Privacy Policy

1. Introduction

Welcome to SpAIder. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, store, and protect your information when you use our AI-powered conversational interface ("Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password (encrypted)
• Profile Data: Optional profile information you choose to provide
• Payment Information: Processed securely through Stripe (we do not store full credit card details)
• User Content: Messages, queries, and content you input into the Service
• Uploaded Files: Documents and files you upload for processing

2.2 Automatically Collected Information

• Usage Data: Features used, time spent, interaction patterns
• Device Information: Browser type, device type, operating system
• Log Data: IP address, timestamps, error logs
• Cookies: Session cookies for authentication and preferences

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service
• Process your queries through AI models
• Remember your preferences and conversation history
• Process payments and manage subscriptions
• Send service-related communications
• Analyze usage patterns to improve features
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. AI Model Providers

We use third-party AI model providers (OpenAI, Anthropic, Meta, etc.) to process your queries. When you use the Service:

• Your queries are sent to the selected AI model provider
• We use API agreements that prevent your data from being used for model training
• Each provider has their own privacy policy (links provided below)
• Data is transmitted securely using encryption

5. Data Storage and Security

5.1 Where We Store Data

Your data is stored securely using Supabase (PostgreSQL database) and hosted in secure data centers. Conversation history and user preferences are stored to provide continuity across sessions.

5.2 Security Measures

• End-to-end encryption for data in transit (TLS/SSL)
• Encrypted storage for sensitive data
• Secure authentication using NextAuth
• Regular security audits and updates
• Access controls and monitoring

5.3 Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can delete your conversation history at any time. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.

6. Data Sharing and Disclosure

We do NOT sell your personal data. We may share your information only in these limited circumstances:

• Service Providers: AI model providers, payment processors (Stripe), hosting services
• Legal Requirements: When required by law, court order, or government request
• Business Transfers: In connection with a merger, sale, or acquisition (with notice)
• With Your Consent: When you explicitly authorize us to share information

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Export: Download your conversation history
• Opt-Out: Unsubscribe from marketing emails
• Restrict Processing: Limit how we use your data
• Object: Object to certain data processing activities

To exercise these rights, contact us at privacy@spaider.ai

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences
• Analyze usage patterns (anonymized)

You can control cookies through your browser settings, but some features may not work properly if you disable cookies.

9. Children's Privacy

The Service is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@spaider.ai.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to deletion
• Right to non-discrimination for exercising your rights

12. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA) or UK, you have additional rights under GDPR. Our lawful basis for processing includes: consent, contract performance, legal obligations, and legitimate interests. You can withdraw consent or exercise your rights by contacting us.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on the Service at least 30 days before taking effect. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: