Home

Privacy Policy

Last updated: 3 July 2026

This policy explains what personal data we process through the LeadSpark platform, for what purposes, on what legal basis, whom we disclose it to and what rights you have, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Romanian law.

1. Data controller

The controller of your personal data is S.C. MATCH BALL S.R.L., J35/1866/2004, CUI 16553384, with its registered office at Str. Martir Remus Tasala nr. 11, Timișoara, Timiș County (brand “ProjectMedia”, product “LeadSpark”). For any matter regarding your data, write to office@projectmedia.ro.

2. What data we process

  • Account data: your email address, name (if provided) and password in encrypted form; if you sign in with Google, basic Google account data (name, email).
  • Page content: the text, images, videos, logos and information you enter, upload or generate for your pages. These may contain personal data if you choose to include it.
  • Order and billing data: the product purchased, amount, currency, date and minimal billing data. Card data is processed exclusively by the payment processor; we do not store it.
  • Technical data: IP address, approximate country (for language selection), browser and device type, access and security logs.
  • Usage and analytics: aggregated information about how the platform is used and, with your consent, audience statistics.
  • Communications: the messages you send us for support.

3. Purposes and legal bases

  • creating your account and providing the service (generation, editing, publishing, download) — performance of the contract;
  • processing payments and issuing financial documents — performance of the contract and legal obligations;
  • security, fraud and abuse prevention, proper operation — legitimate interest;
  • support and responding to requests — legitimate interest / performance of the contract;
  • audience statistics and non-essential cookies — solely on the basis of your consent, which you can withdraw at any time;
  • marketing communications — only with your consent, revocable at any time.

4. Processing with the help of artificial intelligence

To generate and edit pages, the information you provide (business description, briefs, editing instructions and, where applicable, attached images) is sent to our AI model provider, Anthropic, which processes it on our behalf strictly to produce the result. We do not make automated decisions that produce legal effects on you. Please do not enter sensitive personal data or data that is not necessary for your page.

5. Who we disclose data to (processors)

We use trusted providers that process data on our behalf, solely to operate the service:

  • Supabase — database, authentication and file storage;
  • Vercel — application hosting and delivery;
  • Stripe — payment processing;
  • Anthropic — AI content generation and editing;
  • Resend — sending transactional emails (e.g. publish confirmation, contact-form messages);
  • Pexels — the stock image/video library;
  • Google — audience statistics (Google Analytics, only with consent) and Google sign-in (optional).

We do not sell your data. We may disclose it to authorities only where required by law, or to our advisers (e.g. accountants, lawyers) under a duty of confidentiality.

6. Data of your published pages’ visitors

When you publish a page, you are the controller of the data collected from your page’s visitors (e.g. via the contact form: name, phone, email, message), and we act as a processor, forwarding those messages to your email address. You are responsible for informing visitors and complying with GDPR for that data. Published pages may use cookies/analytics only under the conditions set by the consent banner.

7. International transfers

Some providers (e.g. Anthropic, Stripe, Google, Vercel) may process data outside the European Economic Area. In those cases we ensure appropriate safeguards under the GDPR, typically the European Commission’s Standard Contractual Clauses and, where relevant, additional measures.

8. How long we keep data

We keep account data and page content for as long as your account is active. When the account is closed, we delete or anonymize the data within a reasonable period, except for data we are legally required to keep — e.g. financial documents, kept in line with tax/accounting law (generally 10 years). Security logs are kept for a limited period proportionate to the purpose.

9. Your rights

Under the GDPR, you have the right to:

  • access your data and obtain a copy;
  • rectify inaccurate or incomplete data;
  • erasure (“right to be forgotten”), subject to legal conditions;
  • restrict processing or object to processing based on legitimate interest;
  • data portability for the data you provided to us;
  • withdraw consent at any time, without affecting the lawfulness of prior processing.

You can exercise your rights by writing to office@projectmedia.ro. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP)dataprotection.ro.

10. Security

We apply reasonable technical and organizational measures to protect your data: encrypted connections (HTTPS), encrypted passwords, access control and separation of duties across providers. No system is 100% secure, however; you are responsible for keeping your credentials safe.

11. Cookies

We use strictly necessary cookies to operate the site and, only with your consent, analytics cookies. We manage consent via Google Consent Mode. Details and options are in our Cookie Policy.

12. Minors

The platform is not aimed at minors and we do not knowingly collect data of persons under 18. If you learn that a minor has provided us with data, please contact us so we can delete it.

13. Changes

We may update this policy from time to time. The version in force is the one published on this page, and the last-updated date is shown at the top.

14. Contact

S.C. MATCH BALL S.R.L. (LeadSpark / ProjectMedia) — office@projectmedia.ro · projectmedia.ro.