Privacy

• Wallspace plans by aggregate taste by place. It never tracks devices or people and never targets by identity.
• It stores the briefs and plans you create, and labels for the accounts you connect. Your data is never sold.
• Tokens for connected Google, Microsoft, HubSpot and Notion accounts are held by our connection provider, Composio, not in the Wallspace database.
• You can disconnect any account at any time and ask us to delete everything.

• Briefs: brand name, the audience description and the things it loves, budget, flight dates, brand voice, and any site photos or current creative you upload.
• Plans and run logs: picked faces, scores, evidence, copy lines, guard verdicts, and for each model call the model name, token counts, time, cost and the provider's request id.
• Connected accounts: the provider, a label for the account (for example the email address or workspace name shown by the provider), connection status, last sync time, and a short log of what Wallspace sent and what came back (for example “plan emailed to 1 recipient” or “deal moved to Approved”).
• Tokens: OAuth tokens for Google, Microsoft, HubSpot and Notion are held by Composio. The Slack bot token for a connected workspace is stored server-side on Cloudflare and is never sent to a browser.
• Cached results: Qloo and Tavily responses, kept server-side so repeat plans do not call those services again.

Wallspace acts in a connected tool only when you press a button, such as sending a plan by email or posting it to Slack for approval. To keep the plan in sync it reads back only items tied to something it sent: replies to that email, clicks on that Slack message, changes to the CRM deal, sheet, page or calendar events it created. Anything else that reaches it is discarded and not stored.

Wallspace's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Data from Google, Microsoft, Slack, HubSpot or Notion is used only to provide the features you use, is not used for advertising, is not sold, and is not used to train AI models.

• No device identifiers, phone-location data or tracking of any person's movements.
• No targeting or describing people by race, religion, sexuality, health or other identity. Briefs that ask for it are refused and rewritten as taste.
• No advertising or analytics trackers. The site keeps one browser storage item for your light or dark mode choice; Cloudflare may set strictly necessary security cookies.
• No accounts or passwords: the demo needs no sign-in.

Qloo

Receives taste seeds (things an audience loves) and map coordinates of faces. No personal data.

Nebius Token Factory

Runs the NVIDIA Nemotron and embedding models. Receives brief text, block taste tags, site photos and draft copy for inference.

Nebius AI Cloud (Serverless Jobs)

Runs the NeMo Guardrails sign-off job over brief text and copy lines waiting for sign-off.

Tavily

Receives neighbourhood names and date ranges as search queries for local events.

Cloudflare

Hosts the app and stores plans, briefs, run logs, connection records and cached results.

Composio

Our connection provider. Holds the OAuth tokens for connected Google, Microsoft, HubSpot and Notion accounts and carries out the actions you start.

Slack

Receives plan approval messages in the workspace you connect; sends back button clicks and thread replies.

Google (Gmail, Google Sheets, Google Calendar)

Receives the emails, sheets and calendar events you send from a plan; sends back replies, sheet edits and event changes.

Microsoft (Outlook mail and calendar)

Same as Google, for Outlook accounts.

HubSpot and Notion

Receive the deal or page Wallspace creates for a plan; send back stage or property changes on it.

OpenFreeMap

Serves map tiles to your browser, so it sees your IP address like any website you load.

Each of these services handles data under its own privacy policy.

This build runs through the hackathon judging period, which ends in December 2026. Briefs, plans, run logs and connection records are deleted when the project shuts down, or sooner if you ask. Disconnecting an account removes its connection at Composio or revokes the Slack token, and stops all syncing for it.

• Disconnect any tool on the Connections page.
• Revoke access from the provider too: your Google Account's third-party access page, Microsoft account app permissions, Slack's app management, or HubSpot and Notion connected-app settings.
• Email testerbuster564@gmail.com to get a copy of your data or have it deleted. We reply within 7 days.

Wallspace is a business tool for media planners and media owners. It is not meant for anyone under 16.

If this policy changes, the new version will be posted here with a new effective date.