Privacy Policy

RotaDrop (rotadrop.com) is a sourcing and fulfillment platform that imports products from 1688, calculates landed costs and ships orders from China to customers worldwide. In this policy “we” means RotaDrop and “you” means the person using the service.

Account data: your name, email address and a one-way encrypted (hashed) password. We never store your password in readable form.

Workspace data: the products you import, your cost settings, the orders you create and the delivery details you enter for your customers (name, address, phone).

Billing data: your plan and subscription status. Card payments are handled by our payment provider; we never see or store your full card number.

Technical data: a session cookie that keeps you signed in, a cookie that remembers your language, and basic server logs (IP address, time, page) used for security.

To run your account, import and translate products, calculate costs, place and ship your orders, process subscription payments, prevent abuse and answer your questions. We do not sell your data and we do not use advertising or tracking cookies.

Only with service providers that help us run RotaDrop, and only what each one needs: our hosting provider, our payment provider, the translation and product-data services used during imports, and our purchasing, warehouse and logistics partners in China, who receive the order and delivery details needed to buy and ship your parcels. Carriers and customs authorities receive the shipping information printed on the parcel.

Some of these providers are located outside your country, including in China, the European Union and the United States. We share data with them only to deliver the service.

We keep your data while your account is open. When you delete your account we remove it within 30 days, except records we must keep by law (for example invoices). Backups are kept for up to 14 days.

Under the Turkish Personal Data Protection Law (KVKK), the GDPR and similar laws you can ask to see, correct, export or delete your personal data, and object to how we use it. Write to us and we will answer within 30 days.

If you enter your customers’ details for orders, you are responsible for having a lawful basis to share them with us; we process them only to fulfil those orders.

We use encrypted connections (HTTPS), hashed passwords, limited access and daily backups. If we change this policy we will update the date above and, for important changes, tell you in the app.