Privacy Policy

This Privacy Policy explains how DawSpark ("we", "us") collects, uses, shares and protects personal data when you use DawSpark (the "Service"): our website, web application, APIs and the integrations you connect. It also explains the choices you have, including how to delete your data.

If you use the Service on behalf of a business, that business is responsible for the personal data of its own customers that it processes through the Service (it is the "controller"), and we process that data on its instructions (as a "processor"). For your own account data, we are the controller.

1. Data we collect

Account data

Name, email address, phone number, password (stored only as a secure hash), language and time-zone preferences.
Team members you invite, their roles and permissions.
Billing records: the plan you choose, payments, invoices and payment references. Card details are handled by the payment provider and are never stored on our servers.

Content and customer data you add

Contacts, groups, deals, tasks, notes, form submissions, store orders and other CRM records you import or collect.
Messages, campaigns, templates, posts, media files, landing pages, chatbot knowledge bases and automations you create.
Call recordings and transcripts when you use the AI voice agent and enable recording.

Data from connected accounts

When you connect a third-party account, we receive only the data needed for the features you use, through the official APIs and with the permissions you approve on the provider's consent screen:

TikTok: basic profile (open ID, display name, avatar), and the ability to upload and publish videos and read their basic status and statistics.
YouTube (Google): channel ID, title and avatar, and the ability to upload videos, set their metadata and read basic statistics.
Instagram and Facebook (Meta): the Pages and Instagram professional accounts you select, their names and IDs, permission to publish posts, and the messages and comments sent to those accounts so you can reply from the unified inbox.
Threads: profile ID, username and permission to publish posts.
LinkedIn: profile or organisation page name and ID, and permission to publish posts.
X (Twitter): account ID, username and permission to publish posts.
Pinterest: account and boards, and permission to create pins.
WhatsApp: the phone number you connect, and the messages, contacts and media exchanged through it.
Telegram: the bot token you provide, and the messages, users and groups that interact with your bot.
Online stores (such as Shopify, WooCommerce, Salla or Zid): orders, customers and products needed for order confirmations and cart reminders.

Access tokens are stored encrypted. We do not read or store data beyond what the connected features need, and we never post on your behalf without your action or an automation you set up.

Usage and technical data

Log data such as IP address, browser and device type, pages used, and dates and times of access, used for security, abuse prevention and troubleshooting.
Strictly necessary cookies that keep you signed in and protect forms. Our public marketing pages do not set cookies, and we do not use advertising cookies.

2. How we use data

To provide, operate and maintain the Service and the features you turn on (sending messages, publishing posts, answering chats, placing calls, running automations).
To process payments, manage plans and credits, and send service and billing notices.
To keep the Service secure: authentication, fraud and spam prevention, rate limiting and auditing.
To provide support and respond to your requests.
To improve the Service using aggregated, de-identified usage statistics.
To comply with legal obligations and enforce our Terms of Service.

We do not sell personal data, we do not use it for third-party advertising, and we do not use data received from connected accounts for any purpose other than providing the features you use.

3. AI features

When you use AI features (chatbots, content and image generation, the voice agent, reports), the text, files or audio needed for the request are sent to AI model providers to generate the answer. These providers process the data on our behalf to return a result. We do not use your content or your customers' data to train AI models.

4. Google and YouTube data

DawSpark's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's processing is described in the Google Privacy Policy. You can revoke our access at any time from your Google account permissions.

We share personal data only with:

Service providers that help us run the Service under contracts that protect the data: hosting and storage, email and SMS delivery, telephony, AI model providers, and payment processors.
The platforms you connect, when you ask the Service to act on them (for example, publishing a post to TikTok or sending a WhatsApp message).
Your agency, if your account was created and is managed by an agency partner that offers the Service under its own brand.
Authorities, when the law requires it, or to protect the rights, property and safety of our users, the public or us.
A successor, in a merger, acquisition or sale of assets, under the same protections described here.

6. Retention

We keep personal data for as long as your account is active and as needed to provide the Service. When you delete data or your account, it is removed from our active systems promptly and from backups within their normal rotation (usually within 30 days), unless we must keep certain records (such as invoices) to meet legal obligations. Messages sent through our contact form are kept for up to 12 months.

7. Security

We use industry-standard safeguards: encryption in transit (HTTPS), encryption of access tokens and secrets at rest, isolation of each workspace's data, hashed passwords, optional two-factor authentication and passkeys, role-based access for team members, and audit logs. No system is perfectly secure, so please use a strong password and keep your credentials private.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can exercise most of these rights directly in the app (profile, data export and account deletion in your account settings) or by contacting us. If you are a customer of one of our users, please contact that business first; we will help them respond.

9. How to delete your data

You can delete your data at any time:

Disconnect an integration: open the channel or social accounts page in the app and choose Disconnect. We stop accessing that account immediately and delete its tokens.
Delete your whole account: sign in and go to your account settings, then choose Delete account. You can also download an export of your data from the same page first.
Ask us: send a request from our contact page (topic "Privacy and data deletion") with the email address of your account. We confirm the request and complete the deletion within 30 days.

You can also remove our access from the platform's own settings: Facebook and Instagram (Settings → Apps and websites), TikTok (Settings → Security → Manage app permissions), Google/YouTube (account permissions), X (Settings → Connected apps), LinkedIn (Settings → Data privacy → Permitted services) and Pinterest (Settings → Security → Apps). When access is removed, the related data stops being updated, and you can delete what remains as described above.

10. International transfers

Our providers may process data in other countries. When data is transferred across borders, we rely on appropriate safeguards required by applicable law, such as contractual protections.

11. Children

The Service is intended for businesses and is not directed at children under 16. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new date and, for significant changes, notify account owners by email or in the app.

13. Contact us

For any question about this policy or your data, please contact DawSpark through our contact page.