Privacy Policy

Effective date: June 1, 2026

1. Overview & Our Roles

This Privacy Policy explains how iSpanify LLC ("iSpanify", "we") collects, uses, and protects information when you use our website and platform (the "Services"). For data you and your team upload to run your business ("Customer Data"), your organization is the data controller and iSpanify acts as a data processor, processing that data on your instructions. For account, billing, and website information, iSpanify is the controller.

2. Information We Collect

• Account & contact information: name, email, company details, role, and information you submit when creating an account, booking a demo, or contacting us.
• Billing information: processed by our payment provider; we do not store full card numbers.
• Customer Data: content your organization uploads — SOPs, tasks, training, audits, employee records, and similar — controlled by your organization.
• Usage & device data: log data, device/browser information, and product analytics used to operate and improve the Services.
• Cookies: see Section 5.

3. How We Use Information

• To provide, secure, maintain, and improve the Services.
• To respond to inquiries and schedule demos you request.
• To send service and, with consent where required, marketing communications (opt out any time).
• To detect, prevent, and address fraud, abuse, and security threats.
• To comply with legal obligations.

4. Legal Bases (where GDPR/UK GDPR applies)

We process personal data under one or more of: performance of a contract, our legitimate interests (e.g., securing and improving the Services), your consent (e.g., certain marketing), and compliance with legal obligations.

5. Cookies & Similar Technologies

We use strictly necessary cookies for authentication and security, and may use limited analytics to understand site and product usage. You can control cookies through your browser settings. Where required, we will request consent for non-essential cookies.

6. How We Share Information

We do not sell personal information. We share it only with: (a) service providers/subprocessors who help us operate the Services (such as cloud hosting, email delivery, analytics, and payment processing) under confidentiality and data-protection obligations; (b) authorities when required by law; and (c) a successor in connection with a merger, acquisition, or asset sale. A current list of subprocessors and a Data Processing Addendum (DPA) are available on request.

7. Third-Party Integrations

If you connect third-party tools (for example payroll, ecommerce, accounting, email, marketing, scheduling, or POS providers), data may flow between those tools and the Services at your direction. Your use of those tools is governed by their own privacy policies, and we are not responsible for their practices.

8. International Data Transfers

We may process and store information in countries other than where you are located. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for cross-border transfers.

9. Data Security

We use administrative, technical, and organizational measures designed to protect information, including encryption of data in transit (TLS), access controls and least-privilege permissions, role-based access so users only see what they need, and ongoing monitoring and security reviews. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Data Retention

We retain account information while your account is active and as needed for legal, accounting, or security purposes. Customer Data is retained according to your organization's settings and may be exported before account closure; after termination it may be deleted in the ordinary course.

11. Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal information, to object to certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know and delete and the right to opt out of "sale"/"sharing" (we do not sell personal information). To exercise rights, contact us at the address below; if your data is managed by your employer's iSpanify account, we may refer your request to them as the controller.

12. Children

The Services are not directed to individuals under 18, and we do not knowingly collect their personal information.

13. Data Breach Notification

If we become aware of a personal-data breach affecting your information, we will notify affected customers and, where required, regulators, consistent with applicable law.

14. Changes to This Policy

We may update this policy from time to time. We will post the revised version with a new date and, for material changes, provide additional notice.

15. Contact

Privacy questions or requests: hello@ispanify.com. A Data Processing Addendum is available for customers on request.