On this page
1.1 Who we are
SPHEREMEDIA.AI LTD, Reg. No. HE 495384, Aiolou & Panagioti Diomidou 9, Katholiki, 3020 Limassol, Cyprus ("Spheremedia", "we") is the data controller for personal data processed through our websites, our owned consumer apps, and our marketing operations.
As a Cyprus-established company, our lead supervisory authority is the Office of the Commissioner for Personal Data Protection of Cyprus. Privacy contact: contact@spheremedia.ai.
1.2 Data we collect
- Contact details Name, email address, phone number.
- Device and advertising identifiers IDFA/GAID, cookie IDs, device model, OS, IP address and approximate location derived from it.
- Usage and behavioral data Pages and screens viewed, session data, referral source.
- In-app event data Installs, feature usage, purchases and other conversion events.
- Email/SMS engagement data Sends, opens, clicks, unsubscribes, consent records.
Payment data is handled by payment providers; we do not store full card numbers.
1.3 Purposes and legal bases (GDPR Art. 6)
| Purpose | Legal basis |
|---|---|
| Providing our websites, apps and services | Performance of a contract |
| Email/SMS marketing and push notifications | Consent Withdrawable at any time. |
| Advertising measurement, attribution and audience building via advertising platforms | Consent Collected via our cookie banner and app consent flows. |
| Product analytics, service improvement, security and fraud prevention | Legitimate interests Balanced against your rights. |
| Compliance with law | Legal obligation |
1.5 International transfers
Where personal data is transferred outside the EU/EEA (for example to vendors in the United States), we rely on European Commission adequacy decisions or the 2021 Standard Contractual Clauses, with supplementary measures where needed.
1.6 Retention
We keep personal data only as long as needed for the purposes above:
- Account data Life of the account plus [__] months.
- Marketing consent records While the consent is active plus [__] years as compliance evidence.
- Analytics data [__] months.
- Legal and tax records As required by law.
Specific periods per tool are listed in the Cookie Policy tables.
1.7 Your rights
- EU/EEA (GDPR) and UK (UK GDPR) Access, rectification, erasure, restriction, portability, objection (including to direct marketing, which we always honour), withdrawal of consent, and complaint to your supervisory authority — in Cyprus, dataprotection.gov.cy; in the UK, the ICO.
- California (CCPA/CPRA) Rights to know, delete, correct, opt out of sale or sharing, limit use of sensitive personal information, and non-discrimination — see the CCPA/CPRA Notice and our "Do Not Sell or Share My Personal Information" link.
- Canada (PIPEDA/CASL) Rights of access and correction, and withdrawal of consent to commercial electronic messages at any time.
- Other jurisdictions We honour applicable local data protection rights; contact contact@spheremedia.ai and we will respond within the timeframe required by your local law.
1.8 Children
Our websites, apps and services are not directed at children. We do not knowingly collect personal data from anyone under 16 without verifiable parental consent, and we delete such data promptly upon discovery.
1.9 Changes and contact
We will post any material changes on this page and, where appropriate, notify you.
Questions and rights requests
Email: contact@spheremedia.ai
By post: SPHEREMEDIA.AI LTD, Aiolou & Panagioti Diomidou 9, Katholiki, 3020 Limassol, Cyprus