Sponic Privacy

This policy explains how Sponic collects, uses, shares, and protects information when you use our app, website, campaign tools, landing pages, wallet features, and support channels.

Information we collect

We may collect account details, including the mobile phone number you sign up and sign in with, the username you choose and an email address if you give one; business and contact information, connected social account information, campaign details and submissions, wallet and transaction records, support messages, device information, usage data, and diagnostic logs. When you sign up or reset your password, we send a one-time code to your phone number through a messaging provider, which receives your number and the message for that purpose only. We do not collect or store payment card numbers. If you connect your own social account, we receive your basic profile information and the list of your own videos, read-only, so you can select one as the ad creative. We never receive your password and never post on your behalf, and you can disconnect at any time in the app or in your account settings on that platform. The landing pages we host carry a measurement pixel. When someone visits one of those pages, the pixel collects page views and interactions along with the identifiers the platform uses for measurement, plus device and connection information, so the campaign's results can be reported and improved. If you submit a form inside an ad we run, the answers you give — typically name and phone number — are collected by the platform, passed to us, and passed to the business whose ad you responded to.

How we use information

We use information to provide and improve the service, manage and verify accounts, operate and report campaigns, process wallet activity, send notifications, respond to support requests, prevent fraud and abuse, maintain security, and comply with legal obligations.

Sharing

We share campaign settings, creative, audience selections, and pixel events with the advertising platforms (TikTok, Facebook and Instagram), because that is where the advertising runs; the platforms process them under their own privacy policies. We may share information with service providers that help us run the service, including hosting, storage, messaging, payment, verification, and support providers. We may also share information when required by law, to protect rights and safety, or as part of a business transfer. We do not sell personal information and we never share one client's data with another client.

Meta Platform Data (Facebook and Instagram)

When you connect a Facebook Page or Instagram account to Sponic, we access only what is needed to run and report your campaigns: the list of Pages you manage, the Page and Instagram account you choose, their existing posts and reels, the WhatsApp Business number linked to the Page (if any), the lead forms and leads created for your campaigns, and the results of those campaigns (reach, clicks, leads, spend). We use this data only to create and manage the campaigns you order and to show you their results. We do not sell or share it with anyone, and we do not use it for any other purpose. You can disconnect at any time from the app or from your Facebook settings (Business Integrations); after disconnection we delete the related data within 30 days. To request deletion of your data, use the app or write to support@sponicapp.com.

Retention and security

We keep information only as long as needed for the purposes described in this policy, unless a longer period is required by law, dispute handling, fraud prevention, or accounting obligations. Access tokens and other secrets are stored encrypted and are never displayed after being saved, administrative access is limited by role and recorded, and client data is separated so one client cannot read another's records.

Your choices

Depending on applicable law, you may request access, correction, deletion, or restriction of your personal information, and you may withdraw a consent you gave, including by disconnecting a connected social account. You can manage notification preferences in the app. Account deletion requests can be made through the app or by contacting support.

Closing your account

You can close your account yourself, from inside the app (Profile, then Delete account), or by writing to support@sponicapp.com. Closing it stops the account from being used at once: your sign-in is disabled, your profile is hidden, your landing pages go offline, your forms and the contact details in your leads are deleted, and your connected TikTok, Facebook and Instagram accounts are disconnected and their access tokens revoked. For 90 days the rest is kept so the account can be restored: signing in again with the same phone number, or asking support, restores it. After 90 days, automatically and permanently, your name, phone number, username, business details and profile are deleted or anonymized, and the account can no longer be restored. After that we keep only three things: payment and wallet records, for accounting and legal obligations, without your name or contact details wherever we can; anonymized statistics that cannot identify you; and a one-way hash of your phone number, used only to prevent fraud and repeated abuse of new-account offers, which cannot be turned back into the number. You can ask us to permanently erase your account sooner by writing to support@sponicapp.com; we answer as soon as possible, and we then erase everything except those three records. An account that still holds a balance, has a campaign running, or has a deposit or withdrawal under review cannot be closed until those are settled.

Changes and contact

We may update this policy when our services or legal requirements change. Questions or privacy requests can be sent to support@sponicapp.com.

Operator

Sponic is operated by Vizion Estates, LLC, Floria City, Koya Road, Marjan Building 637, Erbil 44001, Iraq.