Privacy Policy for DM Spark

NS Media LLC, operating as DM Spark ("we," "our," or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use our Instagram and Facebook automation service.

By using DM Spark, you agree to the collection and use of information as described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

1.2 Instagram and Facebook Data We Store

1.3 Automatically Collected Information

• IP address
• Browser type and version
• Device information
• Usage data (features used, time spent)
• Error logs and performance data

2. How We Use Your Information

2.1 Primary Uses

• Service Delivery: To provide Instagram and Facebook DM automation services
• Account Management: To manage your account and subscription
• Customer Support: To respond to your inquiries and provide assistance
• Service Improvement: To analyze usage patterns and improve our platform
• Communications: To send service updates, security alerts, and billing notifications

2.2 Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: For service improvements and security
• Legal Obligations: To comply with applicable laws
• Consent: For marketing communications (where applicable)

3. Data Sharing and Third-Party Services

We work with trusted third-party services to provide our platform:

We do not sell, rent, or trade your personal information to third parties.

4. Your Privacy Rights

4.1 GDPR Rights (European Users)

If you are in the European Economic Area, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Limit how we process your data
• Object: Object to certain processing activities
• Withdraw Consent: Where processing is based on consent
• Lodge a Complaint: With your local supervisory authority

4.2 CCPA Rights (California Residents)

California residents have the right to:

• Know what personal information we collect
• Request deletion of personal information
• Opt-out of the sale of personal information (Note: We do not sell personal information)
• Non-discrimination for exercising privacy rights

To exercise any of these rights, please contact us at [email protected]

5. Data Retention

We retain your data for different periods depending on the type:

• Account Data: Retained while your account is active and deleted upon account deletion
• Automation Settings: Deleted upon account deletion
• Automation Logs: Trigger and message records are retained while your account is active and deleted upon account deletion
• Billing Records: Retained as required by tax laws (typically 7 years)
• Error Logs: Retained for 14 days via our monitoring provider (Datadog)
• Access Tokens: Encrypted Instagram and Facebook access tokens are stored while your accounts are connected and deleted immediately upon disconnection or account deletion

5.1 Meta Data Deletion Requests

If you remove DM Spark from your Instagram or Facebook account settings, Meta will notify us via a data deletion callback. Upon receiving this notification, we will delete all Instagram and Facebook data associated with your account from our systems, including account IDs, usernames, access tokens, automation trigger logs, and message records.

6. Data Security

We implement industry-standard security measures including:

• Encryption in transit (TLS/SSL)
• Encrypted data storage
• Secure authentication
• Regular security updates
• Access controls and monitoring

While we strive to protect your data, no method of transmission over the internet is 100% secure.

7. Data Breach Notification

In the unlikely event of a data breach that may affect your personal information, we will:

• Notify affected users via email within 72 hours of discovery
• Provide details about what information was affected
• Explain steps we've taken to address the breach
• Offer guidance on protective measures you can take
• Notify relevant authorities as required by law

8. Cookies and Analytics

We use limited cookies and analytics technologies to improve our service:

8.1 Analytics and Performance Monitoring

We use Datadog Real User Monitoring (RUM) to:

• Monitor application performance and identify technical issues
• Track page load times and user interface interactions
• Detect and diagnose errors to improve service reliability
• Analyze feature usage to optimize user experience

This data is aggregated and does not identify you personally. Datadog processes this data as our service provider under strict confidentiality agreements.

8.2 Essential Cookies

• Authentication Cookies: Required to keep you logged in securely
• Session Cookies: Maintain your preferences during your visit
• Security Cookies: Protect against cross-site request forgery

You can disable cookies through your browser settings, but this may affect the functionality of our service.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including standard contractual clauses where required.

10. Children's Privacy

DM Spark is not intended for users under 13 years of age (or 16 in the EU). We do not knowingly collect information from children. If we discover we have collected data from a child, we will promptly delete it.

11. Third-Party Links

Our service may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through our service. Continued use after changes constitutes acceptance of the updated policy.

We retain all prior versions of this Privacy Policy and will make them available upon request. You may request previous versions by contacting us at [email protected].

13. Contact Information

For privacy-related inquiries or to exercise your rights, please email us with "Privacy Request" in the subject line.

14. Jurisdiction and Governing Law

This Privacy Policy is governed by the laws of California, United States. Any disputes will be resolved in the courts of California.