Skip to content
Data Protection & Privacy

Privacy Policy

Last updated: October 15, 2026 · Compliant with UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021), GDPR & CCPA.

Your Privacy Matters: Konspot does not sell, rent, or monetize your personal data or your customers' feedback. We process data strictly to provide social proof collection and embed infrastructure.

1. Information We Collect

We collect information in three categories depending on how you interact with our platform:

  • Account Information: When you register for Konspot, we collect your name, email address, company name, and authentication tokens via Google Firebase Authentication.
  • Customer Review Data: When end customers submit feedback via your collector URLs (/c/[slug]), we collect their name, job title, company name, star rating, written feedback, avatar image, and in-browser recorded video files.
  • Technical & Telemetry Data: We collect IP addresses (processed for rate limiting and spam prevention), browser types, operating systems, and basic telemetry to optimize widget loading speed and prevent fraud.

2. How We Use Your Information

We process your data for the following legitimate business purposes:

  • To provide, operate, and maintain your social proof widgets and hosted Wall of Love.
  • To encode and deliver video testimonials via high-speed global CDN nodes with zero style bleed.
  • To process subscription payments and calculate international taxes via Paddle as Merchant of Record.
  • To send critical transactional notifications, such as new review submissions or quota alerts.

3. Subprocessors & Cloud Infrastructure

To deliver a secure, globally distributed service, we partner with industry-leading cloud infrastructure providers that adhere to strict global security and privacy standards (ISO 27001, GDPR, and enterprise encryption):

  • Neon Database Inc.: Serverless PostgreSQL database hosting and encrypted storage.
  • Google Cloud (Firebase): Secure user authentication and identity management.
  • Cloudflare Inc. (R2): Video storage and edge asset delivery with zero egress data exposure.
  • Paddle.com Market Ltd: Merchant of Record, payment processing, and tax compliance.
  • Resend Inc.: Transactional email delivery.

4. Data Subject Rights (GDPR & UAE PDPL)

Under applicable privacy legislation, you and your review contributors possess rights regarding personal data:

  • Right to Access: You can request a complete copy of all personal data held about you.
  • Right to Rectification: You can edit and update reviewer details in your Client Portal.
  • Right to Erasure ("Right to be Forgotten"): Workspace owners or individual reviewers can permanently purge a testimonial and associated video recordings from our servers at any time.
  • Right to Withdraw Consent: A reviewer may withdraw their publishing consent by contacting the workspace administrator or our privacy team.

5. Cookies & Tracking Technologies

We use strictly necessary HTTP-only session cookies (konspot_session) to maintain your authenticated login state. We do not use invasive third-party cross-site advertising trackers inside our embed widgets.

6. Data Retention & Security

All communication between your browser and our servers is encrypted in transit using TLS 1.3 with 256-bit encryption. Stored media assets and database records are encrypted at rest with AES-256. We retain data only for as long as your workspace account remains active.

7. Contact Our Data Protection Officer

To exercise your data protection rights or submit a privacy inquiry, please reach out to:

Konspot Privacy Office
Email: privacy@konspot.com
Dubai, United Arab Emirates