Privacy Policy

This Privacy Policy describes how Sparrowcorp (“Sparrowcorp”, “we”, “us”, or “our”) collects, uses, and shares information when you use our website at sparrowcorp.io (the “Site”) and our products and services (together, the “Services”), including:

• Sorovi (Hyreel) — an AI video generator application for iOS, distributed through the Apple App Store; and
• Creative Farm — an advertising creative production and management application that integrates with Meta platforms (Facebook and Instagram) through Meta’s APIs.

By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Services.

1. Information We Collect

1.1 Sorovi (Hyreel) iOS App

When you use the Sorovi app, we may collect:

• Account information. If you create an account or sign in, we collect your email address and authentication identifiers. Authentication is provided by Firebase Authentication (Google LLC).
• User content. Photos and images you upload to the app in order to generate videos, and the videos generated from them. Uploaded content is processed by our AI processing providers solely to deliver the video generation feature you requested.
• Purchase and subscription information. Subscription status, product identifiers, and transaction metadata processed through Apple’s In-App Purchase system and RevenueCat. We never receive or store your full payment card details — payments are handled entirely by Apple.
• Device and usage data. Device model, operating system version, app version, language, anonymized identifiers, crash logs, and usage analytics that help us understand how the app is used and improve it.

1.2 Creative Farm (Facebook App)

Creative Farm is a business tool used to produce, upload, and manage advertising creatives on Meta platforms. When you connect Creative Farm to your Facebook account, we may access and process:

• Basic profile information provided by Meta when you authorize the app (such as your name and the ID associated with your Facebook account).
• Ad account data. Ad account identifiers, campaign, ad set, and ad metadata, and aggregate performance metrics (impressions, clicks, spend, conversions) retrieved through the Meta Marketing API.
• Content you provide, such as creative assets (videos, images, ad copy) that you upload or generate for publication to your ad accounts.

Creative Farm does not collect or process personal data of people who view or interact with the ads it manages. Any data received from Meta (“Platform Data”) is processed in accordance with the Meta Platform Terms and Developer Policies, is used only to provide the functionality of Creative Farm, is never sold, and is never used for advertising unrelated to your own ad accounts.

1.3 Website

When you visit the Site, we may collect standard technical information such as IP address, browser type, pages visited, and referring URLs through server logs and privacy-respecting analytics.

2. How We Use Information

We use the information we collect to:

• provide, operate, and maintain the Services;
• process the content you submit (for example, generate videos from images you upload, or publish ad creatives to your ad accounts);
• manage accounts, subscriptions, and purchases;
• monitor performance, diagnose problems, and improve the Services;
• respond to your support requests;
• comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use your content to train AI models without your explicit consent.

3. Legal Bases (EEA/UK Users)

Where the GDPR or UK GDPR applies, we process personal data on the following legal bases: performance of a contract (providing the Services you request), legitimate interests (securing and improving the Services), consent (where required, e.g. for optional analytics), and compliance with legal obligations.

4. How We Share Information

We share information only with service providers that help us operate the Services, under agreements that restrict their use of your data:

• Apple Inc. — App Store distribution and in-app purchases;
• Google LLC (Firebase) — authentication, database, and cloud functions for the Sorovi app;
• RevenueCat, Inc. — subscription management;
• AI processing providers — processing of uploaded images solely to generate the videos you request;
• Meta Platforms, Inc. — when you use Creative Farm, data is exchanged with Meta’s APIs at your direction to manage your ad accounts;
• Hosting and infrastructure providers — to run our websites and backend services.

We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets (in which case this Policy will continue to apply to your data).

5. Data Retention

• Account data is retained while your account is active and deleted within 30 days of account deletion.
• Uploaded images and generated videos are retained only as long as needed to provide the feature and your access to your creations, and are deleted when you delete them or your account.
• Platform Data obtained from Meta is retained only as long as necessary to provide Creative Farm’s functionality and is deleted promptly when no longer needed or upon request.
• Aggregated, non-identifying analytics may be retained longer.

6. Data Deletion

You can request deletion of your data at any time. Step-by-step instructions are also available on our Data Deletion Instructions page.

• Sorovi app: delete your account directly in the app (Settings → Account → Delete Account), or email us at i@sparrowcorp.io.
• Creative Farm: remove the app from your Facebook account (Facebook Settings → Apps and Websites → remove Creative Farm) — this revokes our access — and/or email us at i@sparrowcorp.io with the subject “Data Deletion Request”. We will delete all data associated with your account within 30 days and confirm completion.

7. Your Rights

Depending on your location, you may have the right to access, correct, export, restrict, object to the processing of, or delete your personal data, and the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us at i@sparrowcorp.io.

8. Security

We use industry-standard technical and organizational measures to protect your data, including encryption in transit, access controls, and least-privilege access to production systems. No method of transmission or storage is 100% secure, but we work to protect your information against unauthorized access, alteration, and destruction.

9. International Transfers

Your information may be processed in countries other than your own, including the United States and the European Union. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

10. Children

The Services are not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date above. Material changes will be communicated through the Services where appropriate.

12. Contact

Sparrowcorp
Email: i@sparrowcorp.io
Website: sparrowcorp.io