version of this Policy will be permanently available at:

https://drommo.com

If copies or reproductions of this document exist in other media, the version published on the official website will prevail.

39.3 Replacement of Previous Versions

Each new published version will replace the previous one as of its corresponding effective date.

Previous versions may be retained solely for:

• Legal compliance.
• Audits.
• Dispute resolution.
• Historical verification.
• Compliance with regulatory obligations.

39.4 Document Retention

Drommo may retain records relating to:

• Acceptance of the Policy.
• Changes made.
• Historical versions.
• Consents granted.
• Privacy-related requests.

These records may be used to demonstrate compliance with applicable law.

39.5 Permanent Availability

Drommo will endeavor to keep this Policy permanently available for consultation on its website.

The user may access it before creating an account, making a purchase, or using any of the services offered through the Platform.

39.6 Relationship to Future Features

When Drommo introduces new services or features that involve additional processing of personal data, this Policy may be updated to reflect those changes.

Where required by law, the user will be informed in advance and, where applicable, the corresponding consent will be requested.

39.7 Language

This Privacy Policy was originally drafted in Spanish.

If Drommo publishes translations into other languages, such translations will be for informational purposes only, unless expressly stated otherwise or applicable law provides otherwise.

39.8 Ongoing Review

Drommo recommends periodically reviewing this Policy to stay informed about how we protect personal data.

Continued use of the Platform constitutes acceptance of the current version of this Policy, except where the law requires additional consent.

The following provisions govern the general interpretation of this Privacy Policy and supplement the obligations described in the preceding sections.

40.1 Entire Agreement

This Policy forms an integral part of Drommo’s legal framework and must be read together with:

• The Terms and Conditions.
• The Cookie Policy.
• The specific purchase terms.
• The paid subscription terms.
• Specific policies relating to promotions or additional services.

40.2 Precedence

In the event of a conflict between this Policy and any other document relating to the processing of personal data, this Privacy Policy will prevail, unless applicable law provides otherwise.

The mandatory data protection rules of the user’s country of residence will prevail where they are binding.

40.3 Severability

If any provision of this Policy is declared invalid, unlawful, or unenforceable by a competent authority, such circumstance will not affect the validity of the remaining provisions.

The remaining clauses will continue in full force and effect.

40.4 No Waiver

Drommo’s failure to exercise any of the rights provided for in this Policy will not constitute a waiver of such rights.

Any waiver must be made expressly and in writing.

40.5 Continuing Protection

Obligations relating to:

• Confidentiality.
• Security.
• Retention of information.
• Legal compliance.
• Protection of personal data.

will continue to apply even after:

• Deletion of the account.
• Cancellation of a subscription.
• Cessation of use of the Platform.
• Termination of the contractual relationship.

40.6 Interpretation

The titles and headings used in this Policy are for organizational purposes only and do not modify the legal meaning of the corresponding provisions.

40.7 Official Communications

Official communications relating to this Policy may be made through:

• Email.
• Notices within the Platform.
• Posts on the website.
• Other reasonably appropriate electronic means.

Drommo may use any of these means when necessary to comply with legal obligations or to report material changes.

40.8 Official Contact

For any inquiries related to this Privacy Policy, users may contact:

Drommo

Website:

https://drommo.com

Email:

help@drommo.com

Operated by:

Magzin LLC

800 Third Avenue Associates

New York, NY 10022

United States

40.9 Commitment to Privacy

Drommo reaffirms its commitment to processing personal data in a manner that is:

• Lawful.
• Fair.
• Transparent.
• Limited to the disclosed purposes.
• Secure.
• Accountable.

Our goal is to offer a trustworthy platform that allows users to access Artificial Intelligence resources with a high level of protection for their personal information.

40.10 Final Statement

By accessing, registering for, or using any of the services offered by Drommo, the user declares that they:

• Have read this Privacy Policy.
• Understand its contents.
• Know how their personal data will be processed.
• Have been informed of their rights.
• Accept the processing of their data in accordance with this Policy and applicable law.

Where current regulations require express consent, Drommo will request it through the corresponding mechanisms before beginning to process the data.

© 2026 Drommo by Magzin. All rights reserved.

Operated by:

Magzin LLC

800 Third Avenue Associates

New York, NY 10022

United States

Website: https://drommo.com

Email: help@drommo.com