Privacy policy

This policy explains how SpryUI collects, uses, discloses, and protects information when you visit our website, create an account, use the SpryUI dashboard, or install the SpryUI SDK on a website or application you control.

Information we collect

The information we collect depends on how you use SpryUI. We aim to collect only what we need to operate, secure, support, and improve the service.

• Account details such as your name, email address, password, verification status, account role, and account preferences.
• Workspace and product data such as projects, messages, templates, targeting rules, domains, API keys, environments, experiments, and configuration settings you create in SpryUI.
• Usage and log data such as pages viewed, actions taken, approximate timestamps, device type, browser, operating system, referrer, request metadata, and diagnostic events.
• Billing information such as plan, subscription status, billing period, cancellation status, invoice metadata, and Stripe customer or subscription identifiers. Payment card details are processed by Stripe and are not stored by SpryUI.
• Communications you send to us, including support requests, product feedback, and administrative messages.

Visitor data collected through the SDK

If a SpryUI customer installs the SDK on their website or application, SpryUI may process limited visitor interaction data on that customer's behalf. This can include message impressions, clicks, dismissals, completions, route or page information, coarse device and browser details, referrer information, country derived from request headers, experiment assignment metadata, and anonymous or customer-provided visitor identifiers.

SpryUI is designed so customers can deliver targeted website messages and measure performance without storing more visitor information than necessary. Customers are responsible for configuring their use of SpryUI, choosing what messages and targeting rules to use, and making any privacy disclosures required for their own websites or applications.

How we use information

• Provide, maintain, support, and improve the service.
• Authenticate users, manage sessions, and secure accounts.
• Operate dashboard features such as projects, messages, templates, experiments, analytics, billing, and account settings.
• Deliver configured messages and measure impressions, clicks, dismissals, completions, and related performance metrics.
• Send transactional emails for verification and password resets.
• Process payments, invoices, plan changes, billing portal access, and subscription status updates through Stripe.
• Analyze usage trends, troubleshoot issues, prevent abuse, and improve performance and reliability.
• Comply with legal obligations and enforce our terms and policies.

Cookies and similar technologies

SpryUI uses cookies and similar technologies to keep users signed in, maintain secure sessions, remember preferences, and operate the service. We may also use limited analytics and diagnostic information to understand usage and improve reliability. You can control cookies through your browser settings, but disabling some cookies may prevent parts of SpryUI from working correctly.

Sharing and third parties

We use trusted providers for hosting, database infrastructure, email delivery, payment processing, analytics, security, and operational support. These providers process information only as needed to provide their services to us. We do not sell personal data.

We may disclose information if required by law, to protect SpryUI, users, customers, or the public, to investigate abuse or security incidents, or in connection with a merger, acquisition, financing, reorganization, or sale of assets.

Data retention

We keep information only as long as necessary to provide the service, maintain security and audit records, resolve disputes, comply with legal obligations, and enforce our agreements. Customers can delete or update many records in the dashboard. You can also request deletion of account information by contacting us.

Some information may remain in backups, logs, invoices, fraud prevention records, or other records where retention is required for security, legal, tax, accounting, or legitimate business purposes.

Security

We take reasonable administrative, technical, and organizational steps to protect your data, including encryption in transit, access controls, secure session cookies, credential protections, and restricted access to production systems. No system is 100% secure, but we continuously improve safeguards.

Your choices

You can access or update account information and many workspace settings within SpryUI. Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing of personal information. For privacy requests, contact .

If your information was processed through a website or application operated by one of our customers, please contact that customer first. We process SDK visitor data on behalf of our customers and will help them respond to requests where appropriate.

International processing

SpryUI and our service providers may process information in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers of personal information.

Children

SpryUI is not directed to children, and we do not knowingly collect personal information from children under the age required by applicable law. If you believe a child has provided us personal information, contact us so we can review and take appropriate action.

Changes to this policy

We may update this policy from time to time. When we make changes, we will update the "Last updated" date above. If changes are material, we may provide additional notice through the service or by email.

Contact

Questions about this policy can be sent to .