Back to home

Terms

The service

Betamill provides a managed 45-day deletion cycle for California data brokers handling DROP deletion request files. The service is operational support, not legal advice. Betamill is not a law firm. Customers remain responsible for their legal obligations and decisions.

Scope

Each cycle includes:

  • DROP request-file download
  • CPPA-spec standardization and hashing
  • Matching against your customer file
  • Suppression-list update
  • QA with row reconciliation
  • Per-row status upload
  • A written completion report

The service does not include changes to customer systems outside the agreed cycle steps. No live deletions occur without the customer's explicit authorization each cycle.

First cycle sandbox check. For your first cycle, you issue a sandbox API key from your own DROP portal account; we run the full cycle against the DROP sandbox test environment first. Only if that check passes do you issue the production key. You keep your portal login to yourself; we only ever hold scoped API keys. No production deletion or status action occurs before the sandbox check passes. If the sandbox exposes a material incompatibility we cannot resolve, the cycle stops and you receive a full refund of the $950 fee.

Customer files and access

During intake, the customer may share a DROP API key holder, customer-file extracts, the current suppression list, file-format details, contact information, and other information needed to run the cycle. We use that information only for the agreed cycle steps. Access to customer systems occurs only if the customer grants it and only within the cycle scope. Credentials and API access require explicit customer authorization each cycle and may be revoked by the customer.

Retention and deletion

API key.

Each cycle, the customer pastes the DROP API key into a single-use secret link. The link is viewable exactly once, then destroyed. The key is stored temporarily in restricted operator storage accessible only to the fulfillment process and operator. It is not sent by email and is not intentionally logged. It is deleted from active storage within 24 hours of cycle completion, or immediately on revocation. The customer is instructed to rotate or revoke the key after the cycle. Revocation is by email to rob@testbedops.com and stops the cycle immediately.

Customer files.

The customer uploads the customer file and suppression list through a Dropbox File Request link for the cycle, closed once the files are pulled in. No Dropbox account is required. Files go into a folder controlled by Betamill, one per customer per cycle, and are used only for the agreed cycle steps. Within 24 hours of report delivery, files are deleted from our systems and permanently cleared from Dropbox's deleted-file recovery; ordinary Dropbox deletion alone retains files for 30 days.

Longer retention.

The written completion report is kept 3 years as the proof-of-work record, deleted on customer request. Intake responses are kept for the customer relationship, deleted on request. Payment records are kept as Stripe and tax law require.

Third-party processors.

OneTimeSecret (API key handoff), Dropbox (file upload and temporary storage), Google (intake form and business email), Stripe (payment processing). The state DROP portal is the lookup service the customer authorizes per cycle.

No live deletions or suppressions occur without the customer's explicit authorization each cycle. Credentials and API access require explicit customer authorization each cycle and may be revoked by the customer.

We use industry-standard TLS for data in transit where our providers support it and make no unsupported security or compliance guarantees.

Last updated: September 20, 2026.

Payment, completion, and refunds

Payments are processed by Stripe. We do not store card numbers. $950 per 45-day cycle, paid upfront. Every dollar is credited toward a $1,495/month managed operations retainer if you continue. A one-time cycle is complete when the report is delivered. The retainer is month to month. Before work begins, a customer may request cancellation and a refund. After work begins, any refund is limited to fees for agreed work not performed.

Liability

To the extent permitted by law, Betamill is not liable for indirect, incidental, special, or consequential losses. Betamill's total liability arising from a cycle is limited to the amount paid for that cycle. Nothing in these terms limits liability that cannot legally be limited.

Contact

Questions about these terms may be sent to rob@testbedops.com.