Privacy Policy

1.1 Our two roles.

• Our own data. For information about people who visit spreadcheer.co, hold a Spreadcheer account or contact us, we decide how it is used. Sections 2 to 5 and 7 to 14 describe this.
• Data we handle for others. For information our customers put into the Service about their own customers and contacts, we act as the customer's service provider. Section 6 describes this.

1.2 If you use the Service through a Partner.

Some businesses offer the Service under their own brand (a "Partner"). If you got the Service from a Partner, the Partner's privacy notice applies to you, and we handle your data as the Partner's service provider. The Appendix shows what we do with it.

1.3 United States.

The Service is offered to businesses in the United States, and we store data on servers in the United States.

2.1 Information you give us.

• Account: name, email, password, business name, business address and phone number.
• Billing: payment details and billing address, handled by our payment processor.
• Business profile: business type, industry, logo, website, brand colors, style preferences and marketing materials.
• AI inputs: prompts and instructions, business descriptions, images you upload, and your edits and feedback on what the AI generates.
• Communications: what you send to support or through the chat on our website, and your answers to surveys.
• Free tools: the business name or website you enter to see sample posts. We look up public information about that business, such as its Google listing and phone number and the logo, colors and photos on its website, and we may contact the business about Spreadcheer.

2.2 Information from accounts you connect.

When you connect Instagram, Facebook, TikTok or LinkedIn, we receive access tokens, your account ID, username and account type, profile and business profile information, your posting history, and engagement numbers and follower counts where the platform provides them. Section 5 gives the detail for each platform.

2.3 Information we generate or collect automatically.

• AI outputs: the text and images the Service generates for you.
• Usage: features you use, content you generate, posts you schedule, and when and how often.
• Device: IP address, browser, operating system and device identifiers.

2.4 Cookies and trackers.

We use cookies to keep you signed in and remember your preferences. We use a third-party analytics tool to measure how the Service and website are used. We use an advertising pixel on our website to measure and target our own advertising, which sends information about your visit to the advertising company that provides it. Our website chat, provided by HubSpot, uses cookies to keep your conversation going and to link your visits to our website with the details you share in chat. You can block cookies in your browser. We do not respond to Do Not Track signals.

3.1 To provide the Service.

We use information to run your account, generate content, schedule and publish posts, show you results, send service messages, take payment and give support. Our staff may access your account to help you.

3.2 To improve the Service.

We analyze how content performs, in a form that does not include your name or contact details, to improve the content and strategies the Service suggests for all users. We also use usage data to fix problems and build features.

3.3 For security and legal reasons.

We use information to prevent fraud and abuse, enforce our terms and comply with the law.

3.4 For marketing.

We send product updates and marketing to customers who buy directly from Spreadcheer, and you can unsubscribe at any time. We never send marketing to a Partner's customers.

3.5 What we do not do.

We do not:

• (a) sell personal information;
• (b) use your content or data to train generative AI models; or
• (c) show or reuse one customer's content or contacts in another customer's account.

4.1 Providers.

Our AI features run on models from Anthropic, for text, and OpenAI, for images. Your prompts and the business information needed to generate content are sent to them.

4.2 No training.

We do not train AI models on your data. Our agreements with these providers do not allow them to train their models on it. They may keep inputs and outputs for a limited time for safety and abuse monitoring, currently up to 30 days.

4.3 You decide.

The AI suggests content. You decide what to publish, and nothing the AI generates has a legal effect on anyone.

5.1 What we access.

5.2 How we use it.

We use this data to publish your posts at the times you choose, confirm your connection, show you how your content performed, and improve the Service as Section 3.2 describes.

5.3 Limits.

We use data from each platform only as that platform's terms allow. We do not sell it. We share it only with the platform itself, with you, with the Partner you bought from if any, and where the law requires.

5.4 Access tokens.

We encrypt access tokens and refresh them automatically. We delete them within 24 hours after you disconnect an account or delete your Spreadcheer account.

5.5 Disconnecting.

You can disconnect an account in your settings at any time. You can also revoke our access in the platform's own settings.

5.6 TikTok review.

Our TikTok integration is subject to TikTok's review process, and TikTok may limit posts to private until its review is complete.

6.1 Your customers' data.

When you use the Service to contact your own customers or manage information about them, you decide what is collected and why. We process that information only on your behalf and only to provide the Service to you. You are responsible for giving your customers notice and getting any consent the law requires.

6.2 Review requests and text messages.

Review requests and text messages are sent through service providers. Your customers' contact details and message content are stored with a messaging provider under contract with us. We use Twilio to provide phone numbers. We register your messaging with the mobile carriers on your behalf, using the information you give us.

6.3 Partners.

If you use a Partner's branded version of the Service:

• (a) the Partner, and any Partner it buys through, can see and manage the accounts it owns;
• (b) we handle your data as the Partner's service provider;
• (c) we do not send you marketing; and
• (d) requests about your data should go to the Partner first, and we help the Partner respond.

6.4 Requests from your customers.

If someone whose information you put into the Service contacts us, we will refer them to you and help you respond.

6.5 Data processing agreement.

Our Data Processing Agreement applies to customers and Partners and sets out these commitments in full.

7.1 Service providers.

We use other companies to run the Service, in the categories below. They may use your information only to provide their services to us.

• Cloud hosting and storage: Amazon Web Services and Google Cloud
• AI text generation: Anthropic
• AI image generation: OpenAI
• Phone numbers: Twilio
• Text messaging and message storage
• Review requests
• Payment processing
• Business lookups for our free tools: Google
• Analytics
• Email delivery, error logging, customer support and customer records

7.2 Social platforms.

When you publish through the Service, we send your content, schedule and access token to the platform you chose.

7.3 Partners.

If you bought from a Partner, that Partner can see your account and content.

7.4 Advertising.

The advertising pixel described in Section 2.4 sends information about website visits to the company that provides it. We do not give your content, your contacts or your customers' information to advertisers or data brokers.

7.5 Legal reasons.

We may disclose information to comply with the law, protect our rights, investigate wrongdoing or protect anyone's safety.

7.6 Business transfers.

If we are involved in a merger, acquisition, financing, reorganization or sale of assets, information may be transferred as part of it.

7.7 De-identified information.

We may share statistics that do not identify any customer or individual.

7.8 No sale.

We do not sell personal information.

8.1 While your account is open.

We keep your information for as long as your account is open.

8.2 Deleting your data.

You can delete your account in Settings, or ask us at privacy@spreadcheer.co. When you do:

• within 24 hours, we delete your access tokens and cancel scheduled posts;
• within 30 days, we delete your personal information from our live systems; and
• within 90 days, we delete it from backups.

8.3 Inactive accounts.

If you stop using the Service without deleting your account, we keep your information until you ask us to delete it.

8.4 What we keep.

We keep financial records for seven years for tax purposes, records we need for legal claims, security logs, and information that has been de-identified.

8.5 A copy of your data.

On request, we will send you a copy of your account information and content history in JSON or CSV format within 30 days.

10.1 Your choices.

You can update your account information, unsubscribe from marketing, block cookies, disconnect social accounts and delete your account at any time.

10.2 Your requests.

Whatever state you live in, you can ask us to:

• tell you what personal information we hold about you;
• give you a copy of it;
• correct it; or
• delete it.

Email privacy@spreadcheer.co. We will confirm who you are and respond within 45 days. We will not treat you differently for making a request. If we decline a request, you can reply to appeal.

10.3 State privacy laws.

Some states, including California, give residents specific privacy rights. We do not sell personal information. You can limit the advertising pixel described in Section 2.4 by blocking cookies in your browser.

10.4 If someone else put your information into the Service.

If a business that uses the Service, or a Partner, holds your information, please contact that business. We will help it respond.