Privacy Policy

Last updated: September 8, 2026

This policy describes how the Raindrop mobile app for iOS and Android (“the App”) handles data. Raindrop is a business-to-business (B2B) procurement application provided to organizations under an enterprise agreement; it is used by employees of those organizations and is not a consumer service. References to “Raindrop,” “we,” or “us” mean Raindrop Systems, Inc.

Information we collect

Account and identity information. When you sign in, we process your work email address to route you to your organization, and we receive your name, user ID, and organization (instance) ID from your organization’s account record. If your organization uses SMS-based sign-in or verification, we also process your phone number to authenticate you; it is used only for authentication and is not used for advertising. Sign-in is handled through a third-party identity provider; depending on your organization’s configuration this may federate to your employer’s own identity provider (single sign-on).

Content you provide. The App processes content you create or submit, including chat messages you send to the in-app AI assistant, files and images you attach to a message (which are stored on our cloud infrastructure to deliver the service), and a profile photo (avatar) if you choose to set one. This content is sent to Raindrop’s backend to provide the requested functionality. Chat messages and attachments you submit to the AI assistant are shared with a separate AI service operated by Google to generate responses — with your consent and as described under “AI processing and Google’s AI service” below. We do not use your content to serve advertising, and we do not use it for purposes unrelated to providing the service to your organization.

Device information for notifications. If you enable push notifications, we store a push notification device token — issued by the Apple Push Notification service (APNs) on iOS, or by Firebase Cloud Messaging (FCM), a Google service, on Android — and a randomly generated installation identifier so we can deliver alerts to your device and recognize the device across token changes. We also record the app version and a last-seen timestamp. Push notifications are optional; the App is fully functional if you decline them.

How we use information

We use the information above to:

• authenticate you and connect you to your organization’s instance;
• provide the App’s core features — chat, AI-assisted procurement tasks, suppliers, purchase orders, and approvals;
• process the content you submit, including with AI;
• deliver push notifications you have opted into;
• maintain security, prevent abuse, and operate and support the service.

We do not use your information for advertising or marketing within the App, and we do not build advertising profiles.

AI processing and Google’s AI service

To answer your questions and complete procurement tasks, the content you submit to the in-app AI assistant is transmitted from your device to Raindrop’s backend over an encrypted (HTTPS) connection and processed by a separate AI service operated by Google (within Google Cloud Platform), acting as our data processor.

• What data is sent: the chat messages you type or dictate to the assistant, any documents or images you attach to a message, and the procurement context needed to fulfill your request. We do not send your password or authentication credentials to the AI service.
• Who it is sent to: Google LLC, operating its AI service on Google Cloud Platform as a data processor solely on Raindrop’s behalf.
• How it is collected: directly from you, at the moment you send a message or attachment to the assistant in the App.
• How it is used: only to generate the assistant’s responses and complete the tasks you request. Under our agreement, Google is contractually prohibited from using your content to train its own models or for any purpose other than providing this service to us, and is required to protect your data with the same or equally protective safeguards as described in this policy.
• Your permission: the App asks for your consent before any content is sent to this AI service. Because the AI assistant is Raindrop’s core function, this consent is required to use the App; if you decline, you are signed out and no content is sent.

If you use voice dictation to enter a message, the App does not record or store your voice audio, and only the resulting text is sent — it is then treated like any other message you send to the assistant. How the audio is transcribed depends on your platform. On iOS, transcription runs entirely on your device using Apple’s on-device speech recognition; if a device cannot transcribe locally, dictation is unavailable rather than sending audio off the device. On Android, transcription is performed by your device’s own speech recognition service — normally supplied by Google or by your device’s manufacturer — which, depending on the device and its settings, may process the audio on that provider’s servers rather than locally. That processing is governed by the provider’s privacy policy, not this one. We do not sell your content, and we do not use it for advertising.

Tracking and advertising

The App does not track you: it contains no advertising or third-party analytics software and no advertising identifiers (such as Apple’s IDFA or the Android advertising ID), and it does not link your activity with data from other companies for advertising. On iOS, the App does not present an App Tracking Transparency prompt.

How information is shared

We do not sell, rent, or trade your personal information. We share data only as needed to operate the service:

• Service providers that operate Raindrop’s infrastructure, authentication, and AI processing on our behalf, under contractual confidentiality and data-protection obligations, and that are not permitted to use your information for their own purposes. This includes Google’s AI service (Google LLC), which processes the content you send to the AI assistant, and our identity provider, which handles sign-in. Each is contractually required to protect your data with the same or equally protective safeguards as described in this policy.
• Your organization — Raindrop is an enterprise product; your administrators control your account and may access data associated with it under their agreement with us.
• Legal compliance — where required by law or to protect rights and safety.

Data security and retention

Authentication tokens are stored securely on your device, and all network communication uses encrypted (HTTPS) connections. We retain data for as long as needed to provide the service and as required by applicable law.

Your choices

• Notifications: enable or disable push notifications in your device’s system settings; the App works either way.
• Profile photo: optional; you can add or change it in the App.
• Account and data requests: because accounts are provisioned and controlled by your organization, requests to access, correct, or delete your data are handled through your organization’s administrator. You may also contact us at the address below.

Sign-out and account deletion

Signing out removes your authentication tokens from the device. The App provides an in-app option to request account deletion; account and associated data deletion is coordinated with your organization, which controls the account. Business records that must be retained for legal reasons (such as purchase orders, contracts, and audit history) may be kept as required by law.

Children

Raindrop is a workplace product intended for business users and is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect data from children.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy or your data? Contact us at hello@raindrop.com.