Privacy Policy for Sprouty.ai

Last updated: April 22, 2026

This Privacy Policy describes how Sprouty.ai (the "Sprouty.ai app", "Service", "we", "our", "us"), operated by Sprouty, collects, uses, and protects your personal data when you use our application and website at sprouty.ai and app.sprouty.ai.

Information We Collect

We collect the following types of information:

Account information: Email address and password when you create an account.
Brand data: Website URLs, brand descriptions, and content you create through our platform.
Social media tokens: OAuth access tokens when you connect social media accounts. These are stored securely and used only to publish content on your behalf.
Waitlist data: Email addresses submitted through our waitlist form.
Usage data: Basic analytics about how you use our platform.

How We Use Your Information

To provide and maintain our service
To publish content to your connected social media accounts on your behalf
To analyze your website for brand detection and content generation
To send you service updates and marketing communications (you can opt out)
To improve our service

Social Media Integrations

When you connect a social media account (Pinterest, TikTok, Instagram, Facebook, YouTube, LinkedIn, Threads, or Bluesky), we request only the permissions necessary to publish content on your behalf. We do not access your private messages, follower lists, or other personal social media data beyond what is needed for content publishing.

You can disconnect any social media account at any time through your dashboard settings.

Data Storage and Security

Your data is stored on secure servers. Social media access tokens are encrypted. We do not sell, trade, or otherwise transfer your personal information to third parties.

Third-Party Services

We use the following third-party services:

Anthropic (Claude AI): For content generation. Your brand data is sent to their API for processing.
Runware: For image generation when AI images are used.
Social media platforms: Pinterest, TikTok, Meta (Instagram/Facebook/Threads), Google (YouTube), LinkedIn, and Bluesky APIs for publishing.

Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Disconnect social media accounts
Export your data

Government and Public Authority Requests

If we receive a request from a government, court, or other public authority for access to user personal data, we follow these procedures:

Legality review: We review every request for legal validity, jurisdiction, and proper legal authority before responding.
Challenge unlawful requests: We will challenge requests that we consider overbroad, unlawful, or inconsistent with applicable law (including GDPR), where legally permissible.
Data minimization: We disclose only the minimum data strictly necessary to comply with a valid request — never more than the legal authority covers.
Documentation: We document each request, the legal reasoning applied, the actors involved, and our response, retained for accountability and audit purposes.

We have not received any national-security data requests in the past 12 months. Where law permits, we will notify affected users of any government request relating to their data.

Cookies

We use essential cookies only for authentication (login session). We do not use tracking cookies or third-party analytics cookies.

Changes to This Policy

We may update this policy from time to time. We will notify you of changes by posting the new policy on this page.

Contact Us

If you have questions about this privacy policy, contact us at hello@sprouty.ai.