Privacy Policy
for DropVM AI
What information do we collect?
Last Updated: August 31, 2026
DropVM respects your privacy and is committed to protecting personal information handled through our websites, applications, APIs, communications tools, and related services.
This Privacy Policy explains how DropVM (“DropVM,” “we,” “us,” or “our”) collects, uses, stores, discloses, and protects personal information when you visit dropvm.ai, create or use a DropVM account, interact with our services, communicate with us, or otherwise engage with DropVM.
It also explains certain privacy rights that may be available to you under applicable law.
1. Scope of This Privacy Policy
This Privacy Policy applies to personal information we process in connection with:
DropVM websites and landing pages; DropVM accounts and dashboards; ringless voicemail services; SMS and MMS messaging services; contact management and custom fields; campaign automation and workflows; AI voice and audio-related features; APIs, webhooks, integrations, and developer tools; analytics and reporting features; customer support, sales, and account communications; and other DropVM products and services that link to this Privacy Policy.
This policy does not apply to third-party websites, platforms, applications, or services that may be linked to or integrated with DropVM. Those services are governed by their own privacy policies.
2. Our Role When Processing Personal Information
DropVM may process personal information in different capacities depending on the context.
When you visit our website, create an account, request a demo, purchase services, or communicate directly with DropVM, we generally determine how and why that personal information is processed.
When a DropVM customer uploads contacts, phone numbers, campaign lists, customer information, message content, or similar information to use our services, DropVM generally processes that information on behalf of the customer and according to the customer’s instructions.
In those situations, the DropVM customer is responsible for determining whether it has the necessary legal basis, consent, notices, and permissions to collect and use that information.
If you received a communication from one of our customers and want to exercise rights regarding that communication or the underlying customer data, you should generally contact the business that sent the communication.
3. Information We Collect
The information we collect depends on how you interact with DropVM.
Account and Profile Information
When you create or manage a DropVM account, we may collect information such as your name, email address, telephone number, company name, job title, account credentials, user preferences, and account settings.
Customer and Contact Data
Customers may upload, create, import, synchronize, or otherwise provide information about their contacts. This may include names, phone numbers, email addresses, company information, addresses, tags, custom fields, notes, consent records, opt-out information, campaign history, and other information selected by the customer.
Messaging and Campaign Data
When customers use DropVM for communications, we may process information associated with their campaigns, including recipient numbers, sender information, message content, voicemail content, SMS or MMS content, delivery information, campaign settings, timestamps, status information, responses, opt-outs, and related metadata.
Voice and Audio Information
DropVM features may allow customers to upload, record, generate, store, or process audio and voice content.
This may include prerecorded messages, voicemail recordings, audio files, and voice samples submitted for supported voice-related features.
Depending on how voice information is collected or processed and the jurisdiction involved, certain voice information may be considered sensitive personal information or subject to additional legal requirements.
Customers are responsible for obtaining any permissions or consents required before uploading or processing another person’s voice through DropVM.
Integration and API Data
When you connect DropVM to third-party services or use our APIs, SDKs, webhooks, or integrations, we may receive and process information necessary to operate the connection.
This may include API credentials, integration identifiers, contact information, event data, workflow information, synchronization records, technical logs, and information provided by the connected service.
Payment and Billing Information
When you purchase DropVM services, we may collect billing information such as your billing name, business details, billing address, transaction information, subscription information, and payment status.
Payment card or financial information may be processed directly by our payment service providers rather than stored directly by DropVM.
Website and Device Information
When you use our websites or services, we may automatically collect technical information such as IP address, browser type, device type, operating system, referring pages, pages viewed, approximate location derived from IP address, session information, login activity, device identifiers, timestamps, and other diagnostic information.
Cookies and Similar Technologies
We may use cookies and similar technologies to operate our websites, remember preferences, understand website usage, improve performance, maintain security, and, where applicable, measure marketing activity.
Additional information may be provided through our Cookie Policy or cookie preference tool.
Communications With DropVM
If you contact our sales, support, legal, compliance, or other teams, we may collect the information contained in your request and our communications with you.
4. How We Use Personal Information
We may use personal information to provide, operate, maintain, secure, and improve DropVM; create and administer accounts; process communications and campaigns initiated by our customers; provide ringless voicemail, SMS, automation, contact management, integrations, analytics, and related services; authenticate users and prevent unauthorized account access; process subscriptions, transactions, and billing; provide customer support and respond to inquiries; diagnose technical problems and maintain service reliability; develop and improve products and user experiences; analyze website and product usage; communicate about service updates, security issues, product changes, and account matters; protect DropVM, our customers, users, and third parties against fraud, abuse, spam, security incidents, or unlawful activity; enforce our agreements and policies; comply with legal obligations and lawful government requests; and establish, exercise, or defend legal claims.
Where required by law, we rely on an appropriate legal basis for processing, such as performance of a contract, legitimate interests, compliance with legal obligations, or consent.
5. Customer Responsibilities
DropVM provides technology that customers can use to communicate with their own contacts.
Customers are responsible for ensuring that their use of DropVM complies with applicable laws, regulations, industry requirements, contractual obligations, and consumer preferences.
Depending on the communication, these requirements may include the Telephone Consumer Protection Act (TCPA), Telemarketing Sales Rule (TSR), Do Not Call requirements, CTIA messaging principles, 10DLC and carrier requirements, debt collection laws, state telemarketing laws, privacy laws, consent requirements, quiet-hour requirements, and opt-out obligations.
DropVM does not independently determine whether a customer has the legal right to contact a particular person.
6. Consent and Contact Preferences
Customers using DropVM are responsible for maintaining appropriate consent or another lawful basis for communications where required.
DropVM may provide features that help customers organize consent information, contact preferences, suppression information, quiet hours, and opt-out activity.
These features are tools to support a customer’s compliance process and do not constitute a guarantee of legal compliance.
7. How We Disclose Personal Information
We may disclose personal information to service providers that help us operate DropVM, such as cloud infrastructure providers, telecommunications providers, payment processors, analytics providers, security vendors, customer support providers, email providers, and other technology vendors.
These providers may access personal information only as necessary to perform services for us and are subject to contractual or other applicable data protection obligations.
We may also disclose information:
- when you direct us to or authorize an integration;
- between authorized users within the same customer account;
- to professional advisers such as lawyers, accountants, auditors, and insurers;
- in connection with a merger, acquisition, financing, reorganization, sale of assets, or similar business transaction;
- when required by law, subpoena, court order, legal process, or lawful government request;
- where necessary to investigate fraud, abuse, security incidents, violations of our terms, or threats to the rights and safety of DropVM or others.
We do not disclose customer contact data to unrelated third parties for those third parties to independently send marketing communications to those contacts.
8. Third-Party Integrations
DropVM may allow customers to connect third-party CRMs, applications, APIs, automation services, and other platforms.
When you enable an integration, information may be transferred between DropVM and the third-party service according to your instructions.
Third-party services operate under their own terms and privacy practices. We encourage you to review their privacy policies before enabling an integration.
9. AI, Voice, and Automated Features
Some DropVM services may include AI-assisted, automated, or voice-related functionality.
When you use these features, DropVM may process the information necessary to provide the requested functionality, including prompts, instructions, contact data, audio, voice recordings, message content, and generated outputs.
You must not upload, clone, reproduce, or process another person’s voice unless you have all rights, permissions, and consents required by applicable law.
10. Data Security
We use administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, misuse, loss, or destruction.
Security measures may include access controls, authentication mechanisms, network and infrastructure protections, monitoring, secure transmission methods, and policies limiting access to information based on business need.
No internet-based service or storage system can guarantee absolute security, and we cannot promise that unauthorized access or security incidents will never occur.
The FTC recommends that businesses understand what personal information they maintain, limit collection and retention to what is necessary, protect retained information, dispose of information securely, and maintain incident-response plans.
11. Data Retention
We retain personal information for as long as reasonably necessary to provide the services, maintain accounts, comply with contractual and legal obligations, resolve disputes, enforce agreements, maintain security, prevent fraud, and fulfill legitimate business purposes.
Customer content may be retained according to the customer’s account settings, contractual terms, applicable law, and our technical backup and deletion processes.
Retention periods can vary depending on the type of information and why it was collected.
12. International Data Transfers
DropVM and our service providers may process information in countries other than the country where you reside.
Where applicable law requires safeguards for international transfers of personal information, we use appropriate contractual, organizational, or legal transfer mechanisms.
13. Your Privacy Rights
Depending on your location, you may have rights regarding your personal information.
These may include rights to request access to personal information, correct inaccurate information, delete certain information, restrict or object to certain processing, obtain a portable copy of information, withdraw consent where processing depends on consent, opt out of certain targeted advertising or data-sharing practices where applicable, and appeal certain privacy-rights decisions where provided by law.
The GDPR provides rights including access, rectification, erasure, restriction, portability, and objection. California law provides rights including knowing what information is collected and used, deletion subject to exceptions, opting out of certain sales or sharing, and protection against discrimination for exercising privacy rights.
To exercise a privacy right, contact us using the information in the Contact Us section below.
We may need to verify your identity before completing a request.
Authorized agents may submit requests where permitted by applicable law.
14. California Privacy Rights
If you are a California resident and the California Consumer Privacy Act, as amended, applies to our processing, you may have additional rights concerning your personal information.
These may include the right to know the categories and specific pieces of personal information collected; the sources from which information was obtained; the purposes for collecting, using, selling, or sharing information; categories of recipients; the right to request deletion or correction; and the right to opt out of certain sales or sharing of personal information.
California also recognizes opt-out preference signals such as the Global Privacy Control in circumstances where applicable.
15. European Economic Area, United Kingdom, and Similar Jurisdictions
Where the GDPR, UK GDPR, or similar privacy legislation applies, DropVM processes personal information under a valid legal basis.
Depending on the circumstances, that basis may include performing a contract, complying with law, pursuing legitimate business interests, or obtaining consent.
Individuals in these jurisdictions may have rights to access, correct, erase, restrict, port, or object to processing of their personal data and may withdraw consent where processing is based on consent.
You may also have the right to submit a complaint to your local data protection authority.
16. Marketing Communications
We may send service-related communications that are necessary to administer your account or provide the services.
Where permitted, we may also send marketing communications about DropVM products, features, resources, or events.
You may unsubscribe from promotional emails using the unsubscribe mechanism included in those emails or by contacting us.
Unsubscribing from marketing communications does not prevent us from sending important transactional, account, billing, security, or service communications.
17. Children’s Privacy
DropVM is intended for businesses and professional users and is not designed for children.
We do not knowingly collect personal information directly from children under the age required for consent in the applicable jurisdiction.
If you believe a child has provided personal information to DropVM without appropriate authorization, contact us so we can review the matter.
18. Do Not Track and Global Privacy Control
Some browsers provide “Do Not Track” signals. Because there is not a uniform industry standard for responding to all Do Not Track signals, our response may depend on the technology and applicable law.
Where required, we recognize legally valid browser-based opt-out preference signals, such as Global Privacy Control, for processing to which those signals apply.
19. Business Transfers
If DropVM is involved in a merger, acquisition, financing, restructuring, bankruptcy, sale of assets, or similar transaction, personal information may be disclosed or transferred as part of that transaction.
Any successor entity will remain subject to applicable privacy obligations regarding the transferred information.
20. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, legal requirements, or other circumstances.
When we make changes, we will update the Last Updated date at the top of this policy.
If changes materially affect how we handle personal information, we may provide additional notice where required by law.
21. Contact Us
If you have questions about this Privacy Policy, our privacy practices, or a privacy rights request, contact:
DropVM
Privacy Team
Email: info@dropvm.ai
Legal Entity: DropVM AI
For matters involving data processed by DropVM on behalf of one of our customers, we may direct your request to that customer where appropriate.