Privacy policy

1. The short version

• You can browse Dronestacks without an account, and we don't use advertising or analytics cookies.
• When you send an enquiry, we pass your name, email, phone and message to the vendor you chose, so they can reply to you. That is the point of the enquiry, and you agree to it on the form.
• We never sell your data and never show buyers' contact details on the site.
• Enquiry contact details are anonymised 24 months after the enquiry.

2. What we collect

When you send an enquiry or a message. Your name, email address and phone number (required), and, if you give them, your company, city, message, quantity, budget and the date you need it by. We also record which listing, vendor or category the enquiry is about, the page you sent it from, any campaign tags in the link you arrived by (such as utm_source), the consents you ticked, and when you sent it.

To stop spam and abuse. A keyed one-way hash of your IP address (never the address itself), used to limit how many enquiries can be sent from one connection. If the form shows a Cloudflare Turnstile check, Cloudflare processes your IP address and browser signals to tell people from bots.

When you browse. Our hosting provider keeps standard request logs (IP address, browser, page and time) for security and to keep the site running. The compare list is kept only in your own browser's local storage and never sent to us. We don't set cookies for visitors; the only cookies are for the Dronestacks team's own sign-in to the admin area.

Vendors. Company details, product information, brochures and images you send us to publish, and the contact you want enquiries sent to. Company and product information is public on the site; the enquiry contact is not.

Pilots. Profile details are published only with the pilot's consent and after we review them. Pilots' email addresses and phone numbers are never shown on the site.

3. How we use it

• To send your enquiry on. For a product or vendor enquiry, we email it to that vendor from a Dronestacks address with your email as the reply address, so the vendor replies to you directly. For a requirement you post on a category, we send it to vendors we think can meet it.
• To email you a copy of your enquiry and to answer messages you send us.
• To keep enquiries genuine: the Dronestacks team can see every enquiry and reviews ones flagged as possible spam before they are sent on.
• To send you occasional updates from Dronestacks, only if you ticked the box for them.
• To understand how the site is used, from counts such as enquiries per listing, not individual profiles.
• To meet legal obligations and to protect the site and its users.

4. Who we share it with

• The vendor or vendors you enquire with. Once a vendor receives your enquiry, they handle your details under their own privacy practices.
• Service providers that run the site for us: Vercel (hosting), Supabase (database, hosted in Mumbai, India), Cloudflare (bot checks) and our email provider. They process data only on our instructions.
• Authorities, when the law requires it, or to protect our rights, users or the public.
• A successor, if Dronestacks is merged or sold, under the same protections as this policy.

We do not sell or rent personal data, and we don't share it with advertisers.

5. How long we keep it

• Enquiries: 24 months. After that we delete the sender's name, email, phone, company, city, message and campaign tags, and keep only the fact that an enquiry was made, for counts.
• Spam-limit records: 2 days.
• Vendor and pilot profiles: while they are listed, and until you ask us to remove them.
• Hosting logs: for the short period our hosting provider keeps them.

6. Where it is stored and how it is protected

Our database is in Mumbai, India. Some providers, such as Cloudflare and Vercel's network, may process data in other countries to deliver the service. Data is encrypted in transit, the database is not reachable from the public internet without credentials, and only the Dronestacks team can see enquiries. No system is perfectly secure, but we work to protect your data and will tell you and the authorities about a breach as the law requires.

7. Your rights

You can ask us to show you the personal data we hold about you, correct it, or erase it, and you can withdraw a consent you gave (such as for updates) at any time. Withdrawing consent doesn't undo an enquiry already sent to a vendor; for that, contact the vendor too. You can also nominate someone to exercise these rights for you. Email our grievance officer at shakti.habib@dronestacks.com from the address you used, and we will reply as soon as we can and within the time the law allows.

8. Children

Dronestacks is for businesses and adults. We don't knowingly collect data from anyone under 18; if you think we have, contact us and we will delete it.

9. Changes to this policy

When we change how we handle personal data, we will update this page and the date at the top. For significant changes we will also say so on the site.

10. Contact and grievances

For questions, requests or complaints about your personal data, contact our grievance officer, Shakti Habib, at shakti.habib@dronestacks.com, or write to Dronestacks, Gladiola Gardenia, BDS Layout, RK Hegde Nagar, Bengaluru, Karnataka 560077, India. For anything else, email info@dronestacks.com. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

See also our terms of use.