Privacy Policy
Service and information collected
Betamill provides a managed 45-day deletion cycle for California data brokers handling DROP deletion request files. During intake, a customer may share a DROP API key holder, customer-file extracts, the current suppression list, file-format details, contact information, and other information needed to perform the agreed cycle.
How customer information is used
Customer information is used only to perform and document the agreed cycle steps. We access customer systems only if the customer grants access, only within the cycle scope, and only with explicit customer authorization each cycle. Credentials and API access are revocable by the customer. We do not perform live deletions without the customer's explicit authorization each cycle.
Files, retention, and deletion
How your API key is handled.
Each cycle, you paste your DROP API key into a single-use secret link we send you. The link can be viewed exactly once and is then destroyed. After we view it, the key is stored temporarily in restricted operator storage that only the fulfillment process and operator can access. It is not sent by email and is not intentionally logged. It is deleted from active storage within 24 hours of cycle completion, or immediately if you revoke it. You are instructed to rotate or revoke the key after the cycle. You can revoke at any time by emailing rob@testbedops.com. Revocation stops the cycle immediately.
How your files are handled.
You upload your customer file and suppression list through a Dropbox File Request link for the cycle. The link is for your cycle only and is closed once your files are pulled in. You do not need a Dropbox account. You enter your name and email at upload so we can identify your files. Uploads go directly into a folder we control, one per customer per cycle, and are never sent as email attachments. Your files are used only for the agreed cycle steps. Within 24 hours of delivery, your files are deleted from our systems and permanently cleared from Dropbox's deleted-file recovery; ordinary Dropbox deletion alone keeps deleted files for 30 days, so we complete the permanent clearing ourselves.
What we keep longer.
The written completion report is kept for 3 years as the proof-of-work record and is deleted on your request. Intake form responses are kept for the duration of the customer relationship and deleted on your request. Payment records are kept as required by Stripe and tax law. Payments are processed by Stripe. We do not store card numbers.
Deletion requests.
You may request deletion of your data at any time, including mid-cycle, by emailing rob@testbedops.com. A mid-cycle deletion request stops the cycle. Completed steps are documented and the unperformed portion is refunded.
Third parties.
OneTimeSecret carries the API key handoff (the secret is destroyed on first view). Dropbox carries file upload and temporary storage. Google carries the intake form responses and business email. Stripe carries payment processing. The state DROP portal is the lookup service you authorize us to query for the cycle.
We use industry-standard TLS for data in transit where our providers support it, but we do not claim any certification or guarantee that is not stated here.
Last updated: September 20, 2026.
Payments
Payments are processed by Stripe. We do not store card numbers. $950 per 45-day cycle, paid upfront. Every dollar is credited toward a $1,495/month managed operations retainer if you continue. A one-time cycle is complete when the report is delivered. The retainer is month to month. Before work begins, a customer may request cancellation and a refund. After work begins, any refund is limited to fees for agreed work not performed.
Service scope
The cycle includes:
- DROP request-file download
- CPPA-spec standardization and hashing
- Matching against your customer file
- Suppression-list update
- QA with row reconciliation
- Per-row status upload
- A written completion report
The service does not include changes to customer systems outside the agreed cycle steps. Betamill is not a law firm, and this service is not legal advice.
Limits
To the extent permitted by law, Betamill is not liable for indirect, incidental, special, or consequential losses. Betamill's total liability arising from a cycle is limited to the amount paid for that cycle. Nothing here limits liability that cannot legally be limited.
Contact and tracking
Questions or deletion requests may be sent to rob@testbedops.com. This site does not use analytics, tracking scripts, or tracking cookies.