Legal

Privacy notice

Effective October 9, 2026

SpawnLoop AI, Inc. ("SpawnLoop," "we," "us," or "our") provides revenue-intelligence software. This notice explains the information we collect, how we use it, and the choices available to you.

Information we collect

Account and website information. We collect information you provide when you create or use an account, including your name, email address, account preferences, and support communications. We also collect limited technical information needed to operate and secure the service, such as log data, browser and device details, IP address, and session information. If you sign in using Google, we receive the account information Google shares for authentication, such as your email address and basic profile information.

Billing information. If you subscribe to a paid plan, payment details are collected and processed by our payment processor, Stripe, under its own privacy policy. We keep your plan, invoices, and billing contact details.

Connected-service information. When you choose to connect a service, we process the information it makes available to provide the requested functionality. Depending on your configuration, this can include Stripe billing, subscription, customer, and product information, and Salesforce account, contact, lead, and other configured CRM information. Your organization controls whether to connect those services and the permissions it grants.

Cookies and website analytics

Our marketing website does not currently use advertising cookies, tracking pixels, or session recording. We use Cloudflare Web Analytics to count page views and measure site performance; it does not use cookies or local storage and does not track you across other websites. Our hosting and security provider, Cloudflare, may set strictly necessary cookies to protect the site from abuse and to control access to pages that are not yet public. The SpawnLoop app uses first-party cookies to sign you in, keep your session secure, and remember the account you last selected.

Advertising and retargeting. We may later use cookies, pixels, and similar technologies from advertising partners on our marketing website. These recognize your browser so we can show you SpawnLoop ads on other websites and measure how our campaigns perform. Under some state laws, including California's, this can count as "sharing" personal information for cross-context behavioral advertising or as "targeted advertising". Before we turn any of these on, we will update this notice to name the partners and add a Cookie preferences link to every page, where you can opt out or, where the law requires it, choose whether to allow them first. Essential cookies stay on because the site needs them to work. We will not use these technologies inside the SpawnLoop app or with the data you connect to it.

Browser signals. We treat a Global Privacy Control signal as a request to opt out of the sale or sharing of your personal information and of targeted advertising, and we honor it automatically for that browser. Our website does not change its behavior in response to Do Not Track signals, because no industry standard for them exists; Global Privacy Control is the signal we honor. Today we do not sell or share personal information.

How we use information

• Provide, secure, maintain, and improve SpawnLoop and the features you request.
• Authenticate users, protect accounts, and investigate security or misuse concerns.
• Generate dashboards, reports, matching, and AI-assisted analyses you ask us to create.
• Respond to support requests and communicate about service-related matters.
• Comply with legal obligations and enforce our agreements.

Some features use AI to produce analyses from the information needed for your request. AI-generated output is intended to help you analyze your business; it is not a substitute for your own review or judgment.

How we share information

We do not sell personal information or use it for cross-context behavioral advertising. We share information only as needed to operate the service: with providers that host, secure, authenticate, support, communicate for, analyze, or provide AI functionality to SpawnLoop; with connected services at your direction; and when required by law or needed to protect rights and safety. We may also share information in connection with a merger, acquisition, financing, or sale of assets. Our providers are permitted to process information only to provide services to us or as required by law.

Customer data and retention

When we process information from a customer’s connected service, we do so on that customer’s behalf to provide SpawnLoop. The customer is responsible for deciding what to connect and for providing any notices or permissions required for its data.

How long we keep data. We keep account and connected-service information while your account is open. Disconnecting Stripe, or uninstalling the SpawnLoop app from Stripe, stops syncing but does not delete the information already imported. To delete it, an Admin asks to close the account (Settings, “Delete this account and all the data”) and every Admin on the account approves. We then close the account and delete its data 30 days later. Any Admin can cancel before that date.

What we delete. Information imported from Stripe and Salesforce, data we derived from it (such as AI summaries, Ask AI history, and cached metrics), your Salesforce connection, and your teammates’ access to the account and pending invitations.

What we keep after deletion. Our own invoices to you and your billing relationship with us; your company name and account ID; the sign-in of the Admin who asked to close the account, as the billing contact; and a log of access to the account and of the closure, which records the email addresses and IP addresses of the people involved. We also keep a billing record for 7 years after your data is deleted: for each billing date, the customer counts we billed on and, for each counted customer, its Stripe customer ID, the category it was counted in, and the date it last paid. This record has no names or email addresses. Teammates whose access is removed keep their SpawnLoop sign-in until they ask us to delete it.

We may also keep information where the law requires it, to resolve disputes, or to enforce our agreements.

Your choices and rights

Depending on where you live, you may have rights to know what personal information we hold about you, and to access, correct, delete, or restrict processing of it. You can update certain account information in the app.

How to make a request, including a deletion request. Email [email protected] with the subject “Privacy request”, say what you are asking for, and include the email address associated with your account. You can also use the support channel in SpawnLoop. We will verify your request, usually by confirming control of that email address, and respond within the time required by applicable law. An authorized agent may make a request for you if we can verify their authority. We will not discriminate against you for exercising your rights.

If your information came from a customer’s connected service, for example because you are a customer of a business that uses SpawnLoop, please contact that business or Stripe. We process that information on the business’s behalf, so we can’t accept the request directly and will refer you to them. SpawnLoop does not delete a single customer’s information on its own: the business can leave a customer out of its analytics, or delete all of its imported data by closing its account as described above.

California residents

In the last 12 months we have collected these categories of personal information: identifiers (such as name, email address, and IP address); commercial and billing information (such as plans and invoices, and the billing records in services you connect); internet or network activity (such as log and device data); and professional information (such as your company and role). We collect it from you, from your devices, and from services you connect, for the purposes described in this notice, and disclose it only to the service providers and parties described above. We do not sell or share personal information, as those terms are defined in California law, and we do not use or disclose sensitive personal information to infer characteristics about you.

Children

SpawnLoop is a service for businesses and is not directed to children. You must be at least 18 years old to use it. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, email [email protected] and we will delete it.

Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is completely secure, and we cannot guarantee absolute security.

Changes to this notice

We may update this notice as our service or legal requirements change. If we make material changes, we will update the effective date and provide additional notice when required.

Contact

SpawnLoop AI, Inc. For privacy questions and requests, email [email protected]. For anything else, email [email protected].