Privacy Policy

RedditSpark is an AI-powered Reddit discovery and engagement platform operated by RedditSpark Ltd. ("RedditSpark", "we", "us", or "our"). We help businesses find relevant Reddit conversations and engage authentically with their target audience.

For privacy-related questions, please use our Contact Us page.

Account information: When you sign up, we collect your name, email address, and a password (stored in hashed form). If you register a business, we also collect your business name, website URL, and a description of your products or services.

Usage data: We collect information about how you interact with our platform — pages visited, features used, Reddit posts engaged with, and AI responses generated.

Payment information: All payment processing is handled by Stripe. We do not store your card number or full payment details on our servers. We only retain a Stripe customer ID and basic transaction metadata (plan, amount, date).

Business website data: When you provide a URL during onboarding, we scrape publicly available content from that website solely to generate your business profile suggestions. This content is not stored permanently.

Communications: If you contact us via our contact form or email, we retain that correspondence to resolve your enquiry.

We use the information we collect to:

• Create and maintain your account
• Provide and improve the RedditSpark service
• Process payments and manage your subscription
• Generate AI-powered suggestions relevant to your business
• Send transactional emails (account confirmation, password resets, billing receipts)
• Respond to support requests and enquiries
• Detect and prevent fraud or abuse

We do not sell your personal data to third parties. We do not use your data for unsolicited marketing without your consent.

Where applicable under the UK GDPR and EU GDPR, we process your personal data on the following legal bases:

• Contract: Processing necessary to provide the services you have signed up for.
• Legitimate interests: Improving our platform, preventing fraud, and ensuring security.
• Legal obligation: Where we are required to process data by law.
• Consent: For any optional communications such as newsletters, where you have given explicit consent.

We share your data only with trusted sub-processors necessary to deliver our service:

• Turso / Fly.io — our database provider, storing account and business data securely.
• Stripe — payment processing. Stripe's privacy policy applies to payment data.
• Anthropic — AI response generation. Content sent to Claude is subject to Anthropic's privacy and data usage policies.
• Vercel — hosting and infrastructure provider.
• Reddit API — we interact with Reddit's public API on your behalf when you choose to engage with posts.

All sub-processors are required to maintain appropriate technical and organisational measures to protect your data.

We retain your account data for as long as your account is active. If you request account deletion, we will delete or anonymise your personal data within 30 days, except where retention is required by law (e.g. financial records, which we keep for 7 years).

Depending on your location, you may have the following rights regarding your personal data:

• Right to access the personal data we hold about you
• Right to correct inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, please use our Contact Us page. We will respond within 30 days.

We use essential session cookies required for authentication and to keep you signed in. We do not use third-party advertising cookies or tracking pixels. You may disable cookies in your browser settings, but doing so will prevent you from staying signed in.

We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed password storage, and access-controlled infrastructure. No method of transmission over the internet is 100% secure, but we take all reasonable precautions to protect your data.

Our servers are primarily located in the United States. If you are located in the UK or EU, your data may be transferred to and processed in the US. Where this occurs, we rely on Vercel's and Turso's standard contractual clauses or equivalent transfer mechanisms.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. Continued use of RedditSpark after changes are posted constitutes acceptance of the revised policy.

For any privacy-related questions, requests, or complaints, please contact: