Privacy policy

Who we are

DemandLark is software that reads public Reddit posts, uses AI to judge which ones fit your product, and drafts replies you can post yourself. We are responsible for the account and workspace data you give us and for the public Reddit content we store to show you matches.

What we collect

We collect what the product needs to work, and very little else.

• Account data: your email address and a hashed password, handled by our authentication provider.
• Workspace data: your website address and product description, the keywords and communities you track, and the Slack or Discord webhook URLs you add for alerts.
• Replies: the drafts you create, the replies you mark as posted, the link to your Reddit comment, and the upvote count and removal status we check afterwards.
• Matched Reddit posts: the public posts that matched your workspace, with the AI's verdict on why.
• Sign-in protection: to limit sign-in attempts and verification emails, we briefly store keyed one-way hashes of your IP address and email address, and delete them within two days. We do not store the IP address itself.

Public Reddit content

We read publicly visible Reddit posts through our own reader to find ones that fit your product. Reddit usernames and post text are public, but that does not make them ours: we process them to answer a specific question for you, and we do not treat them as a contact list.

We do not build profiles of individual Reddit users, and we do not use their posts to train AI models.

Why we are allowed to hold it

We rely on contract performance for account and workspace data, because we cannot run the service without it, and on legitimate interests for processing public Reddit posts and for preventing abuse. For the personal data of Reddit users, we limit processing to what the feature requires. Where the GDPR or UK GDPR applies, you can object to legitimate-interest processing at any time.

Who processes it for us

These providers process data on our behalf to run the service:

• Supabase: database and authentication. Your account, workspace data, matches, and replies are stored here.
• Cloudflare: hosting for the website and app.
• Render: runs the scanner that reads public Reddit posts.
• NVIDIA NIM and Google Gemini: AI models. We send them your product description, keywords, and the text of Reddit posts so they can judge matches and draft replies.
• Slack and Discord: only if you add a webhook, and only the alert messages you asked for.
• Legal and regulatory authorities, where we are compelled to respond, and only to the extent required.

What we will not do

• Sell or rent personal data.
• Use your workspace data, drafts, or replies to train an AI model.
• Post, comment, or vote on Reddit. DemandLark has no Reddit accounts and publishes nothing; you post replies yourself.

How long we keep it

Matched Reddit posts are deleted automatically after 90 days, and dismissed ones sooner, unless you saved one or wrote a reply to it. Workspace data, drafts, and replies are kept until you delete the workspace. Account data is kept until you ask us to close the account.

Your controls

• Delete a workspace in Settings. That removes its keywords, communities, matches, drafts, replies, and webhooks. Every account keeps at least one workspace; to remove the last one, ask us to close your account.
• Remove a keyword, community, or webhook yourself at any time.
• Request access, correction, a copy of your data, or deletion of your account by email; we respond within thirty days.

Security

Data travels over HTTPS and is stored with our database provider, which encrypts it at rest. Each workspace's data is separated at the database level so one account cannot read another's. Webhook alerts are only sent to Slack and Discord addresses. If a breach affects your personal data, we will tell you.

Contact

Privacy questions and data requests: privacy@demandlark.com. If you are in the EU or UK and unhappy with our response, you can complain to your local supervisory authority or to the ICO.