Privacy policy
Last updated: 11 November 2026
This policy explains how Grand Avocado Ltd. ("we") processes personal data when you use Drop The BG at dropthebg.com, in line with the EU General Data Protection Regulation (GDPR) and the Finnish Data Protection Act.
1. Data controller
Grand Avocado Ltd., Laitolahdenkatu 11, 37120 Nokia, Finland. Business ID FI23228681. Privacy contact: privacy@dropthebg.com.
2. What we collect
- Account data: email, name, sign-in method.
- Billing data: company name, address, country, VAT ID, purchase history and invoices. Card details are handled by our payment provider; we never see them.
- Images: files you upload and the processed results.
- Usage data: number of images processed, credits used, API key usage, timestamps.
- Technical data: IP address and browser information in security logs.
3. Why and on what legal basis
- Providing the service and billing — performance of contract (Art. 6(1)(b)).
- Bookkeeping and tax — legal obligation (Art. 6(1)(c)).
- Security and abuse prevention — legitimate interest (Art. 6(1)(f)).
- Optional analytics — your consent (Art. 6(1)(a)), which you can withdraw at any time in cookie settings.
4. How long we keep it
- Uploaded and processed images: automatically deleted after 24 hours.
- Account and usage data: while your account exists.
- Invoices and transaction records: 6 years after the end of the financial year, as required by the Finnish Accounting Act.
5. Who we share it with
We use carefully selected processors: cloud hosting and database (EU region where available), our own image processing infrastructure on Amazon Web Services, and a payment provider. We do not sell personal data. Transfers outside the EU/EEA are protected by the EU Standard Contractual Clauses.
6. Your rights
You can access, correct, export or delete your data, object to or restrict processing, and withdraw consent. You can download your data and delete your account yourself in Account settings, or email us. You also have the right to lodge a complaint with the Office of the Data Protection Ombudsman (tietosuoja.fi).
7. Your images
We process your images only to provide the service. We do not use them to train AI models without your separate, explicit permission.
8. Changes
We'll notify registered users by email of material changes to this policy.