Privacy Policy

Block3 FMEA · Last updated: August 10, 2026

In short. We store your email address because it is how you sign in. We never store your password — only a one-way hash of it. The FMEA content you type is sent to our AI provider to generate the analysis, so treat it the way you would treat any cloud tool: avoid pasting anything your customer has restricted.

1. Who we are

Dropfeed LLC ("Dropfeed", "we", "us") provides Block3 FMEA (the "Service"), a web application that drafts Design and Process FMEAs. This policy explains what we collect, why, and what you can ask us to do about it.

2. Information you give us

Account details — your email address, and a bcrypt hash of your password. We never store the password itself, and it cannot be recovered from the hash. Nobody at Dropfeed can read it.
Optional profile details — company name, phone, and address, if you choose to enter them. These are used to pre-fill the header block on documents you create.
Document content — everything you type into an FMEA: part descriptions, process steps, requirements, failure modes, causes, controls and ratings.
Email captured on the free preview — if you use the tool without an account and enter an email to download the PDF, we store that address. Nothing is emailed to you automatically — the download happens in your browser. We keep the address as a record that the free tool was used, and so we can reach you about it if we ever need to. We will not add you to a marketing list without asking you first.

3. What we do not collect

We do not collect card numbers. Payments go directly to Stripe, which handles the card details; we only ever see a customer reference and whether a subscription is active.
We do not sell personal information, and we do not share it for advertising.
We do not use your document content to train any AI model. See section 5.

4. How we use information

To create and secure your account, and to sign you in.
To generate, store, and export your FMEAs.
To send transactional email — password resets, and billing notices. We do not send marketing email to new accounts.
To take payment and manage subscriptions.
To keep the Service working: error logs, and counts of how many documents an account has created.

5. AI processing — read this one

When you generate an analysis, the text you have entered is sent to our AI provider (OpenAI) to produce the result. That includes the part description, the process step or item, and the requirement. It is sent over an encrypted connection and is used only to answer that request.

OpenAI's API terms state that content submitted through the API is not used to train their models. We do not submit your saved documents in bulk, and we do not use your content to train anything of our own.

What this means for you: if you work under a customer confidentiality agreement that prohibits sending part information to third-party services, treat Block3 FMEA as you would any other cloud tool and keep restricted details out of it. The app deliberately never asks for real dimensions or tolerances — unknown values are written as [BRACKETS] for you to fill in privately after export.

6. Sub-processors

OpenAI — generates the analysis from the text described above.
Stripe — payments and subscription management. Stripe receives your email and card details directly.
Resend — sends transactional email such as password resets. Receives your email address.
Fly.io — hosts the application and its database.

Each is bound by its own terms and processes data on our instructions.

7. Data retention and deletion

Your account and documents are kept while your account exists. Delete a document and it is removed from our database. Ask us to close your account and we delete the account, its documents, and its password hash.

Emails captured on the free preview are kept until you ask us to remove them. Billing records are retained as long as tax and accounting rules require, which is a legal obligation rather than a choice.

To delete anything, email support@dropfeed.io from the address on the account.

8. Security

Traffic is encrypted in transit. Passwords are hashed with bcrypt and never stored in readable form. Sessions use signed, HTTP-only cookies. Access to production systems is limited to Dropfeed. No service can promise perfect security, and we will not pretend otherwise — but a copy of our database would not give anyone your password.

Backups. The database is replicated continuously to separate object storage, not copied once a night: the write-ahead log ships within seconds of every save, a full snapshot is taken daily, and thirty days of history is retained. Replication copies the database file as a whole and nothing inspects your documents in the process. On a new machine the application restores from that copy before it will open the database, and refuses to start rather than serve you an empty one.

9. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Email support@dropfeed.io and we will respond as required by law. We do not charge for this and we will not make it difficult.

10. International transfers

Our servers and sub-processors are based in the United States. If you use the Service from elsewhere, your information is transferred to and processed in the US.

11. Children

The Service is a business tool and is not directed at anyone under 16. We do not knowingly collect information from children.

12. Changes

If this policy changes materially we will update the date at the top and, where the change affects how we handle your data, email account holders.

13. Contact

Dropfeed LLC
Navarre, FL
Email: support@dropfeed.io

← Back to Block3 FMEA