Privacy Policy
How we protect and handle your data
Privacy Policy
sparkposter.com helps local businesses create AI-powered marketing posters. This policy explains how we collect, use, and protect your information when you use our design platform.
Last updated: October 7, 2025
Transparency
We clearly describe what data we collect, how AI models process it, and when information leaves our platform.
Security by Design
We encrypt data in transit, limit internal access, and rely on audited providers for infrastructure and payments.
User Control
You can access, export, update, or delete your account, brand assets, and generated designs at any time.
Information We Collect
Information You Provide
- •Account details: name, email, password, and billing info for subscriptions.
- •Brand assets: logos, color palettes, fonts, slogans, and copy you upload to build posters.
- •Prompts & project content: product descriptions, offers, and promotional text used to generate posters.
- •Support messages: emails, chat transcripts, or feedback shared with our team.
Information Collected Automatically
- •Usage analytics: templates selected, poster exports, feature engagement, and timestamps.
- •Device & browser data: IP address, operating system, device identifiers, and language settings.
- •Cookies & local storage: session tokens, preference settings, and experiment assignments.
Information from Third Parties
- •Payment processors: billing status, invoice IDs, and subscription tier from Creem/Stripe. We never store full card numbers.
- •Authentication partners: optional single sign-on providers, if you connect them.
How We Use Your Information
Service Delivery
- •Generate AI marketing posters, social assets, and print files tailored to your prompts.
- •Manage brand kits so every export matches your colors, fonts, and logo.
- •Provide customer support, onboarding resources, and troubleshooting help.
- •Process payments, renew subscriptions, and send transactional notices.
Product Improvement
- •Understand template performance and add industry-specific designs.
- •Monitor platform stability, prevent abuse, and keep user content safe.
- •Run A/B tests and experiments to improve AI quality and experience.
- •Send product updates, educational content, and marketing offers (opt-out anytime).
How AI Generates Your Posters
When you submit copy or upload brand assets, we securely transmit that information to AI models hosted by trusted providers (for example, OpenAI or Stability) to generate poster layouts and images. We use industry-standard HTTPS encryption and do not allow models to train directly on your identifiable assets without your consent. Aggregated, anonymized usage statistics help us improve prompts, but your private assets remain yours.
Infrastructure
Supabase, Vercel, and AWS host our databases, file storage, and API services with encryption and access controls.
Payments & Billing
Creem/Stripe process subscriptions and invoicing. We only store payment tokens and billing metadata.
Messaging & Support
Email and in-app communications are delivered via providers such as Resend or Postmark. Support tickets are managed in secure helpdesk tools.
When We Share Information
We never sell your personal data. We share information only when necessary to operate the service or comply with the law:
- •Vendors & contractors: infrastructure, analytics, email, customer support, and AI model providers under data processing agreements.
- •Legal & safety: to respond to lawful requests, enforce our Terms, or prevent fraud and security threats.
- •Business transfers: if the service is acquired, data may transfer as part of the transaction with advance notice.
- •With your consent: such as publishing testimonials or case studies that reference your business.
Cookies & Similar Technologies
We use cookies and local storage to keep you signed in, remember preferences, measure feature adoption, and run product experiments. Some cookies are essential for security; optional analytics cookies can be managed in your browser settings or via any in-product cookie banner we provide.
International Data Transfers & Compliance
sparkposter.com is operated from the United States. If you access the service from the EU, UK, or other regions with data protection laws, we process your data under Standard Contractual Clauses or equivalent safeguards with our vendors. We are building workflows to support GDPR/CCPA requests, including access, deletion, and opt-out rights.
Data Retention & Deletion
Account data, brand assets, and generated posters remain available while your account is active. If you delete assets or close your account, we remove the data from active systems immediately and from backups within 30–60 days. Billing records may be retained longer to meet legal obligations. You can initiate deletion at any time from account settings or by contacting support.
Your Rights & Choices
You Can
- •Review or update profile, brand, and billing information.
- •Export generated posters and prompts.
- •Request account deletion or anonymization.
- •Opt out of marketing emails via the unsubscribe link.
We Will
- •Respond to privacy requests within 30 days (or faster where legally required).
- •Notify you of material policy changes before they take effect.
- •Seek consent before using your content in marketing case studies.
- •Provide additional GDPR/CCPA rights upon verification of identity.
Questions About Privacy?
If you have any questions about this Privacy Policy or our data practices, please email us at support@sparkposter.com. We're here to help and ensure your privacy is protected.