At DropFlowLister, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
Effective date: October 9, 2026
Last updated: October 9, 2026
DropFlowLister is a product of Aurora Asset Management LLC. This Privacy Policy explains how Aurora Asset Management LLC, a limited liability company with its address at 28 Geary St. Suite 650, San Francisco, CA 94108 (“DropFlowLister“, “we“, “us” or “our“), collects, uses, shares and protects personal information when you visit www.dropflowlister.com, use our web app at app.dropflowlister.com, install our browser extension, or otherwise use our services (together, the “Service“). It also explains your privacy rights and how to use them.
This policy is part of our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms. If you do not agree with this policy, please do not use the Service.
1.1 Our customers’ information. For information about our customers, trial users, affiliates, website visitors and people who contact us, DropFlowLister is the “controller” (or “business” under California law). That means we decide how and why the information is used.
1.2 Your buyers’ and other third parties’ information. When you use the Service to run your store, it may process personal information about your buyers and other people (for example, a buyer’s name and shipping address used to place a supplier order or update tracking). For that information, you are the controller and we act as your “processor” or “service provider”. We process it only to provide the Service to you, on your instructions, and as described in this policy. You are responsible for having a lawful basis to collect it and for giving your buyers any required privacy notice. If a buyer contacts us about their information, we may refer them to you. A data processing addendum is available on request for business customers where required by law.
When you connect or use your marketplace and supplier accounts with the Service (for example, eBay, Poshmark, Amazon, AliExpress, Walmart or Target), we collect and process:
Our Chrome extension, “Dropflow Lister – Dropshipping Toolkit”, acts only on supported marketplace and supplier websites (such as eBay, Poshmark, Amazon, AliExpress, Walmart, Target, Home Depot and Bed Bath & Beyond, and the image servers those sites use) and on DropFlowLister’s own websites. On those sites it performs actions that you start or configure, such as importing products, creating and editing listings, reading prices and stock, placing supplier orders using details you provide, and adding tracking.
To do this, the extension requests these browser permissions:
As disclosed on its Chrome Web Store listing, the extension handles these types of data:
The extension sends to our servers the data needed to provide the features you use. We do not sell extension data.
Chrome Web Store User Data Policy. Our use of information received through the extension complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use extension data only to provide and improve the extension’s features. We do not sell it, we do not use or transfer it for purposes unrelated to those features, and we do not use or transfer it to determine creditworthiness or for lending purposes.
We may receive information from the marketplaces and suppliers you connect, our payment processor (for example, payment status), our analytics and advertising providers (for example, which ad led you to our website), and affiliates or partners who refer you.
We use personal information to:
If the GDPR, UK GDPR or Swiss data protection law applies, we rely on these legal bases:
When you use AI features, we send the relevant product data, text and images to third-party AI providers to generate content for you. Please do not include sensitive personal information in content you submit to AI features. AI output may be inaccurate, and you must review it before use (see Section 7 of our Terms of Service).
We do not sell personal information for money. We share personal information as described below.
6.1 Service providers. We use service providers that help us run the Service and that process information on our behalf. These include providers in these categories, such as:
6.2 Advertising. We use advertising and conversion-measurement tools, such as Google Ads, to measure and improve our ads. These providers may collect information through cookies or similar technologies about your activity on our website and app, and may combine it with information from other websites. Under California law this may be considered “sharing” for cross-context behavioral advertising. See Section 11 for how to opt out.
6.3 Marketplaces and suppliers you direct us to. When you use the Service, we send information to the marketplaces, suppliers and other third-party services you connect or direct us to act on (for example, sending listing data to eBay, or a buyer’s shipping address to a supplier to place an order). Their use of that information is governed by their own privacy policies.
6.4 Legal and safety. We may disclose information if we believe in good faith that it is necessary to comply with law, a court order or a lawful government request; to enforce our Terms; to protect the rights, property or safety of DropFlowLister, our users or others; or to respond to fraud, security or intellectual property issues (including requests from rights owners and marketplaces).
6.5 Business transfers. If we are involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, information may be transferred as part of that transaction, subject to this policy.
6.6 With your consent or at your direction.
6.7 Aggregated or de-identified data that cannot reasonably identify you may be shared for any lawful purpose.
We keep personal information for as long as your account is active and as needed to provide the Service, comply with our legal, tax and accounting obligations, resolve disputes and enforce our agreements. After that, we delete it or anonymize it. Copies may remain in backups for a limited time until they are overwritten.
We use reasonable technical and organizational measures designed to protect personal information. These include encrypting data in transit (HTTPS), protecting stored connected-account credentials and tokens with industry-standard safeguards, and using access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your password safe and for the security of the devices and browsers you use with the Service. If we learn of a security breach affecting your personal information, we will notify you and the authorities where required by law.
9.1 We and our service providers use cookies, pixels, local storage and similar technologies on our website and app to:
9.2 Your choices. You can block or delete cookies in your browser settings, and most browsers let you block third-party cookies. Blocking some cookies may affect how the Service works. You can manage Google’s ad personalization at https://adssettings.google.com, learn how Google uses information from sites that use its services at https://policies.google.com/technologies/partner-sites, and opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
9.3 Global Privacy Control and Do Not Track. We honor Global Privacy Control (GPC) signals as a request to opt out of the “sale” and “sharing” of personal information for the browser or device sending the signal. Because there is no common standard for “Do Not Track” signals, we do not respond to them.
10.1 Everyone. You can update most account information in your account settings, unsubscribe from marketing emails using the link in each email, and disconnect connected accounts at any time. You can ask us to delete your account by contacting us.
10.2 EEA, UK and Switzerland. If these laws apply, you have the right to: access your personal information; correct it; delete it; restrict or object to our processing (including processing based on legitimate interests, and direct marketing); receive your data in a portable format; and withdraw consent at any time. You also have the right to complain to your local data protection authority. We would appreciate the chance to address your concern first.
10.3 Other places. Depending on where you live, you may have similar rights under local law. We will respond to requests in line with applicable law.
10.4 How to make a request. Email contact@dropflowlister.com with the subject “Privacy Request”. We will verify your identity (for example, by confirming the request from your account email address) before acting on it. Where the law allows, you may use an authorized agent; we may ask for proof that the agent is authorized. We will respond within the time the law requires. We will not discriminate against you for exercising your rights. If we deny your request, you may appeal by replying to our decision with the subject “Privacy Appeal”.
This section applies to California residents, to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA“), applies.
11.1 Categories of personal information we collect, with the sources and purposes described in Sections 2 and 3:
11.2 Disclosures for business purposes. We disclose each of these categories to the service providers described in Section 6.1, and to the marketplaces and suppliers you direct us to, for the business purposes described in Section 3.
11.3 Sale and sharing. We do not sell personal information for money. However, we use advertising technologies, such as Google Ads, that may “share” identifiers and internet or other electronic network activity for cross-context behavioral advertising, as those terms are defined under California law. You can opt out of this sharing:
We do not knowingly sell or share the personal information of anyone under 16.
11.4 Your California rights. You have the right to: know what personal information we collect, use and disclose; access a copy of it; correct inaccurate information; delete it (subject to legal exceptions); opt out of sale or sharing; and limit the use of sensitive personal information (we use it only for purposes the law permits). You will not be discriminated against for exercising these rights. To make a request, see Section 10.4.
11.5 Retention. We keep each category of information for the period described in Section 7.
DropFlowLister is based in the United States, and we and our service providers process information in the United States and other countries. Those countries may have data protection laws that differ from the laws where you live. When we transfer personal information from the EEA, the UK or Switzerland, we use appropriate safeguards, such as Standard Contractual Clauses, where required.
The Service is for businesses and adults. It is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
The Service links to and works with third-party websites and services, including marketplaces and suppliers. We are not responsible for their privacy practices. Please read their privacy policies.
We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the “Last updated” date. If a change is material, we will notify you by email or in the app before it takes effect.
If you have questions or requests about this Privacy Policy or our privacy practices, contact:
Aurora Asset Management LLC
28 Geary St. Suite 650
San Francisco, CA 94108
Email: contact@dropflowlister.com
