Privacy Policy

Information you give us

The only personal information this website asks for is what you enter in the contact form: your name, your email address, and the message you write. We use it to reply to you and to discuss the work you are enquiring about. We do not sell it, and we do not use it for advertising.

If you reach us by email or WhatsApp instead, we hold whatever you choose to send in that message.

Information collected automatically

This site does not run analytics, advertising trackers, or any script that profiles visitors. It sets no cookies of its own.

Like any website, the servers that deliver it record standard technical request data, including your IP address, browser type, and the time of the request. Two third-party content networks serve assets on our pages and receive that same request data: the Tailwind CSS content delivery network, and Google Fonts. Neither is used by us to identify you.

Who processes your data

Our contact form is handled by Formspree, which receives your submission and forwards it to us by email. Formspree processes the data on our behalf under its own privacy terms. Our website hosting is provided by Kinsta.

We share your information with no one else, except where we are legally required to do so.

WhatsApp messaging service

Appspark9 is a technology provider on the Meta WhatsApp Business Platform. We send one-time verification codes over WhatsApp on behalf of our business clients, to the people who use those clients' apps. Each message is sent from the client's own WhatsApp Business Account and appears under the client's name. For this service, the client decides whose number receives a code and why, and we process that data on the client's instructions.

From our business clients

When a business connects its WhatsApp account to our service through Meta, we receive and store the identifiers of its Meta business, WhatsApp Business Account and phone number, the display phone number, and an access token issued by Meta that lets us send messages from that account. We store access tokens encrypted. We issue each client an API key and keep only a one-way hash of it.

About people who receive codes

For each code, our client sends us the recipient's phone number, the code, and a language. We pass them to Meta to deliver the WhatsApp message. We do not store the code at all. We do not store the phone number in readable form: we keep only a keyed one-way hash of it, which lets us limit how many codes a single number can receive, together with the message's delivery status (sent, delivered, read or failed) and any error code Meta reports. These delivery records are deleted automatically after 30 days.

If someone replies to a business client's WhatsApp number, Meta notifies our service. We record only that a message arrived, not what it says or who sent it.

Appspark9's own WhatsApp number, +962 77 168 9612, works differently because we answer the people who write to it. For that number we store the messages you send us, your WhatsApp profile name and your number, encrypted, so we can read and reply to them. We delete them after 30 days.

How we use data from Meta

We use data received through Meta's platform only to deliver messages, report delivery status to the client who sent them, prevent abuse, and operate and secure the service. We do not sell it, use it for advertising, or combine it with other data to build profiles, and we do not share one client's data with another.

Who processes it

Messages are delivered by Meta Platforms through the WhatsApp Business Platform, under Meta's own terms. Our service runs on servers operated by Hetzner Online in the European Union (Finland).

Deleting service data

Clients can disconnect at any time, and anyone who received a code can ask about their data. See our data deletion instructions.

How long we keep it

We keep enquiry correspondence for as long as needed to respond and to maintain a record of the conversation, and we delete it when it no longer serves that purpose. You can ask us to delete it sooner.

Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it. Write to info@appspark9.com and we will respond. For the WhatsApp messaging service, see the data deletion instructions.

Security

This site and our messaging service are served over HTTPS, and we use commercially reasonable measures to protect the information we hold, including encrypting stored access tokens. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children

This website is intended for businesses and is not directed at children under 13. We do not knowingly collect information from them. If you believe a child has sent us personal information, contact us and we will delete it.

Links to other sites

Our pages link to services we do not operate, including WhatsApp. Those services have their own privacy policies, and we are not responsible for their content or practices.

Changes to this policy

We may update this policy. When we do, we will revise the date at the top of this page and post the new version here.

Contact us

Questions about this policy are welcome at info@appspark9.com.