At Supernova Digital Marketing (supernovadigitalmkt.com) we respect your privacy. This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it, across our website, landing pages, AI assistants (WhatsApp, Instagram and web chat) and related integrations.
Supernova Digital Marketing provides marketing automation and AI assistant services, including AI-powered chat assistants, lead capture and CRM distribution. For personal data processed through our own website and assistants, Supernova acts as the data controller.
When we operate AI assistants and lead pipelines on behalf of a business customer, that business is the data controller for the end-customer data it collects, and Supernova acts as a data processor following the customer's instructions.
For any privacy question or request, contact us at privacy@supernovadigitalmkt.com.
Where the EU/UK General Data Protection Regulation applies, we rely on the following legal bases:
We do not sell your personal data. We share it only as needed to run the service, with the categories of recipients below:
| Provider | Purpose |
|---|---|
| Meta (WhatsApp Cloud API, Instagram, Facebook Lead Ads, Meta Pixel) | Messaging assistants, lead ads and conversion measurement |
| OpenAI | Generating AI assistant responses |
| Google (OAuth & Calendar) | Optional appointment scheduling on a connected calendar |
| Amazon Web Services (RDS) | Database and application hosting |
| Mailgun & MailerLite | Transactional email and newsletters |
| CRM platforms | Delivering leads to the destination chosen by the business customer |
Our service providers are bound by contractual obligations to protect your data and to process it only on our instructions.
We are based in Spain and some of our providers process data outside the European Economic Area (for example, in the United States). Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision, so your data remains protected.
We keep personal data only for as long as necessary for the purposes described in this policy, including to provide the service, meet legal obligations, resolve disputes and enforce our agreements. Lead and conversation data is retained for the period needed to manage the enquiry and any resulting relationship, after which it is deleted or anonymized. You can ask us to delete your data sooner (see Your rights).
We use cookies and similar technologies to run the site, remember your preferences, measure performance and, with your consent, for marketing. This includes our own attribution cookie (sn_access, used to credit the source of a lead) and third-party tools such as Meta Pixel and Google Tag Manager.
You can accept or reject non-essential cookies through our cookie banner, and you can clear or block cookies in your browser settings. Rejecting non-essential cookies will not stop you from using the core site.
When you message one of our assistants on WhatsApp or Instagram, your message is delivered through Meta's platforms and is also subject to Meta's own privacy terms. We process the content of your messages to understand and respond to your request, qualify your enquiry and, where relevant, book an appointment or pass your details to the business you contacted. We only send you proactive messages where permitted by the platform's policies and applicable law.
When a business customer chooses to connect their Google Calendar, Supernova requests a single, limited OAuth scope (https://www.googleapis.com/auth/calendar.events). We use this access solely to provide the appointment-scheduling features the customer has enabled in their AI assistant, specifically to:
We request only the minimum scope needed for these features. We do not request access to manage calendars, calendar sharing settings, or access-control lists.
Limited Use disclosure: Supernova's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google Calendar data is used only to provide the user-facing scheduling features described above. We do not sell this data, we do not use it for advertising, and we do not allow humans to read it except where required for security, to comply with the law, or with the user's explicit consent. Google user data is not used to train generalized AI or machine-learning models.
We implement appropriate technical and organizational measures to safeguard personal data, including encryption in transit, restricted access on a need-to-know basis, and hosting with reputable cloud providers. No method of transmission or storage is completely secure, so while we work hard to protect your data we cannot guarantee absolute security.
Depending on where you live, you may have the right to:
To exercise any of these rights, email privacy@supernovadigitalmkt.com. You also have the right to lodge a complaint with your local data protection authority. In Spain this is the Agencia Española de Protección de Datos (AEPD).
Our services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We may update this Privacy Policy from time to time. We will post the revised version here and update the "Last updated" date above. Significant changes will be highlighted where appropriate.
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at privacy@supernovadigitalmkt.com.