Legal
Privacy Policy
Danrian LLC · hello@danrian.com · danrian.com/contact · Rochester, Minnesota, USA
1. Who We Are
Danrian ("Danrian," "we," "our," or "us") is software that helps sellers run Buy It Now and auction sales on their own Facebook Pages. Our service is accessible at app.danrian.com and our marketing site at danrian.com.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. By using Danrian, you agree to the terms of this Privacy Policy.
If you have questions, contact us at: hello@danrian.com
2. Information We Collect
2.1 Information You Provide
- Account information: Your name, email address, and password when you register for an account.
- Billing information: Payment details processed securely through Stripe. We do not store full card numbers on our servers.
- Listings and content: Product descriptions, photos, prices, and other content you create within Danrian.
- Communications: Messages you send us via email or the contact form.
2.2 Facebook / Meta Data
When you connect a Facebook account to Danrian, we receive an access token that allows us to act on your behalf. We use this to:
- Publish posts to your Facebook page on your schedule
- Read comments on your posts to detect bids and Buy It Now sales
- Send Messenger notifications to winners and buyers
We request only the Facebook permissions necessary for these functions. We do not access your personal Facebook feed, friends list, messages, or any data outside your authorized pages.
2.3 Automatically Collected Information
- Log data: IP address, browser type, device type, and timestamps (for security and debugging).
- Terms acceptance: When you accept our Terms, we keep the date, the version you accepted, your IP address and your browser type, as a record that you agreed.
- Bot check: When you sign up, send the contact form, or sign in after several wrong passwords, a Cloudflare Turnstile check confirms you are a person. Your IP address is sent to Cloudflare for that check.
- Cookies: Session cookies to keep you logged in. We do not use advertising or tracking cookies.
2.4 Buyer and Invoice Recipient Data
When sellers use Danrian to run auctions and Buy It Now sales, Danrian collects limited data about buyers who participate in those sales, including:
- Facebook display name and user ID (from public comments)
- Comment content (bids and Buy It Now keywords)
- Invoice details (items purchased, amounts owed)
- A shipping name, address, phone number and email, when a buyer gives them for delivery
- Payment receipt emails the seller forwards to Danrian (for example from Venmo), which include the buyer’s name and the amount paid, so a payment can be matched to its invoice
- When someone opens an invoice payment link: their IP address and browser type, so the seller can see that the link was opened. These are deleted 90 days after the link was last used.
This data is collected on behalf of the seller and is used solely to operate the auction, generate invoices, and notify winners. Buyer data is retained for the duration of the seller's account and deleted when the seller's account is deleted. Buyers may contact hello@danrian.com to request deletion of their data.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Danrian service
- Authenticate your identity and secure your account
- Process payments and manage your subscription
- Publish listings and monitor comments on Facebook on your behalf
- Send transactional emails (auction results, billing receipts, account notices)
- Respond to your support requests
- Detect and prevent fraud or abuse
We do not use your data to serve advertising, sell to third parties, or build marketing profiles.
4. Sharing Your Information
We do not sell, rent, or trade your personal information. We may share your data with:
- Service providers: Companies that help us operate the service (payment processing via Stripe, email delivery, cloud hosting, error reporting). These providers are contractually bound to use your data only to perform services for us.
- Meta / Facebook: When you authorize Danrian to post to your page, that content is published through the Facebook API subject to Facebook's own terms and policies.
- Legal requirements: We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Danrian or others.
- Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before that happens.
The third-party service providers we rely on include:
- Stripe (stripe.com) — card payment processing for sellers who enable Stripe integration
- Square (squareup.com) — card payment processing for sellers who enable Square integration
- Resend (resend.com) — transactional email delivery
- Cloudflare / Cloudflare R2 — CDN, photo storage, and the Turnstile check that you are a person
- Google Fonts (fonts.google.com) — the Danrian app loads its fonts from Google, so your browser sends Google your IP address and browser type when a page opens
- Anthropic (anthropic.com) — answers questions you ask Danrian Guardian. Your question, and the shop information needed to answer it, are sent to Anthropic.
- Mailgun (mailgun.com) — receives the payment receipt emails sellers forward to Danrian
- Better Stack (betterstack.com) — error reports when something in Danrian fails. No IP address, account or shop identifier is sent.
- Render (render.com) — application hosting and database
5. Facebook Permissions and Data Use
Danrian's use and transfer of information received from Facebook APIs adheres to Facebook's Platform Terms and Developer Policies, including the Limited Use requirements. Specifically:
- We use Facebook data only to provide the automation features you explicitly requested.
- We do not transfer Facebook user data to advertising networks, data brokers, or any third party for advertising purposes.
- We do not use Facebook data for any purpose beyond operating and improving the features you authorized.
- You can revoke Danrian's access to your Facebook account at any time through your Facebook settings (Settings & Privacy → Apps and Websites) or by disconnecting from within the Danrian app.
The following Facebook permissions are used by Danrian and the purpose of each:
- pages_show_list: To list the Facebook pages you manage so you can select which page to connect to Danrian.
- pages_manage_metadata: To subscribe to webhooks on your connected page so Danrian receives comment events in real time.
- pages_read_engagement: To read comments on your auction and Buy It Now posts to detect bids and Buy It Now sales.
- pages_manage_posts: To publish your auction and Buy It Now listings directly to your Facebook page from the Danrian dashboard.
- pages_messaging: To send Messenger notifications to winners and buyers on your behalf.
- pages_read_user_content: To read buyer comments on your posts to detect bids and Buy It Now sales.
- pages_manage_engagement: To post closing comments and reply to buyer comments when sales complete.
- business_management: To verify your business account and maintain your page connection.
- public_profile: Facebook includes this with every connection. Danrian reads only your Facebook user ID from it, to recognise the account that connected your Page.
6. Data Deletion
You may request deletion of your data at any time by emailing hello@danrian.com or by closing your account from within the Danrian app.
Danrian maintains a data deletion callback endpoint registered with Meta. To request data deletion, contact hello@danrian.com.
7. Data Retention
We retain your account data for as long as your account is active. When you close your account:
- Your personal information is deleted after the end of the month in which your account closes, and within 45 days of your request to close it (or of the account closing, if that is earlier).
- The record that you accepted our Terms (the date, the version, your IP address and browser type) is kept after deletion as evidence of the agreement. It is no longer linked to your name, only to a coded form of your email address.
- A record of any action our staff take on your account is kept for security.
- Aggregate, anonymized counts that cannot identify you may be retained.
- Billing records are retained for 7 years as required by applicable law.
8. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Ask us to correct inaccurate or incomplete data.
- Deletion: Request that we delete your personal data.
- Portability: Request your data in a machine-readable format.
- Objection: Object to certain uses of your data.
To exercise any of these rights, contact us at hello@danrian.com. We will respond within 30 days.
9. Your California Privacy Rights (CCPA/CPRA)
We do not sell or share personal information for cross-context behavioral advertising, and have not done so in the preceding 12 months.
In the past 12 months we collected these categories of personal information: identifiers (name, email address, Facebook user ID); commercial information (listings, invoices, transaction records); internet and usage activity (log data, feature usage); and financial information processed by our payment providers (Stripe, Square).
Sources of personal information: directly from you, from your use of the Service, and from Facebook.
Purposes: operating, securing, and improving the Service as described in this Policy.
We disclose personal information only to the service providers named in this Policy.
California residents have the right to know what personal information we collect and how we use it, to delete their personal information, to correct inaccurate personal information, and to non-discrimination for exercising these rights.
To make a request, email hello@danrian.com. We will verify your identity and respond within 45 days. You may use an authorized agent to submit a request on your behalf.
10. Security
- All data in transit is encrypted using TLS 1.2 or higher.
- Passwords are hashed using industry-standard algorithms; we never store plaintext passwords.
- Facebook tokens are encrypted at rest and access-controlled.
- We conduct regular security reviews and promptly address vulnerabilities.
No method of internet transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
If there is a security breach. If we confirm that someone got into Danrian’s systems and your information or your buyers’ information was exposed, we will tell you without undue delay, and within 72 hours of confirming it. We will email the account owner and show a notice in the app. We will tell you:
- what happened and when;
- what information was involved;
- what we have done about it;
- what you should do next, such as changing your password or reconnecting Facebook.
If your buyers’ information was involved, we will help you tell them, with a plain-language notice you can send and a list of the buyers affected. We will also notify regulators where the law requires it.
11. Children's Privacy
The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected personal information from someone under 18, we will delete it promptly.
12. Third-Party Links
Our service may contain links to third-party websites (including Facebook). This Privacy Policy applies only to Danrian. We are not responsible for the privacy practices of other sites.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date and, for material changes, notify you by email.
14. Contact Us
- Email: hello@danrian.com
- Web: danrian.com/contact
- Danrian LLC, Rochester, Minnesota, USA
15. DMCA and Copyright
The Danrian website, platform, and all content are protected by copyright law. If you believe your copyrighted work has been reproduced on our site without authorization, contact hello@danrian.com with:
- Your contact information (name, address, phone, email);
- Identification of the copyrighted work you claim has been infringed;
- Identification of the infringing material and its URL on our site;
- A statement of good faith belief that the use is not authorized by the copyright owner, its agent, or the law;
- A statement under penalty of perjury that the information in your notice is accurate and that you are the copyright owner or authorized to act on the copyright owner's behalf.