- Who
- Adrian Uesugui, doing business as Dropped Pin
- Where
- Houston, Texas
- Contact
- auesugui@droppedpin.co
- Effective
- September 17, 2026
1. Who this covers
This policy covers droppedpin.co, the Dropped Pin business phone line at (346) 795-1477, and email sent to Dropped Pin. It is written for the people who contact me, not for my clients' customers. Client work is governed by the service agreement instead.
2. The short version
I collect what you hand me, a visit count through Google Analytics described in section 3, and the questions you type into the chat described in section 3a. I do not sell it and I do not share it for marketing.
3. What the website collects
The site uses Google Analytics 4 to count visits: which pages are read, for
how long, where a visit came from, the type of device, and clicks on the
phone and email links. It sets two cookies, named _ga and
_ga_ followed by an ID, so a returning browser is counted once
rather than as a new visitor. Google signals and advertising features are
off, so nothing is used to build an advertising profile or to follow you
across other sites. Google Analytics 4 does not log or store IP addresses.
The data is kept for 14 months and then deleted by Google, which processes
it on my behalf under its own terms. I read the reports.
There is no contact form and no login on droppedpin.co. The contact methods on the site are the phone number, email links that open your own mail app, and the chat in section 3a. Clicking a phone or email link is counted as a click. Nothing you type into the chat reaches Google Analytics.
To stop the counting, use a browser setting or extension that blocks Google Analytics, or Google's own opt-out add-on. The site works the same either way.
The site is hosted by Vercel, which keeps standard server logs including IP addresses for security and reliability. I do not read them and I do not connect them to anything.
3a. The chat
The Ask Dropped Pin chat answers questions about my services from a fixed list of approved facts. It does not write its own answers, and it cannot quote, book or send anything for you. Its answers can still be wrong, so the published pages and the service agreement are what count.
Before your first question, Cloudflare Turnstile checks that a person is using the chat. Cloudflare reads browser and device signals for that check under its own terms.
Each question you send goes to OpenRouter, which passes it only to AI model providers covered by its zero data retention policy, so the model can pick which approved facts answer it. Email addresses and phone numbers are removed from the question first where they can be recognized. The question and its time are stored in the Supabase database and deleted 30 days after the conversation starts. To limit abuse, a one-way code made from your network address is kept for one day. The chat runs on servers hosted by Vercel.
Nothing you type in the chat is sent to me as a message. To reach me, call or use the chat's Email Adrian option. It asks a few questions about your business, then opens a draft in your own mail app with your answers filled in. Those answers stay in your browser until your mail app opens, and you send the message yourself. What that email then contains, including a phone number if you give one, is covered by section 5. Keep passwords, customer records and other sensitive details out of the chat.
4. Your phone number
If you call (346) 795-1477, your number arrives with the call. If the call is not answered, an automated text reply is sent to that number, unless you hang up within the first few seconds. The SMS terms explain that program in full.
What is stored is your phone number, the time of the call, the text that was sent, and whether it was delivered. If you reply, the reply is stored too. Message records are kept as proof that messaging rules were followed.
Phone calls are handled by Twilio, which processes calls and messages on my behalf and is bound by its own agreement not to use the data for its own purposes.
These records are stored in a database run by Supabase. If you reply to the text, your reply, your number and the time are emailed to me through Postmark and arrive in my Google Workspace inbox, so I can call you back. I read the records in a private dashboard hosted by Vercel.
5. Email
If you email me, I have your email address and whatever you wrote. I use it to answer you. It is not added to a mailing list, because there is no mailing list.
6. Mobile information is never sold or shared
No mobile information, phone number, or messaging consent is sold, rented, shared, or provided to third parties or affiliates for marketing or promotional purposes.
Phone numbers and text message content are not shared with anyone except the service providers that deliver and store them for me. Today that means Twilio and your own mobile carrier for the text, Supabase for the stored records, Postmark and Google Workspace for emailing a reply to me, and Vercel for the dashboard where I read them. Those providers may not use it for their own marketing.
The only other case where information leaves my hands is a lawful request I am legally required to answer.
7. Opting out
Reply STOP to any text message. STOP, STOPALL, UNSUBSCRIBE, CANCEL, END and QUIT all work, and so does asking in plain words.
Opt-out records are kept permanently and are never deleted, including if you ask me to delete your other information. Keeping that record is the only way to guarantee you are not texted again by accident, so it stays.
8. How long it is kept
Message and call records are kept for four years, which covers the period in which a messaging complaint could be raised. Email is kept as long as the conversation is useful. Chat questions are deleted 30 days after the conversation starts, per section 3a. Google Analytics data is kept for 14 months, per section 3. Opt-out records are kept forever, per section 7.
9. What you can ask me to do
Email auesugui@droppedpin.co and ask for a copy of what I hold about you, a correction, or deletion. I will answer within 30 days.
Texas has no general consumer privacy statute that applies to a business this size, so I am not doing this because a law makes me. Ask and I will do it.
10. Children
This is a business-to-business service. It is not directed at anyone under 13 and I do not knowingly collect information from children.
11. Changes
If this policy changes, the effective date at the top changes with it. There is no version history to dig through, because the current version is the only one that applies.