Privacy Policy

The short version: each business's data lives in its own workspace. We don't sell data, we don't run ads, and the marketing site has no trackers. When you connect Google or Zoom, Sprntr only creates meeting links. It can't read your email, calendar, files, or recordings.

Who we are

Sprntr ("we", "us") builds and runs websites, inquiry handling, follow-ups, and bookings for service businesses in the Philippines. The service is at sprntr.dev, the app at app.sprntr.dev, and client sites at <business>.sprntr.dev. Questions or requests: hello@sprntr.dev.

Two kinds of people, two roles

Business clients are the owners and staff who sign in to Sprntr. For their account details, Sprntr decides how data is used.

Their customers are the people who book or send an inquiry through a business's Sprntr site. That data belongs to the business. Sprntr processes it on the business's behalf and only to run the service for them. If you're a customer, you can also contact the business directly about your data.

What we collect

Your sign-in	Your name, email address, and profile picture from Google Sign-In, plus a session cookie that keeps you signed in for up to 14 days. In the Sprntr phone app, a session token stored in the phone's secure storage does the same job.
Phone app	If you turn on notifications, a push token for your phone so we can alert you to new inquiries, booking requests and replies. The app has no ads or analytics and doesn't access your contacts, photos, or location.
Business profile	Business name, phone, address, contact email, brand color, opening hours, holidays, and booking rules.
Customers and bookings	What customers enter on a business's site or what the business adds: name, phone, email, service, booking date and time, notes, and, for pet businesses, pet details such as vaccination dates and care notes.
Messages	Emails and texts Sprntr sends for the business (confirmations, reminders, review requests), and replies customers send back.
Payments	Payment status and amounts. Card and e-wallet details go straight to our payment provider; we never see or store them.
Market Watch (competitor monitoring)	Short public facts (such as prices, headings, promos, opening hours, whether online booking or chat is offered, and a rating the site publishes) from public business web pages a client asks us to watch. We follow each site's robots.txt and strip contact details.
Website monitoring	For a client's own website: whether it is up, page titles and descriptions, broken links, and the domain's expiry date. We only check sites our clients ask us to.
Where an inquiry came from	When a visitor sends a form on a client's site, the campaign tags and ad click IDs in the link they arrived from (such as utm_source, gclid or fbclid), the site that referred them, and the page they landed on are saved with the inquiry, so the business can see which channels bring customers. We don't use them to follow people across other sites or for advertising.
Review notes	When a business uses review requests, any private note a customer sends the business, and whether they clicked through to the business's Google review link. Every customer gets the same request.
Email preferences	If a customer unsubscribes from a business's follow-ups or campaigns, the date they did, so that business stops sending them marketing-style emails. Booking emails such as confirmations and reminders still go out.
Quotes and payments for businesses	Quotes a business sends its customers, whether they were accepted, and payment status. Customers pay through the business's own PayMongo account or payment link; if a business connects PayMongo, its key is stored encrypted.
AI reply drafts	For businesses with Sprntr Premium, a new website inquiry (the customer's name, the service they picked and their message, with the business's public details) is sent to Anthropic's Claude to produce a short summary and a reply draft. The draft is shown only to the business's team, and nothing is sent to the customer until a team member reviews and sends it.
Chat on sprntr.dev	If you write to us in the chat box on sprntr.dev: your message, your email address, your name if you give it, and the page you sent it from. It goes to our team's inbox, and we use it only to reply to you by email. Your browser also keeps a copy of what you sent (in local storage, not a cookie) so the conversation stays on screen while you browse; clearing your browser's site data removes it.
Technical logs	Our hosting provider keeps short-lived request logs (such as IP address and browser type) for security and troubleshooting.

Google and Zoom meeting links

A business can connect its own Google account (for Google Meet) or Zoom account so it can add an online meeting link to a booking.

Google: we request the meetings.space.created permission, which lets Sprntr create new Google Meet rooms and manage only the rooms it created. We also receive the Google account's email address to show which account is connected.
Zoom: we request permission to create and delete meetings, and to read the connected account's email address and Zoom user ID. The user ID lets us recognise Zoom's notice when you remove Sprntr from your Zoom account.
What we store: the connected account's email, the access tokens needed to create meetings, and the meeting link saved on each booking.
What we don't do: we don't read your email, calendar, contacts, files, chats, or recordings, and we don't join or record meetings.
Who sees the link: the business's team and the customer on that booking, in their confirmation, calendar event, and reminder.
Disconnecting: use Disconnect in Workspace Integrations. We revoke the access and delete the stored tokens right away. You can also remove Sprntr's access from your Google Account (myaccount.google.com/permissions) or Zoom account at any time. When you remove Sprntr in Zoom, Zoom tells us and we delete the stored tokens, email, and user ID.

Sprntr's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We don't use Google user data for advertising, we don't sell it, we don't use it to train AI models, and people at Sprntr don't read it except with your permission, for security, or where the law requires.

Facebook Messenger

A business can connect its own Facebook Page so it can answer the Page's Messenger chats from Sprntr.

Permissions: we ask to list the Pages you manage, to receive and send your Page's messages, and to subscribe the Page to message notifications. We can't post to your Page or see its other content.
What we store: the Page's name, ID, and access token; and for each customer who messages the Page, their name as Messenger shares it, their Page-scoped ID, and the messages exchanged. Photos and files stay on Facebook; we keep only their links. This becomes a lead in that business's workspace.
Disconnecting: use Disconnect in Workspace Integrations. We unsubscribe the Page and delete its access token right away. Past messages stay on each lead until the business deletes the lead or the workspace. A customer can ask the business, or us at hello@sprntr.dev, to delete their messages.

How we use data

To run the service: show leads and bookings, send confirmations and reminders, create meeting links, and produce monthly results reports.
For businesses with Sprntr Premium: score and sort leads, send follow-ups and win-back emails the business sets up, ask every customer for a review, show which channels bring bookings and revenue, send a weekly report, and watch the business's own website and the public competitor pages it chooses.
To alert the business's team about new inquiries, booking requests and replies, by email and by phone notification.
To bill clients and handle support.
To keep the service secure and fix problems.

We don't sell personal data, share it for advertising, or use one business's data for another business.

Who helps us run Sprntr

We use these providers, each only for its part of the service:

Cloudflare	Hosting, database, and security
Google	Sign-in, and Google Meet links when connected
Zoom	Zoom meeting links when connected
Meta	Facebook Messenger chats when a Page is connected
Expo	Delivering phone app notifications (through Google Firebase Cloud Messaging on Android and Apple Push Notification service on iPhone), and phone app updates
Resend	Sending and receiving email
Semaphore	Text message (SMS) reminders in the Philippines
Anthropic	AI reply drafts: for businesses that use them, reading a new website inquiry to summarize it and draft a reply
PayMongo	Payments to Sprntr, and payments to a business that connects its own PayMongo account

Some of these providers process data outside the Philippines. We may also disclose data if the law requires it, or to protect people or the service from harm.

How long we keep it

We keep a business's data while its account is active. After a client cancels, we delete the workspace on request, and we can provide a full export first. Web sign-in sessions expire after 14 days; phone app sessions expire after 60 days without use. Signing out of the app deletes its session and push token. Meeting account tokens are deleted as soon as the account is disconnected.

Security

Every connection is encrypted (HTTPS). Each business's data is kept in its own workspace and checked on every request. Sign-in is through Google, so we never hold passwords. No system is perfect; if a breach affects your data, we'll tell you and the National Privacy Commission as the law requires.

Cookies

The app uses one cookie to keep you signed in, plus short-lived cookies during Google, Zoom, and Facebook sign-in to prevent tampering. The marketing site and client sites don't use analytics or advertising cookies.

Your rights

Under the Philippine Data Privacy Act of 2012, you can ask to be informed about, access, correct, delete, or get a copy of your personal data, and to object to its processing. Email hello@sprntr.dev. If you're a customer of a business that uses Sprntr, we'll work with that business on your request. You can also complain to the National Privacy Commission (privacy.gov.ph).

Delete your account

You can delete your Sprntr account yourself:

On the web: go to app.sprntr.dev/delete-account, sign in with Google, and confirm. You don't need the app installed.
In the phone app: open Settings, tap Delete account, and confirm.
By email: write to hello@sprntr.dev from the address you sign in with. We delete it and reply when it's done.

What's deleted right away: your sign-in (name, email address, profile picture), your access to every workspace, pending invitations for your email address, all your sessions, and your phones' push tokens.

What stays: a business's leads, bookings and messages belong to that business, so they stay in its workspace when one team member leaves. Activity notes that name you, such as "Added by" lines, stay as part of that history. To delete a whole workspace and its data, the business owner can email us; we can send a full export first.

Children

Sprntr is a tool for businesses and isn't directed at children.

Changes

If we change this policy, we'll update the date at the top, and tell clients by email before any change that meaningfully affects their data.