Legal
Privacy Policy
Version 2.1 | Effective October 15, 2026 | Ontario, Canada
Cropdrop
Version 2.1 | Effective October 15, 2026 | Ontario, Canada
This Privacy Policy explains how Bilka Inc., an Ontario corporation operating the Cropdrop mobile application, website, and related services ("Cropdrop," "Bilka Inc.," "we," "us," or "our"), collects, uses, discloses, retains, and protects personal information.
This Policy applies to the Cropdrop application, cropdropapp.com, accounts, Spots, Product listings, maps, messages, subscriptions, customer support, promotional communications, and related services (collectively, the "Platform"). It should be read with the Cropdrop Terms of Use and, for Sellers, the Cropdrop Seller Agreement.
By using the Platform or otherwise providing personal information to us, you acknowledge the practices described in this Policy. Where consent is required by law, we will seek it in an appropriate form. You may withdraw consent to optional practices, subject to legal or contractual limits, but doing so may affect features that depend on the information.
Bilka Inc. is responsible for personal information under its control and has designated a Privacy Officer to oversee compliance with applicable Canadian privacy laws. Contact information appears in Section 24.
This Policy describes Cropdrop's own handling of personal information. Sellers are independent businesses or individuals and are separately responsible for information they obtain directly from Customers or otherwise handle outside Cropdrop. Their privacy practices are not controlled by Bilka Inc.
"Personal information" generally means information about an identifiable individual. It does not include information that has been irreversibly anonymized, and applicable law may exclude certain business contact information.
We collect personal information:
We may collect your name, display name, username, email address, telephone number, profile photo, Account preferences, language, and other profile details. We also process authentication information such as password hashes, session identifiers, authentication tokens, and Account recovery information. Cropdrop does not receive your Google or Apple password when you use third-party sign-in.
If you create or operate a Spot, we may collect business or farm name, operator name, contact details, category, description, hours, availability, prices, Product information, pickup instructions, photos, logos, location information, subscription tier, and information used to administer or verify the Spot. Where reasonably required for safety, compliance, or a feature, we may request licences, permits, insurance information, or identity and authority verification.
With device or browser permission, we may collect precise or approximate device location to show nearby Spots, position a map, support search, or enable another location-based feature. We may also infer an approximate location from an IP address or network connection.
A Seller may provide an exact address or map pin for a Spot and choose whether the public listing displays that location precisely or in a more general way. Cropdrop may retain and process the submitted exact location internally to operate the feature, prevent abuse, provide support, or meet legal obligations even when the public display is approximate.
We collect the photos, logos, descriptions, listings, reports, feedback, support requests, and other content you submit. We also collect messages sent through Cropdrop and related metadata, such as sender, recipient, time, delivery status, and reports associated with a conversation.
Photos and files may contain metadata, including capture time, device details, or embedded location data. You should remove metadata you do not want to provide and avoid uploading content that reveals unnecessary personal or sensitive information.
We may collect search terms, map interactions, viewed Spots and Products, favourites, messages initiated, feature usage, referral information, notification interactions, subscription and visibility activity, Seller analytics, achievement progress, and dates and times of Platform activity.
We may collect IP address, device and browser type, operating system, app version, language, time zone, device or installation identifiers, push-notification token, network information, crash and diagnostic data, log records, authentication events, security signals, and information about errors or suspected misuse.
When you buy a Cropdrop subscription or paid feature through Apple or Google, the app store processes your payment details under its own privacy policy. Cropdrop may receive and retain information such as transaction or receipt identifiers, product or plan, price and currency, purchase date, renewal or expiry date, trial or promotional status, and subscription status. Cropdrop generally does not receive your full payment-card number from the app store.
If you contact us, respond to a survey, join testing, report a user or listing, appeal a decision, or provide feedback, we may collect your contact information, correspondence, attachments, troubleshooting details, and information reasonably needed to investigate and respond.
The website and app may use cookies, software development kits, local storage, and similar technologies for authentication, security, preferences, session continuity, performance, and analytics. Some data, such as settings or achievement progress, may be stored locally on your device and can be lost when you clear app data, uninstall the app, or change devices.
We may use personal information to:
We collect, use, and disclose personal information with consent or as otherwise permitted or required by applicable law. The form of consent may depend on the sensitivity of the information and the reasonable expectations of the individual. Some processing is necessary to provide a requested service, such as using a location to show nearby results or transmitting a message to its recipient.
We may handle information without further consent where law permits or requires it, including for fraud prevention, investigations, debt collection, emergencies, legal proceedings, business transactions, or compliance with lawful demands.
Information you publish in a public or user-visible area may be seen by other users and, depending on Platform configuration, by visitors who are not signed in. This may include your display name, profile photo, Seller or business identity, Spot name, description, hours, Products, prices, availability, photos, contact methods, and exact or approximate location.
Public information can be copied, photographed, shared, cached, or indexed by others. Removing it from Cropdrop may not remove copies controlled by other people, search engines, archives, or third-party services. Review a listing before publishing and do not include personal information that is not needed.
Cropdrop may show aggregated engagement information, Seller statistics, achievement indicators, subscription badges, or visibility signals. We will not publicly display private analytics or precise private location information unless the feature clearly says so or you choose to share it.
Location information can be sensitive. You control whether to grant device-level location permission and, where offered, whether a Spot displays an exact location or a general area. You can change device permissions through your operating system, but location-dependent features may stop working.
A general or approximate map area reduces precision but does not guarantee anonymity. Other listing details, photographs, roads, landmarks, messages, or information from outside Cropdrop may allow someone to infer a location. Sellers should consider using a public pickup point or general location where displaying a home address would create a privacy or safety concern.
Cropdrop does not represent that it collects continuous background location. If a future feature requires background location, we will provide a clear notice and request the device permission required by the applicable platform.
Messages are disclosed to their intended recipients. Recipients can save, copy, photograph, forward, report, or otherwise use what you send. Do not send payment-card numbers, government identifiers, health information, passwords, or other sensitive information through Cropdrop messages.
Unless Cropdrop expressly states otherwise for a specific feature, messages are not represented as end-to-end encrypted. Bilka Inc. and service providers acting for it may access, preserve, use, or disclose messages and related metadata when reasonably necessary to deliver the service, provide support, enforce agreements, investigate reports or abuse, protect safety or security, or comply with law.
When a Seller receives a Customer's contact or other personal information through Cropdrop and then exports, copies, or uses it outside the Platform, the Seller is responsible for its own handling of that information under the Seller Agreement and applicable law.
We may disclose personal information in the following circumstances:
Cropdrop does not sell or rent personal information to data brokers. Cropdrop does not currently use personal information for third-party behavioural advertising. If that practice changes, we will update this Policy and obtain consent where required.
Cropdrop currently uses or may integrate with providers such as:
These providers may process information under their own terms and privacy policies when they act independently, and under agreements with Bilka Inc. when they process information on our behalf. Their services, locations, and sub-processors may change as the Platform evolves. Cropdrop remains accountable for personal information under its control as required by applicable law.
The Platform may contain third-party maps, links, websites, contact methods, or services. Cropdrop is not responsible for a third party's independent privacy practices. Review the third party's privacy information before providing personal information. Leaving Cropdrop or choosing a third-party feature may allow that provider to collect information directly from you.
Cropdrop subscriptions and paid features may be billed by Apple or Google. Those companies control the payment credentials they collect. Cropdrop uses app-store transaction and subscription information to activate features, confirm entitlement, detect fraud, provide support, and keep financial and legal records.
Deleting a Cropdrop Account or uninstalling the app does not automatically cancel an app-store subscription. You must manage or cancel it through the applicable app store. App-store retention and privacy practices are governed by that provider.
We may use activity, technical, location, and listing information to understand use of the Platform, produce Seller statistics, rank or recommend results, measure feature performance, detect abuse, and improve services. Search and recommendation results may consider factors such as distance, category, availability, relevance, activity, subscription or visibility features, and Platform integrity signals.
We may use automated tools to identify spam, fraud, suspicious activity, prohibited content, or security threats, with human review where appropriate. Cropdrop does not currently make decisions based solely on automated processing that have legal or similarly significant effects on individuals.
We may aggregate or de-identify information and use or disclose the resulting information for analytics, research, safety, planning, and product improvement. We take reasonable steps not to re-identify information that has been treated as de-identified.
We may send service communications needed to operate or secure your Account, including verification, password reset, safety, support, subscription, policy, and material service notices. You may not be able to opt out of essential service communications while maintaining an Account.
We send promotional email, text, or push notifications only where permitted by law and consistent with your choices. You can use an unsubscribe link, Account settings, device settings, or contact us to change optional communications. Opting out may take a reasonable time to process and does not cancel essential service notices or an app-store subscription.
We retain personal information only as long as reasonably necessary for the purposes described in this Policy or as permitted or required by law. Retention depends on the type and sensitivity of information, the length of your relationship with Cropdrop, operational needs, dispute and limitation periods, safety and fraud concerns, and tax, accounting, legal, and regulatory requirements.
In general:
When information is no longer required, we take reasonable steps to delete, destroy, or irreversibly anonymize it. Deletion requests may be limited where we must or are permitted to keep information, including for legal compliance, fraud prevention, safety, dispute resolution, enforcement, or another user's continuing record of a communication.
We use reasonable administrative, technical, and physical safeguards appropriate to the sensitivity of personal information. Measures may include access controls, authentication, logging, vendor management, secure transmission, backups, monitoring, and incident-response procedures. Access is limited to people and service providers who reasonably need it for authorized purposes.
No system, device, storage service, or method of transmission is completely secure. You are responsible for protecting your Account credentials, using a unique password, securing your device, and promptly notifying us of suspected unauthorized Account access.
If a privacy or security incident occurs, we will investigate, contain, assess, document, and address it as appropriate. We will notify affected individuals, regulators, or others when required by applicable law. Any notice may be delivered using the contact information associated with your Account or another method permitted by law.
Subject to applicable law, you may:
Many details can be changed in your Account or Spot settings. If an in-app deletion or privacy control is unavailable, contact the Privacy Officer. We may need to verify your identity before completing a request. We will respond within the period required by applicable law and may refuse or limit a request where law permits, in which case we will explain the reason unless prohibited.
You do not need to delete your entire Account to request deletion of specific personal information. Email support@cropdropapp.com describing what you'd like removed; we will review the request and respond within 30 days. Some information may need to be retained for legal, security, or operational reasons described in Section 15, in which case we will explain the limitation. See cropdropapp.com/delete-account for more detail on both account deletion and specific-data deletion requests.
Access rights do not necessarily extend to information about another person, legally privileged material, confidential commercial information, information generated in a formal dispute process, or information that cannot be disclosed for legal, security, or safety reasons.
You may close your Account using an available in-app process or by contacting us. Before closing a Seller Account, you should resolve outstanding Customer communications and save any records you need. Account closure does not erase information immediately in every system, remove copies held by other users or third parties, cancel app-store subscriptions, or prevent retention permitted or required under Section 15.
Cropdrop is intended for people who are at least 16 years old. We do not knowingly collect personal information from anyone under 16, and we do not knowingly allow anyone under 16 to register for an Account or use account-based features. Users who are 16 or 17 years old receive the same protections under this Policy as any other user.
If you are a parent or legal guardian and believe a person under 16 has registered or provided personal information to Cropdrop, contact the Privacy Officer so we can investigate and take appropriate steps, which may include removing the information and closing the Account.
Bilka Inc. and its service providers may process or store personal information in Canada, the United States, and other countries where they or their sub-processors operate. Information processed outside your province or country may be subject to foreign laws and may be accessible to courts, law enforcement, national security authorities, or regulators in that jurisdiction.
Where required, Bilka Inc. uses contractual or other measures intended to provide a comparable level of protection for personal information transferred to service providers. You may contact the Privacy Officer for information about our use of service providers outside Canada, subject to confidentiality and security limitations.
Please first direct any privacy question or complaint to the Privacy Officer using the contact details below. Include enough information for us to understand the issue, but do not send passwords or unnecessary sensitive information. We will investigate and respond as required by applicable law.
If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or another privacy regulator with jurisdiction over the matter. Nothing in this Policy limits any right you have under applicable law.
We may update this Policy as Cropdrop, our technology, service providers, or legal obligations change. We will post the revised Policy with a new effective date. Where a change is material, we will provide additional notice or obtain consent if required by law. The version in effect when information is handled will govern, subject to applicable law.
Privacy Officer
Bilka Inc. (operator of Cropdrop)
Email: team@cropdropapp.com
Please use the subject line "Privacy Request" and describe your request. For Account-specific requests, contact us from the email address associated with your Account when possible. Do not include passwords, payment-card numbers, government identifiers, or other unnecessary sensitive information.
If you need this Policy in an accessible format or require assistance making a privacy request, contact us at team@cropdropapp.com.