Privacy Policy

Last updated: May 6, 2026

Drip ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services. Please read this policy carefully.

1. Information We Collect

We collect information you provide directly to us and information collected automatically through your use of our services.

Information you provide:

• Account information such as your name and email address when you register
• Identity information including date of birth, Social Security Number, and address when you open a brokerage account
• Financial account credentials you provide through Plaid to connect your credit cards

Information collected automatically:

• Credit card transaction data accessed through Plaid, including transaction amounts, dates, and merchant names
• Cashback and reward credit information detected from your connected accounts
• Investment activity within your Drip brokerage account
• Usage data and log information when you interact with our application

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our services
• Detect cashback and reward credits from your connected credit card accounts
• Execute automated investments on your behalf based on detected rewards
• Create and manage your brokerage account through our custodian partner
• Send you notifications and updates about your account activity
• Comply with legal and regulatory obligations
• Prevent fraud and ensure the security of our platform

3. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

• Plaid: We use Plaid to connect to your financial accounts. Plaid's use of your data is governed by their Privacy Policy at plaid.com/legal.
• Alpaca: We use Alpaca as our brokerage and custodian partner. Your identity and account information is shared with Alpaca to open and maintain your brokerage account.
• Legal requirements: We may disclose your information if required by law, regulation, or legal process.
• Business transfers: In the event of a merger or acquisition, your information may be transferred as part of that transaction.

4. Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted between your device and our servers is encrypted using TLS 1.2 or higher
• Sensitive financial data including Plaid access tokens is encrypted at rest
• Access to production systems is restricted and protected by multi-factor authentication
• We use role-based access controls to limit who can access your data internally

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide our services. If you close your account, we will retain certain information as required by law or for legitimate business purposes such as resolving disputes or preventing fraud.

You may request deletion of your personal data by contacting us at the email address below. We will respond to deletion requests within 30 days.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• The right to access the personal information we hold about you
• The right to correct inaccurate or incomplete information
• The right to request deletion of your personal information
• The right to opt out of certain uses of your information
• The right to data portability

To exercise any of these rights, please contact us at boyleconor8@gmail.com.

7. Plaid Integration

Drip uses Plaid Technologies, Inc. ("Plaid") to connect your financial accounts. By using our service, you acknowledge and agree to Plaid's Privacy Policy available at plaid.com/legal. Plaid collects, uses, and shares your financial data in accordance with their privacy policy.

We access only the transaction data necessary to identify cashback reward credits. We do not access, store, or use your banking credentials directly — these are handled entirely by Plaid.

8. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of our services after any changes constitutes your acceptance of the updated policy.

10. Investment Disclosures

Drip is not a registered investment adviser. The automated investment features of our service are powered by Alpaca Securities LLC, a registered broker-dealer and member of FINRA/SIPC. Investing involves risk, including the possible loss of principal. Past performance is not indicative of future results. Nothing in this application constitutes personalized investment advice.