Draft for review. This text has not been reviewed by a lawyer yet and may change.
Privacy Policy
Last updated October 10, 2026
This policy explains what [COMPANY LEGAL NAME] ("Sprout", "we") collects when you use Sprout, including through AI apps such as Claude or ChatGPT, why we collect it, who processes it for us, and the choices you have. Questions: [CONTACT EMAIL].
What we collect
- Account details: your email address, name and profile picture if you add them.
- Your work: brands, brand details (Brand Memory), chats with Studio, designs, documents and images you upload, and comments.
- Usage: the actions you take, credits used, and technical data such as browser type and error reports, so we can run, secure and improve Sprout.
- Payments: purchase records. Card and bank details go to our payment processor, not to us.
- Connected AI apps: which apps you connected, when, and each request they make (tool name, result, timing). We don't keep what you type in those apps beyond what they send to Sprout.
How we use it
- To provide Sprout: generate designs and replies, save your work, and share brands you choose to share.
- To bill and to apply usage limits.
- To keep Sprout safe: prevent abuse, check AI-app requests for unsafe content, and fix problems.
- To improve Sprout, using aggregated or de-identified usage data.
We don't sell your personal information. [CONFIRM: We don't use your content to train AI models, and our AI providers don't either under their API terms.]
Who processes it for us
We use these service providers. They process data only to provide their service to us:
- Supabase: database, sign-in and file storage.
- Vercel and Render: hosting the website and our servers.
- Anthropic, Google (Gemini) and OpenAI: AI models that write replies, read documents, make designs and check AI-app requests for unsafe content. Your prompts and the content needed for the request are sent to them.
- Recraft and fal.ai: image generation and editing.
- Firecrawl: reading web pages you ask Sprout to use.
- Razorpay: payments.
- PostHog and Sentry: product analytics and error reports.
- Composio: connections to other tools, only if you connect them.
Some providers are outside your country. [TRANSFER SAFEGUARDS, e.g. standard contractual clauses].
AI apps you connect
When you connect an AI app to Sprout, it can see your brands and use Studio on your behalf, as shown on the screen where you allowed it. You can disconnect it anytime in Sprout under Connected agents. The AI app's own provider handles your conversation with it under their privacy policy.
How long we keep it
We keep your account and work while your account is open. When you delete a brand or your account, we delete the related data within [RETENTION PERIOD], except records we must keep by law (for example, payment records) and backups, which expire within [BACKUP PERIOD].
Your choices and rights
- See, export, correct or delete your data: email [CONTACT EMAIL].
- Disconnect AI apps in Connected agents.
- [REGION-SPECIFIC RIGHTS, e.g. GDPR / India DPDP Act / CCPA, and how to complain to a regulator].
Security
We protect data in transit and at rest and limit who can access it. No system is perfectly secure; tell us at [SECURITY CONTACT] if you find a problem.
Children
Sprout is not for children under [MINIMUM AGE].
Changes
We'll post changes here and tell you about important ones before they take effect.
[COMPANY LEGAL NAME], [REGISTERED ADDRESS].