Privacy Policy

Spinini (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share information about you when you use spinini.com and its associated services.

1. What We Collect

We collect information you provide directly and information generated by your use of the Service:

• Account information — your email address, display name, and profile picture when you sign up or connect via OAuth (GitHub, Google, etc.)
• OAuth tokens — access tokens needed to authenticate with third-party providers on your behalf, stored encrypted
• Usage data — pages visited, features used, session duration, error logs, and performance metrics collected automatically
• Code and files — all project files, code, and assets you store in Spinini workspaces
• Billing information — payment details are handled by Stripe; we store only your subscription status and plan tier

2. How We Use It

We use the information we collect to:

• Provide, operate, and maintain the Service
• Send transactional emails (account confirmation, password reset, billing receipts)
• Send product updates and announcements (you may opt out at any time)
• Improve and develop new features based on aggregate usage patterns
• Process payments and manage subscriptions
• Detect and prevent fraud, abuse, and security incidents

3. Data Sharing

We do not sell your personal data. We share data only with trusted third-party service providers as necessary to operate the Service:

• Stripe — payment processing. Your payment card data goes directly to Stripe and is never stored on our servers.
• Anthropic — AI coding assistance features. Code context sent to Anthropic’s API is subject to Anthropic’s Privacy Policy.

We may also disclose information if required by law or to protect the rights and safety of our users or the public.

4. Data Retention

We retain your account data and project files for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or compliance reasons (such as billing records).

5. Security

We use industry-standard security measures to protect your data. All data in transit is encrypted using TLS. Data at rest is encrypted using AES-256. We conduct regular security reviews and promptly address vulnerabilities. No method of transmission or storage is 100% secure, however, and we cannot guarantee absolute security.

6. Cookies

We use session cookies strictly necessary for authentication and to keep you logged in. We do not use third-party tracking cookies or advertising cookies. You may disable cookies in your browser settings, but doing so will prevent you from staying logged in to Spinini.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or export your personal data. To exercise any of these rights, email us at hello@spinini.com and we will respond within 30 days. You can also export your project files at any time from within the Spinini editor.

8. Children

Spinini is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us at hello@spinini.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at hello@spinini.com.