Privacy Policy
What personal data Ansyra collects, why, who we share it with, and the rights you have over it.
Who we are and what this covers
This Privacy Policy explains how Sparkt LLC - FZ (“Ansyra”, “we”, “us”) handles personal data in connection with the Ansyra platform and website (the “Service”). It applies to visitors to our site, people who create accounts, and users within a customer’s account.
Controller vs processor. For account, billing, and website data, we act as the controller. For the data you put into the Service or that we collect on your instruction (the brands and questions you track, your content, and data from accounts you connect), we act as a processor on your behalf, and the customer that owns the account is the controller. This policy describes both roles; where a Data Processing Addendum applies, it governs our processing of customer data.
Information we collect
- Account information you give us: name, work email, organization, role, and password (stored only as a secure hash), or the profile your identity provider shares if you sign in with Google or Microsoft.
- Billing information: plan, billing contact, and transaction records. Card details are handled by our payment processor and are not stored on our servers.
- Usage data: the actions you take in the Service, features used, and requests made, which we use to run, secure, and improve the product.
- Technical data: IP address, device and browser type, and similar log data, plus the strictly necessary and functional cookies described in our Cookie Policy.
- Customer Data: the brands, questions, and content you configure, and the answers, citations, and metrics the Service gathers for them. We process this on your instruction.
- Connected-account data: see the next section.
Data from accounts you connect
The Service can connect to third-party accounts you choose to link, such as Google Search Console and Google Analytics, so it can bring your own search and audience metrics alongside your AI-visibility data. When you connect an account, you authorize us to access, through that provider’s API and the scopes you grant, data such as tokens, property or profile identifiers, and metrics (for example impressions, clicks, and referral data).
We use this data only to provide the features you enabled, we do not use it to build advertising profiles, and you can disconnect at any time from your settings, which revokes our future access through that connection.
How we use your data
- To provide, operate, and secure the Service and run the analyses you request;
- To handle billing, plans, and account administration;
- To provide support and respond to you;
- To send service and transactional messages, and (where you have opted in) product updates;
- To monitor, debug, and improve performance, reliability, and features; and
- To detect and prevent abuse, fraud, and security incidents, and to meet legal obligations.
Legal bases for processing
Where the GDPR or similar laws apply, we rely on: performance of a contract (to provide the Service you signed up for); legitimate interests (to secure, maintain, and improve the Service and communicate with customers), balanced against your rights; consent (for functional cookies and any optional marketing, which you can withdraw at any time); and legal obligation (for tax, accounting, and compliance). Under the UAE Personal Data Protection Law (PDPL), we process personal data on the basis of your consent or other lawful bases the law permits.
International transfers
Ansyra is operated by Sparkt LLC - FZ, established in the UAE, and processes personal data under the UAE PDPL and GDPR. We and our sub-processors may process data in more than one country, so providing the Service can involve transferring data across borders. Where we transfer personal data internationally, we use appropriate safeguards, such as Standard Contractual Clauses or reliance on an adequacy decision.
Data retention
We keep personal data for as long as your account is active and as needed to provide the Service, then for the period required to meet legal, tax, and security obligations, after which we delete or anonymize it. Customer Data is retained per your plan’s retention setting and your instructions. If you cancel, export your data first (exports are available in-product and over the API); you can then request deletion of your account data by contacting us, and we honour such requests unless the law requires us to keep the data longer.
Your rights
Depending on where you are, you have rights over your personal data. We honour these regardless of location where we reasonably can:
- GDPR (EU/EEA/UK): access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent. You may also lodge a complaint with your local supervisory authority.
- CCPA/CPRA (California): to know, access, correct, and delete personal information, and to opt out of sale or sharing. We do not sell or share personal information, and we will not discriminate against you for exercising your rights. You may use an authorized agent.
- UAE PDPL: to access and correct your personal data, to request its deletion, to restrict or object to certain processing, to data portability, and to withdraw consent as easily as you gave it, as well as to complain to the UAE Data Office.
Where we process data as a processor for a customer, we will refer your request to that customer and support them in responding. To exercise a right, contact privacy@ansyra.com; we may need to verify your identity, and we will respond within the timeframes the applicable law requires.
Security
We protect data with measures appropriate to its sensitivity: encryption of secrets at rest and data in transit, tenant isolation at the database level, role-based access, and an audit log of mutating actions. No method of transmission or storage is perfectly secure, but we work to protect your data and to notify you of incidents where the law requires. Report a security concern to security@ansyra.com.
Children
The Service is a business tool intended for use by adults (18 or older) and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
Changes to this policy
We may update this policy as the Service and the law evolve. We will change the “Last updated” date and, for material changes, give notice in-product or by email. Please review it periodically.
Contact and data protection
For any privacy question or request, contact our Data Protection Officer at privacy@ansyra.com, or write to Sparkt LLC - FZ, The Meydan Hotel, Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.
We will acknowledge and address privacy requests and complaints within the timeframes the applicable data protection law requires. You may also contact the relevant data protection authority in your jurisdiction.