Privacy Notice

Last updated: May 4, 2026

1. Who we are

This Privacy Notice explains how Postspark.co ("PostSpark", "we", "us") collects, uses and protects personal data when you use the PostSpark service at postspark.co. PostSpark acts as the data controller for personal data described in this Notice.

2. Personal data we collect

  • Account data: name, email address, password hash, authentication provider IDs (e.g. Google).
  • Profile and brand data: profile picture, brand kit (logo, colors, fonts, tone) and brand voice samples you upload.
  • Content data: source material you submit (text, URLs, files) and generated outputs.
  • Usage and telemetry: feature usage, requests, error logs, device and browser information, IP address, approximate location, timestamps.
  • Support data: messages and attachments you send to us.
  • Marketing data: email preferences and engagement (opens, clicks) where applicable.

Payment card details are collected and processed directly by our Merchant of Record, Paddle, and are not stored by PostSpark.

3. Why we use your data and legal basis

  • Provide the Service (account, content generation, brand features) — performance of contract.
  • Security and fraud prevention (rate limiting, abuse detection, audit logs) — legitimate interests and legal obligation.
  • Customer support — performance of contract / legitimate interests.
  • Service improvement and analytics (aggregated usage analysis) — legitimate interests.
  • Marketing communications — consent (you may unsubscribe at any time).
  • Legal compliance (tax, accounting, responding to lawful requests) — legal obligation.

4. Sharing your data

We share personal data only with the following categories of recipients:

  • Paddle (Merchant of Record) — for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing. See the Paddle Privacy Policy.
  • Service providers / subprocessors — cloud hosting, database, email delivery, analytics, error monitoring, AI inference providers used to power generation features.
  • Professional advisers — accountants, auditors and lawyers when needed.
  • Authorities — where required by law, court order or to protect rights and safety.

We do not sell your personal data.

5. International transfers

Your data may be processed outside your country of residence, including in the United States. Where we transfer personal data from the UK or EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.

6. Data retention

We retain personal data for as long as your account is active and for as long as needed to provide the Service, comply with legal obligations (e.g. tax records), resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymize it. You can request deletion of your account at any time.

7. Your rights

Depending on your jurisdiction, you may have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request erasure ("right to be forgotten");
  • restrict or object to certain processing;
  • data portability;
  • withdraw consent at any time (without affecting prior processing);
  • lodge a complaint with your local data protection authority.

To exercise these rights, contact hello@postspark.co. We will respond within one month.

8. Security

We implement appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, audit logging and least-privilege principles. No system is perfectly secure; please use a strong password and protect your credentials.

9. Cookies

We use essential cookies needed to operate the Service (authentication, session, security). We may also use limited analytics cookies to understand how the Service is used. You can manage cookies via your browser settings; disabling essential cookies may break parts of the Service.

10. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have, contact us and we will delete it.

11. Changes to this Notice

We may update this Privacy Notice from time to time. We will update the "Last updated" date and, for material changes, notify you via the Service or email.

12. Contact

Questions about this Notice or our data practices? Contact hello@postspark.co. See also our Terms of Service and Refund Policy.