Privacy Policy

This policy covers the Dranovo website (dranovo.com), its contact and support forms, and the client portal at my.dranovo.com (conversations, project start links, quotes, contracts, invoices and files), as well as the emails we exchange with you.

It does not cover the demo builds published on subdomains (such as shop.dranovo.com). They are showcase sites that send no data to us; anything you enter there stays in your own browser.

Data you give us:

• New project form: name, email, phone (optional), service type, approximate budget and timeline (optional), and your message.
• Support request: name, email, phone (optional), request type, a description of the issue, and any images you attach.
• Conversations: messages and files you send our team in the support chat or by email.

Data recorded automatically:

• The page you sent the form from and the site language.
• When you open a support conversation or send a message in it: your IP address, the approximate country derived from it, and your browser and device type.
• Limited security logs to prevent spam and abuse.
• When you send the new project form: how you reached us, meaning the campaign parameters of the link you came from (such as utm_source), the referring site and the first page you landed on, plus the source of your first visit and your two Google Analytics identifiers (browser and session), so we know which channel brought you to us.

Our website uses Google Analytics to measure visits, with analytics cookies that work while you browse (details in the Cookies section). We use no advertising tracking, and we never sell or rent your data to anyone.

After first contact we may send you private links to start your project, view your quote and pay invoices. When you use them we record:

• What you enter in the project start link: company details, project type, the features and colours you pick, and the logo and files you upload.
• When you open quotes and invoices, how long you spend on them, and PDF downloads — so we know when to follow up.
• When you accept a quote: the name you type, the time, your IP address, and your browser and device — as evidence of the agreement.
• Payment details: method, reference number, amount, and any proof of payment you upload. We never collect card details.

Client account (enabled by invitation): your profile and company contacts, plus a sign-in log (IP address, approximate country and city, browser and device) to protect your account and alert you to new devices. You can also sign in with Google or enable two-step verification if you choose.

Measurement inside our private pages uses our own tools and stays with us — no advertising cookies, and nothing shared with third parties.

• To reply to you, understand your needs, and prepare a plan and quote for your project.
• To support your existing project and follow up on your requests.
• To verify your email before opening a conversation in your name.
• To protect the site and our team from spam and abuse.
• To improve our services and how we communicate with you.

We won't send you marketing emails without your consent.

When you open a support request or conversation, we email you a 6-digit code valid for 30 minutes. We don't store the code itself — only an encrypted fingerprint of it — and attempts are limited.

Once verified, we send you a private link to open your conversation. Treat it like a password and don't share it.

Images you attach are stored in private, non-public storage and are only reachable by our team through temporary links that expire within minutes.

Every image is re-processed on upload, which strips hidden metadata such as location and camera details.

We use a small number of trusted providers to run our services. They process data on our behalf and only for the purposes above:

• Vercel: hosting the Dranovo website.
• Hetzner: hosting the servers that receive forms and store requests and conversations.
• Cloudflare: network protection, the security check on the support form (Turnstile), and backup storage.
• Brevo: sending emails and receiving your replies; it may record whether an email was delivered and opened.
• Google Cloud Translation: when a team member manually requests a translation of your message.
• Google: signing in with your Google account, if you choose to.
• Google Analytics: measuring visits to the website anonymously (see the Cookies section).
• jsDelivr: loading the iPhone photo converter on upload pages.

Some data may be processed on servers outside your country; we choose providers that apply appropriate safeguards.

The Dranovo website uses only two kinds of cookies:

• Necessary cookies: the dr_notice cookie records for 12 months that you have seen the cookie notice, so we don't show it on every visit. Cloudflare's security check on the support form may also use cookies it needs to work.
• Analytics cookies: Google Analytics cookies (_ga and _ga_*) that measure visits to the site, meaning which pages are visited most and where visitors come from, without us knowing who you are. They are used while you browse and last about 13 months, and Google processes their data on our behalf. We tell you so in a notice when you visit, and by continuing to browse you agree to it.

We use no advertising cookies, show no ads and share your data with no advertisers, and we switch off the advertising features of Google Analytics.

If you don't want Google Analytics cookies, you can block cookies in your browser settings, or install Google's opt-out add-on (https://tools.google.com/dlpage/gaoptout), which stops data about your visit from being sent to Google Analytics. You can also delete any cookies from your browser settings at any time.

We also use your browser's session storage to remember, for the length of your visit only, where you came from (such as the campaign or referring site); it is cleared when you close the tab. When you send the new project form we attach that to it, so we know which channel brought you. We also keep the source of your first visit in your browser and attach your two Google Analytics identifiers to the form, so we know which of our channels bring real clients.

When a project request becomes an engagement, we may send Google Analytics an anonymous conversion signal (no name, email or phone number), linked only to the Google Analytics identifier stored in your browser.

Our pages on my.dranovo.com use only essential cookies for the session, security, and your language preference — no analytics or advertising cookies.

• Support requests whose email is never verified are deleted automatically after 7 days, with their attachments.
• Stored copies of emails are deleted automatically after 180 days.
• Project inquiries and verified conversations are kept for as long as we work with you and as needed afterwards to follow up, or until you ask us to delete them.
• Financial records (accepted quotes, invoices and payments) are kept for as long as the law requires — 5 years.
• Evidence of quote acceptance and signatures is kept for as long as it may be needed to prove the agreement.
• Browsing logs inside our private pages are deleted automatically after a set period.
• Backups are kept for up to 12 months, then deleted.
• Cookies: the cookie-notice cookie for 12 months, and Google Analytics cookies for about 13 months or until you delete them from your browser.

At any time you can ask us to:

• Give you a copy of the data we hold about you.
• Correct anything inaccurate.
• Delete your data, unless we're required to keep it (such as financial records) or need it for an ongoing commitment with you.
• Stop any communication you don't want.

Email hello@dranovo.com from the address linked to your request, and we'll reply as soon as we can.

All traffic is encrypted over HTTPS, access is limited to team members who need it, verification codes and conversation links are stored as encrypted fingerprints, and rate limits block abuse. No system is 100% secure, but we treat your data with the care we want for our own.

Our services are for business owners and are not directed at anyone under 18. We don't knowingly collect their data.

We may update this policy as our services or practices change. The last-updated date is shown at the top, and we'll highlight any significant change clearly.