Privacy Policy
Last updated 12 October 2026
Who we are
MessageKit is a product of SparrowSoft. In this policy “we” and “us” mean SparrowSoft, and “you” means the person or business using MessageKit. You can reach us at legal@sparrowsoft.co.
Whose data this is
There are two different relationships in this policy and it matters which one applies.
- Your own account. For information about you — the person who signs in — we decide what is collected and why. This policy governs it.
- Your contacts. For the subscriber lists you upload or collect through MessageKit, you decide what is collected and why, and we act on your instructions. You are responsible for having the right to hold those addresses and for the privacy notice you give the people on them. We keep each organization's contacts separate from every other organization's; the same address appearing under two customers is two unrelated records, and unsubscribing from one has no effect on the other.
What we collect
- Account information — your email address, the sign-in codes we send you, any passkeys you enrol, and your role in an organization.
- What you create — organizations, brands, colours, fonts, logos and other uploaded images, posts, emails, and content modules.
- Contact data you provide — the email addresses, names and consent records of the people on your audiences, and whether each of them is pending, confirmed or unsubscribed.
- Billing information — your subscription and payment history. Card numbers go directly to our payment processor and never reach our servers.
- Security and technical records — sign-in attempts, active sessions, IP addresses, and ordinary server logs.
- Connected social accounts — when you connect a Facebook Page or Instagram account, we receive the account or Page name, its platform identifier, and an access token that lets us publish on your behalf. Access tokens are encrypted in our database.
Your website. When you sign up, we read up to 10 public pages and stylesheets of the website you give us, using a crawler called MessageKitBot, to suggest your business's details, colours, fonts, logo and photos. Nothing is used until you confirm it. We keep the raw material for 30 days after a read on a paid plan and 7 days on the Free plan, and delete it in a nightly clean-up. What we found there (the details, menu and social links we suggested, and any photos you chose to keep) is stored with your brand, along with a record of the read (the address, the date and whether it worked), until you delete it in Settings, under Brands, then Website, with "Delete what we learned", or delete the brand. Anything you saved to your brand stays part of it.
We do not buy personal information, we do not sell it, and we do not track you across other websites.
How we use it
To run the service, sign you in, generate and publish the content you ask for, deliver the messages you send, bill you, keep accounts secure, and answer you when you get in touch. We do not use your content or your contacts to train machine-learning models, and we do not send you marketing you did not ask for.
Connected social accounts
When you connect a social account to MessageKit so that we can publish posts for you, we receive information from that platform. The platforms MessageKit connects to directly are Facebook and Instagram, through Meta. You can also publish through Buffer, which is listed separately below.
What we receive from Meta:
- The name and identifier of each Facebook Page or Instagram account you connect.
- The identifier of the person who authorized the connection.
- An access token that lets us publish on your behalf. The token is encrypted in our database and is never shown to you or to other users.
- The result of each post we publish (success, failure, or the platform's own post identifier).
We do not receive your personal Facebook or Instagram content, your friends list, your messages, or any advertising data.
What we use it for:
We use connected-account information only to publish the posts you approve and to show you whether each post was published successfully. We do not sell this information, use it for advertising, or share it with anyone other than the platform it came from.
How long we keep it:
The connection record stays until you disconnect the account in MessageKit or remove MessageKit from the platform's own settings. When either happens, we delete the access token immediately. We keep the account name and platform identifier as part of your publishing history so that your past posts still show where they were sent. Published posts and your brand are yours and are never deleted by a disconnection.
How to disconnect:
Open your brand's Connections pane in Settings and press Disconnect. You can also remove MessageKit from the platform's own settings (for Meta, go to facebook.com, then Settings & Privacy > Settings > Apps and Websites, find MessageKit, and press Remove). Either way the access token is deleted on our side.
How to have your data deleted:
Disconnecting, as described above, deletes the access token. To have the account name and platform identifier erased as well, ask for deletion. When you remove MessageKit in Facebook's settings, Facebook lets you ask us to delete your data; if you do, we erase them automatically, and Facebook gives you a confirmation code for checking the request at https://messagekit.co/data-deletion/status. You can also write to legal@sparrowsoft.co, and we will erase them within 30 days. Your posts stay yours. Full instructions are at https://messagekit.co/data-deletion.
Connected point of sale (Square)
If you connect a Square account, MessageKit reads from it and never writes to it. It reads your locations; your customers' names, email addresses, phone numbers and whether they unsubscribed from email at Square; for each payment at a location you assign to a brand, its amount net of refunds, its date, its location and which customer made it; and the items on each order (their names and quantities, and anything given back), along with your item list and its categories. It does not read card details, billing addresses, or notes and instructions added to an order.
A customer who paid at a brand's location becomes one of that brand's contacts, with their visits and spend and what they bought, so you can message people by how often they come in, what they spend and what they order. Square does not tell us who agreed to receive text messages, so connecting Square never makes anybody textable; that comes only from a Square customer export you upload, or from the person signing up themselves.
What came in from Square stays with the brand until you delete the contact or the brand. Disconnecting Square stops anything new from coming in, and tells Square to end MessageKit's access unless another MessageKit account still uses the same Square account.
Service providers
We use the following companies to run MessageKit. Each receives only what it needs for its part of the job.
| Provider | What it does |
|---|---|
| Railway | Hosts the application and its database |
| Cloudflare | Routes visitors to messagekit.co and protects it, and stores uploaded images, generated artwork and the raw material read from your website |
| Honeybadger | Receives error reports when something in the application fails, with passwords, tokens and secrets removed first |
| Anthropic | Generates draft copy and suggestions from the prompts you submit, and reads the words in a picture you ask AI to recreate so changes to them can be pointed out |
| OpenRouter, and the image models it routes to (currently OpenAI and Google) | Creates and recreates pictures from the instructions you type. A picture you ask AI to recreate is sent with them |
| Amazon SES | Delivers the email campaigns you send to your audience |
| Postmark | Delivers sign-in codes and subscription confirmations |
| Twilio | Delivers the text messages you send, and receives replies to them |
| Buffer | Publishes your posts to the social accounts you have connected |
| Meta (Facebook and Instagram) | Receives the posts you publish to connected Facebook Pages and Instagram accounts |
| Stripe | Processes subscription payments |
| Square | If you connect it, the source of your customers, their visits and spend, and what they bought. MessageKit reads from Square and sends it nothing |
| Unsplash | Provides stock photography when you search for it |
| Google Fonts | Serves the typefaces the interface is set in |
We may also disclose information if the law requires it, or if a business transfer means somebody else takes over running MessageKit — in which case this policy travels with the data.
Consent and unsubscribing
Somebody joining one of your audiences is not subscribed until they confirm it: signing up sends a confirmation email, and nothing is delivered to an address that never answers it. Every confirmation and unsubscribe link is a signed link rather than a stored token, so there is no table of secrets to leak, and an unsubscribe link does not expire.
If an address bounces hard or somebody reports a message as spam, we suppress that address across all of your lists at once and record why. Importing a list requires you to state where the consent came from, and importing can never resurrect somebody who has already unsubscribed.
Cookies
We set two, both strictly necessary: one that keeps you signed in, and one short-lived cookie that ties the sign-in code we email you to the browser that asked for it. There are no advertising cookies and no third-party analytics on this site.
Keeping it safe
Traffic is encrypted in transit. Sensitive values such as your publishing credentials are encrypted in our database. Sign-in is by emailed code or passkey — we do not store passwords — and requests for codes are rate limited. Every query the application makes is scoped to a single organization, which is how one customer's data stays invisible to another.
How long we keep it
Your content stays until you delete it or close your account. When an account or organization is deleted we remove its data, including uploaded images, within 30 days, apart from anything we must keep for legal or accounting reasons and suppression records — we keep the fact that an address must not be mailed, because losing it would mean mailing somebody who asked us not to.
Your rights
Depending on where you live you may have the right to see the personal information we hold about you, correct it, delete it, or receive a copy of it. Write to legal@sparrowsoft.co and we will respond within 30 days. If your request concerns an address on a customer's mailing list rather than your own MessageKit account, we will pass it to that customer, who is the one who decides.
Where the data lives
MessageKit is operated from the United States and the providers above may process information there. If you are using it from elsewhere, that is where your information is going.
Children
MessageKit is a tool for businesses and is not directed at children. We do not knowingly collect information from anyone under 16.
Changes
If we change this policy we will update the date at the top, and we will tell account holders by email before anything material takes effect.
Questions: legal@sparrowsoft.co. See also our Terms of Service.