SARPER LABS · LEGAL
Privacy Policy
This policy explains what personal information Sarper Labs (“we,” “us”) collects through sarperlabs.com, your account area and our services, why we use it, who we share it with, and the choices and rights you have. Our mobile apps have their own privacy policies on their pages under Apps.
The short version
- We collect what you give us (forms, account, billing details) and basic technical data about visits.
- Card payments are handled by Stripe. Your card number never reaches our servers.
- We do not sell your personal information.
- Advertising cookies (Meta Pixel) are off unless you turn them on. If you do, Meta receives ad measurement data, which California law calls “sharing.” You can turn it off at any time.
- You can download your account data or ask us to delete it from My account, or by email.
Who we are
Sarper Labs, 311 60th St, Suite 413, West New York, NJ 07093, USA, is responsible for the personal information described here. Contact: info@sarperdijital.com.
Information you give us
- Project and quote requests: full name, phone, email, company or brand, your role, sales status, budget range, preferred start time and any notes you add.
- Waitlists: your email address only. We use it to tell you when that product launches. We do not add it to a marketing newsletter.
- Your account: name, email and password. Passwords are stored as a secure hash, never in plain text.
- Checkout and billing details: name, email, phone, billing name, billing email and phone, and billing address (state, city, street, ZIP code).
- Messages: what you write when you email us, and privacy requests you send.
- Client content: information you or your business give us so we can set up a service (for example store, CRM, WhatsApp or ad account details). See “Client data” below.
Payments
Payments are processed by Stripe on Stripe’s own secure pages (Stripe Checkout and the Stripe Customer Portal). You enter your card there; the card number and security code never reach our servers or database. We receive and store a Stripe customer ID, what you bought, amounts, payment and subscription status, and links to Stripe receipts and invoices. Stripe uses your information under its own privacy policy (stripe.com/privacy), including for fraud prevention.
Information collected automatically
- Page-view statistics (our own, no cookies): when you open a page, our server records the page address, the product page if any, the time, and your approximate city, region and country. That location normally comes from our host Netlify, which provides it with each request; only when it is missing is your IP address sent to the service ipapi.co for the lookup. We do not store the IP address itself. To count unique visitors, we store a one-way code (a hash) made from your IP address, browser type, the date and a secret value. The code changes every day, so it cannot be used to follow you from one day to the next, and we cannot turn it back into your IP address. Admin pages are not counted.
- Where you came from: for the length of your visit, your browser keeps the referring website, the first page you landed on and campaign tags in the link (UTM tags, or whether you came from a Facebook/Instagram ad). If you send a request form or join a waitlist, this is saved with it so we know which channels work.
- Sign-in and security: when you sign in, we store your IP address and browser type with your session. We also use IP addresses briefly to limit repeated form submissions and to block bots.
- Consent records: when you accept our terms or agree to automatic renewal at checkout, we store the exact text you agreed to, the time, your IP address and browser type, as proof of your choice.
- Logs: our hosting provider and our system logs record technical events and errors. Error logs can include an email address when an email could not be sent.
- Cookies and browser storage: see the Cookie Policy.
Advertising (only if you opt in)
We may advertise on Facebook and Instagram. If, and only if, you turn on “Advertising” in , we load the Meta Pixel. It tells Meta which of our pages you view and when you start a checkout, send a request or buy, so we can measure our ads. In that case our server may also send the same events to Meta directly (the Meta Conversions API), with your email and phone number in hashed (scrambled) form, your IP address, browser type and Meta’s cookie IDs. Meta uses this data under its own policies, and it may combine it with other data it has about you. If you leave Advertising off, or your browser sends a Global Privacy Control signal, none of this happens.
How we use information
- To answer your requests and prepare quotes.
- To create and run your account, take payments and deliver the services you buy.
- To send service emails: account verification, password resets, order confirmations, free-period and renewal reminders, failed-payment notices and cancellation notices.
- To tell you when a waitlist product launches.
- To provide support and keep records of what was agreed.
- To understand how the site is used, in aggregate, and improve it.
- To protect the site, our customers and us from fraud, spam and abuse.
- To measure our ads, only if you opted in.
- To comply with law, taxes and accounting, and to handle disputes and chargebacks.
Who we share information with
We share personal information only with service providers that help us run the business:
- Stripe: payments, subscriptions, receipts, invoices and the billing portal.
- Neon: our database, hosted in a United States region.
- Netlify: website hosting and server functions.
- Resend: sending our emails.
- Our notification server and Telegram: short internal notices for our team are first sent to our own notification server, which then posts them to a private Telegram chat. They include, for example, a new request (name, company, phone, budget, product), a new waitlist signup (email), a new order (name, phone, product and amount) or a subscription problem.
- ipapi.co: only when our host does not provide a location, turns an IP address into an approximate city for our page-view statistics.
- Meta: only if you turn on Advertising cookies (see above).
We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger, sale or similar business transfer. We do not use or share sensitive personal information (as defined by California law) to infer characteristics about you.
Client data
When we build or run an automation for your business, we may handle information about your own customers (for example order or contact details passing through WhatsApp, Instagram, your store or your CRM). For that data we act on your behalf and follow your instructions and our agreement with you. You are responsible for having the right to share it with us and for giving any notices your customers need.
Where our services run and where data is kept
- The automations we set up and run for US customers run on our own servers in the United States.
- Data in those automations is deleted automatically, without you having to ask. Our team does not read message contents.
- This website is hosted by Netlify.
- Account and order records are kept in our Neon database, hosted in a United States region.
- WhatsApp messages are carried by Meta, and Telegram messages by Telegram.
- AI replies are produced through an AI service provider.
- Payments are processed by Stripe. Online payments are not open yet.
How long we keep information
- Account and billing details: while your account is open, then until we complete a deletion request.
- Orders, payments, invoices and consent records: up to 7 years, for taxes, accounting and disputes.
- Requests that did not become a project: up to 24 months after our last contact.
- Waitlist emails: until we send the launch email, or until you ask us to remove you.
- Privacy request records: 24 months.
- Sign-in sessions: until the session ends or expires.
- Page-view statistics: they contain no IP address or name and are kept as statistics.
Today some of these deletions are done by hand by our team.
Your privacy rights
Depending on where you live, including California, you may have the right to:
- Know and access the personal information we have about you and how we use it.
- Delete personal information we collected from you.
- Correct inaccurate personal information.
- Opt out of sale or sharing (see above). We do not sell.
- Limit use of sensitive personal information. We do not use sensitive personal information for purposes that would give you this right.
- Not be treated differently for using your rights.
How to make a request:
- Signed in: go to My account. “Download my data” gives you a copy of your account, billing, quote, order and subscription data right away. “Request account deletion” sends us a deletion request.
- Any request, or if you have no account: email info@sarperdijital.com.
We will confirm receipt within 10 business days and answer within 45 days. If we need more time (up to another 45 days), we will tell you why. To protect you, we verify requests, usually by matching the email address on file. An authorized agent may make a request for you with your signed permission. We may keep information the law requires us to keep (for example payment records), and we will tell you if so. If we deny your request, you can appeal by replying to our answer; we will respond to an appeal within 45 days.
Notice at collection (California)
Categories of personal information we have collected in the past 12 months:
Sources: you, your browser or device, Stripe (payment status) and, for client data, your business. Retention: see “How long we keep information.”
Children
Our site and services are for businesses and adults. They are not directed to children under 13, and we do not knowingly collect personal information from children under 13. We do not sell or share personal information of anyone we know is under 16. If you think a child gave us personal information, email us and we will delete it.
Visitors outside the United States
We are based in the United States, and our service providers process information in the United States and other countries. If you use our site from elsewhere, your information will be transferred to and processed in the United States, where privacy laws may differ from yours.
If you are in the European Economic Area or the United Kingdom: we use your information to perform a contract with you or take steps you ask for before one (quotes, orders, accounts), for our legitimate interests (security, fraud prevention, site statistics, records of what was agreed), to meet legal obligations (taxes, accounting), and with your consent (advertising cookies, which you can withdraw at any time in Cookie Preferences). You may have the right to access, correct, delete, restrict or object to our use of your information, to receive it in a portable format, and to complain to your local data protection authority. To use these rights, email us.
Security
We use reasonable safeguards: encrypted connections (HTTPS), hashed passwords, card payments kept on Stripe, and limited staff access to the admin area. No system is perfectly secure, and we cannot promise that information will never be accessed without permission.
Changes to this policy
If we change this policy, we will update the “Last updated” date above. If a change is important, we will also tell account holders by email or on the site before it takes effect.
Contact us
Questions about this policy or your personal information? Email info@sarperdijital.com or write to Sarper Labs, 311 60th St, Suite 413, West New York, NJ 07093, USA.