Privacy Policy · SPY Prophet

SPY Prophet ("we") operates the website and workspace at spyprophet.app (the "Service"). This Privacy Policy explains what we collect, why, and your rights.

What we collect

Waitlist email and name, if you provide them. Optional UTM parameters and referrer captured at form submission.
Account data: email, display name, and billing details when you use a paid plan.
Workspace activity: anonymized session metrics (route, viewport, basic event counts) used to debug and improve the Service. Not sold or shared with advertisers.
Server logs: IP address, user agent, request path, timestamp. Retained 30 days for security and abuse response.
Cookies: a strictly-necessary session cookie when authenticated; an analytics cookie only with your consent (deny by default in regions where consent is required).

Why we collect it

To operate the Service and provide it to you.
To respond to support requests and security incidents.
To improve the Service through aggregated, anonymized analysis.
To communicate product updates (you can unsubscribe at any time).

How long we keep it

Waitlist email: until you unsubscribe or ask us to delete it.
Account data: for the life of your account, plus 90 days after deletion for backup expiry.
Server logs: 30 days.
Anonymized usage metrics: 24 months.

Sharing

We do not sell personal data. We share it only with: (a) infrastructure providers (hosting, email delivery, error tracking) under data processing agreements; (b) law enforcement when legally compelled; (c) successors in the event of a merger or acquisition.

Your rights

Access, correction, deletion, and portability of your data.
Withdrawal of consent for non-essential cookies at any time.
To lodge a complaint with your local data-protection authority (UK ICO, your EU member-state DPA, or your state attorney general).

To exercise any of these rights: privacy@spyprophet.app.

International transfers

Our infrastructure is hosted in the United States. If you access the Service from outside the US, you understand that your data will be transferred to and processed in the US under appropriate safeguards.

Children

The Service is not intended for individuals under 18 and we do not knowingly collect data from them. If we learn we have, we will delete it.

Changes

Material changes to this Policy will be announced by email to registered users and posted here with a new "Last updated" date.

Contact

privacy@spyprophet.app for any privacy question.