Privacy Policy

Sprung's two roles

For sprung.ai and our own access-request form, Sprung decides what is collected and why.

When you contact a business through Sprung, that business decides why your information is collected, how it is used and how long it is kept. Sprung processes it on the business's behalf and on its instructions, as a service provider. If you have questions about how a business handles your information, contact that business. You can also write to us at [email protected] and we will help route your request.

What we collect

Information you give us: your email address; your mobile number, first name, business name and message if you provide them; and your consent choices, including whether you ticked the optional box to be contacted by text. Without that box, we do not text your number.

Information from businesses that use Sprung: the names and email addresses of the people who sign in, business settings, the knowledge a business writes for its AI assistant, and the customer and inquiry records it keeps in Sprung. Sign-in is handled by Amazon Cognito; Sprung never sees your password.

Information collected automatically: when and how you gave permission (the consent text, its version and the time), technical details needed to protect our forms from abuse (such as your IP address and request timing), delivery events for messages we send (delivered, bounced, complaint, unsubscribe, STOP), and basic server logs.

Cookies and analytics: sprung.ai sets no advertising or tracking cookies and uses no third-party analytics that identify you. The Sprung app for businesses uses browser storage to keep you signed in. If we add analytics later, they will record only non-personal events, never contact details, names or message text.

How we use it

To provide the service: saving your inquiry, delivering it to the business you contacted, confirming receipt, and helping the business reply and schedule with you.

To run our access-request program: saving your request and sending you access updates through the channel you chose. This permission is limited to those updates; it does not include newsletters or promotions.

With AI: Sprung uses AI models to summarize inquiries, suggest how urgent or relevant they are, and draft replies. A person at the business reviews a draft before anything is sent on its behalf. Our AI provider processes this information only to provide the service to us, under terms that do not permit using it to train their models.

To keep the service safe: preventing abuse of our forms, enforcing message limits, investigating security incidents, and honoring unsubscribe and STOP requests.

To operate and improve Sprung, using aggregate information that does not identify you, and to meet legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Who we share it with

The business you contacted, which receives your inquiry and your contact details.

Service providers that work on our behalf: Amazon Web Services (hosting, database and email delivery), Cloudflare (network security and content delivery), Anthropic (AI processing), Twilio (text messages, once the text program is active) and Amazon Cognito (sign-in for business users). Each may use your information only to provide its service to us.

Others when required: to comply with law or a valid legal request, to protect the rights, safety and property of Sprung, our users or others, or as part of a merger, acquisition or sale of assets, in which case this notice continues to apply to your information.

Mobile information: We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text-messaging originator opt-in data and consent will not be shared with any third parties.

How long we keep it

Inquiries to a business: for as long as that business keeps the record in its Sprung account. A business can ask us to delete a record at any time. When a business closes its account, we delete its inquiry and customer records within 90 days, except for the records described below.

Requests for access to Sprung: until our access program ends or 24 months after your request, whichever comes first, unless you ask us to delete it sooner.

Consent, unsubscribe and STOP records: at least five years after the last message to you, so that we can prove consent and keep honoring your choice. We keep opt-out records for as long as needed to honor them.

Message delivery events: 13 months.

Technical logs: a limited time, generally no more than two years, used only for security, abuse prevention and troubleshooting.

Your choices and rights

Every email we send includes an unsubscribe link. Reply STOP to any text to stop texts from that sender. Opting out stops further messages on that channel; submitting a form again does not undo it.

You can ask us to access, correct or delete your personal information, or to tell you what we hold about you, by emailing [email protected]. We will verify your request and respond within 45 days. If your information was collected by a business through Sprung, we will act on that business's instructions or pass your request to it, and tell you which. We will not treat you differently for exercising these rights.

California residents: the categories of personal information we collect are identifiers and contact details (name, email address, mobile number, business name), the content of your inquiry, consent records, internet and network activity (technical log data), and inferences (AI-generated summaries of an inquiry). We collect them from you, from the business you contacted, and automatically, for the purposes described above. We do not sell or share personal information as those terms are defined in the California Consumer Privacy Act, and we have not done so in the preceding 12 months. You have the right to know, delete and correct your personal information and the right not to be discriminated against for exercising those rights. You may use an authorized agent to make a request; we will ask the agent for proof of authorization.

Nevada residents: we do not sell covered information. You may still submit a request at [email protected].

Residents of other states with privacy laws have similar rights, which you can exercise the same way. If we deny a request, you may appeal by replying to our decision.

Security

Information travels over encrypted connections (TLS) and is stored encrypted. Each business's records are separated from every other business's at the database level, and access by Sprung staff and systems is limited to what is needed to provide the service. No system is perfectly secure; if you believe your information has been exposed, tell us at [email protected].

Children

Sprung is not directed to anyone under 16, and we do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

Where your information is processed

Sprung operates in the United States, and your information is stored and processed there. If you contact us from outside the United States, your information is transferred to the United States.

Changes to this notice

When we change this notice, we will post the new version here with a new effective date and version. If a change materially affects how we use information we already hold, we will tell you in a way that fits the change.

Contact

Sprung LLC, 923 Tahoe Blvd, Incline Village, NV 89451 · [email protected]