Legal

Privacy Policy

Effective October 1, 2026 · Last updated October 10, 2026

This policy explains what personal information Dragly collects, why, who we share it with, how long we keep it, and the choices you have. It covers our website at dragly.io, the Dragly app at app.dragly.io, and the Dragly Chrome extension — together, “the Service”.

1. Who we are

Dragly is operated by Fazinflo Ventures LLP, a limited liability partnership registered in India (“Dragly”, “we”, “us”, “our”).

For information about you as a Dragly user — your account, your workspace, your billing — we decide how and why it is processed, so we are its controller (a “data fiduciary” under India’s Digital Personal Data Protection Act, 2023). For information about other people that you collect using Dragly, the roles are different; see section 5.

You can reach us about anything in this policy at privacy@dragly.io.

2. Information we collect

2.1 Information you give us

• Account details: your name, email address and password. Passwords are stored only as a one-way hash by our authentication provider; nobody at Dragly can see them.
• Workspace details: your company or workspace name, the teammates you invite, your ideal customer profiles (ICPs), saved searches, lists and settings.
• Billing details: your plan, invoices and billing contact. Payments are handled by our payment processor; we never receive or store your full card number. We keep a record of each transaction, such as the plan, amount, date, currency, payment status and the type or last four digits of the payment method.
• Communications: messages you send to our support team, feedback and survey answers.

2.2 When you sign in with Google

If you choose “Continue with Google”, Google shares your name, email address and profile picture with us, and confirms that the email address is verified. We use them only to create your Dragly account and sign you in. We do not request access to your Gmail, contacts, calendar, Drive or any other Google data. See section 7.

2.3 Information collected automatically

• Log and device data: IP address, browser and operating system, pages and features accessed, timestamps and error reports. Our hosting and infrastructure providers record this to keep the Service running, secure and debuggable.
• Usage data: which features you use, which scraping and enrichment jobs you run, and their counts and outcomes. We use it to operate your account (for example, to apply credit usage) and, in aggregate, to improve the product.
• Cookies: a small number of essential cookies keep you signed in. See section 8.

2.4 Information from the Dragly Chrome extension

Described in full in section 4.

2.5 Lead data you collect

Information about other people that you collect with Dragly is described in section 5.

3. How we use information

• To provide the Service: create and secure your account, run the jobs you start, store and display your results, and sync your data across devices and teammates.
• To bill you: process payments, issue invoices and receipts, and track plan limits and credits.
• To communicate with you: send service messages such as sign-in links, security alerts, billing notices and important changes. If we send product news or marketing, you can opt out at any time; service messages can’t be switched off while you have an account.
• To support you: answer questions and investigate problems you report.
• To improve Dragly: understand, in aggregate, which features are used and where things fail.
• To keep the Service safe: prevent fraud, abuse, spam and security incidents, and enforce our Terms of Service.
• To meet legal obligations: for example tax, accounting and lawful requests from authorities.

Where the law requires a legal basis (for example the EU and UK GDPR), we rely on performing our contract with you, our legitimate interests in running and securing a business service, legal obligations, and your consent where we ask for it. You can withdraw consent at any time.

We do not sell your personal information. We do not use it for third-party advertising. We do not use Google user data, or the lead data you collect, to train artificial-intelligence models.

4. The Dragly Chrome extension

What it does

The extension runs in your Chrome browser. When you start a job from Dragly or from the extension, it collects publicly visible information from the pages you point it at — for example a hashtag, a post’s comments or a profile on Instagram, Threads, X, LinkedIn or YouTube, a Google Maps search, or a list on another website — and returns the results to your Dragly workspace.

Your logins stay in your browser

The extension works through the accounts you are already signed into in Chrome, the same way your browser does when you visit those sites yourself. Your passwords and session cookies for those sites are never sent to Dragly’s servers and are never shared with the Dragly web page. Requests the extension makes on your behalf go from your browser, with your browser’s own sign-in.

What it sends to Dragly

• The results of jobs you start: lead records such as usernames, names, public bios, follower counts, websites, the page each lead was found on, and business contact details that a profile lists publicly.
• Job status: progress, counts and error messages needed to show you what is happening and to stop safely when a platform limits requests.

What it does not collect

• Your browsing history, or the content of pages you have not started a job on.
• Your passwords, login cookies or other credentials for any site.
• Your private messages. The extension does not read or send messages.

Permissions

The extension asks Chrome for permission to open and read tabs on the sites it works with, run jobs in the background, store settings and job progress on your device, and use your browser’s existing sign-in on those sites so requests are made as you. These permissions are used only for the extension’s single purpose: collecting the leads you ask Dragly for.

Settings and in-progress job state are stored locally on your device and are deleted when you remove the extension. The use of information received through the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

5. Lead data you collect

Who is responsible for it

“Lead data” is information about other people that you collect using Dragly. You decide what to collect, from where, and why — so you are the controller of that data, and we process it on your behalf as your processor (a “service provider” under US state privacy laws).

How we handle it

• We store it in your workspace, show it to you and the teammates you invite, and enrich it when you ask us to.
• We never sell it, share it with other customers, or use it for our own marketing.
• We delete it when you delete it, or when your account is closed (see section 9).

Your responsibilities

Because you are the controller, you are responsible for having a lawful basis to collect and use lead data, giving any notices the law requires, honouring opt-out and deletion requests, and following anti-spam laws and the rules of the platforms you collect from. Our Terms of Service set this out in detail.

If your information appears in Dragly

If you believe a Dragly customer has collected information about you, write to privacy@dragly.io with the profile, username or link concerned. We will remove it from data we hold directly where we can, and pass your request to the customer who collected it, who is responsible for responding to you.

6. How we share information

We share personal information only as described here:

• Service providers who process it on our behalf and under our instructions: hosting and infrastructure (Vercel), authentication and database (Supabase), payment processing (Razorpay and, where offered, PayPal), email delivery (Resend), the AI models behind LEX, research and lead scoring (Anthropic, which under its commercial terms does not use this data to train its models), connected-app integrations when you choose to connect an app (Composio, which receives only what the action you ask for needs), and customer-support tools. Each is bound by contract to protect the data and use it only to provide their service to us.
• Google, when you choose to sign in with Google.
• Your workspace: teammates you invite can see the workspace’s data.
• Legal and safety: where required by law, court order or lawful request, or where necessary to protect the rights, property or safety of Dragly, our users or others.
• Business transfers: if Dragly is involved in a merger, acquisition or sale of assets, information may transfer as part of that deal. We will tell you before your information becomes subject to a different privacy policy.
• With your consent, or at your direction — for example when you export data or connect another app.

We do not sell personal information, and we do not “share” it for cross-context behavioural advertising as those terms are defined under California law.

7. Google user data

Dragly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice: we receive only your basic profile (name, email address and profile picture) when you sign in with Google. We use it solely to create and sign in to your Dragly account. We do not use it for advertising, we do not sell it, we do not transfer it to others except as needed to provide the Service or as required by law, we do not use it to train AI models, and no person at Dragly reads it except with your permission, for security purposes, or to comply with the law. You can disconnect Dragly from your Google account at any time at myaccount.google.com/permissions.

8. Cookies

• Website (dragly.io): we do not set advertising or analytics cookies. Pages load fonts from Google Fonts, so your browser contacts Google’s servers, which receive your IP address.
• App (app.dragly.io): we use essential cookies to keep you signed in and to secure your session. They are necessary for the Service to work and can’t be switched off without signing you out.

If we add analytics or other non-essential cookies, we will update this policy first and ask for your consent where the law requires it.

9. How long we keep data

• Account and workspace data: for as long as your account is open. When you close your account we delete it within 30 days, except what we must keep for the reasons below.
• Lead data: until you delete it or close your account.
• Backups: deleted data may remain in encrypted backups until they are overwritten on a rolling basis, within 90 days.
• Billing records: for as long as tax and accounting laws require — in India, generally up to eight years.
• Logs: typically up to 90 days, longer only where needed to investigate a security incident or abuse.

10. Security

We protect information with encryption in transit (HTTPS/TLS), encryption at rest provided by our infrastructure providers, hashed passwords, access controls that limit data to the people who need it, and monitoring for misuse. No system is perfectly secure; if a breach affects your personal information, we will notify you and the relevant authorities as the law requires.

11. International transfers

We are based in India, and our service providers may store and process information in other countries, including the United States and the European Union. Where the law requires it, we use appropriate safeguards for these transfers, such as the European Commission’s Standard Contractual Clauses.

12. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you, and receive a copy;
• Correct information that is inaccurate or incomplete;
• Delete your information;
• Export your information in a portable format;
• Object to or restrict certain processing;
• Withdraw consent where we rely on it;
• Opt out of marketing emails, using the link in any such email;
• Nominate someone to exercise your rights if you die or become incapacitated (India);
• Complain to your local data-protection authority — for example the Data Protection Board of India, or a supervisory authority in the EU or UK.

California residents also have the right to know what personal information we collect and how we use it, to delete and correct it, to opt out of its sale or sharing (we do neither), and not to be discriminated against for exercising these rights.

To exercise any of these rights, write to privacy@dragly.io. We may need to verify your identity first. We respond within 30 days, or sooner where the law requires.

13. Children

Dragly is a business tool and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe a child has given us personal information, contact us and we will delete it.

14. Grievance Officer (India)

In accordance with the Information Technology Act, 2000, the rules made under it, and the Digital Personal Data Protection Act, 2023, you can raise any complaint or concern about how we handle personal information with our Grievance Officer:

We acknowledge complaints within 48 hours and aim to resolve them within 15 days.

15. Changes to this policy

We may update this policy as Dragly changes. The date at the top shows when it was last updated. If a change materially affects how we handle your information, we will tell you by email or in the app at least 14 days before it takes effect.

16. Contact us