Overview
Spawn Labs, Inc. (“Spawn,” “we,” “us,” or “our”) is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your information when you use the Spawn platform, website, APIs, and related services.
By using the Service you consent to the practices described here. If you disagree, please do not use the Service.
Information We Collect
- Account information
- Name, email, and authentication credentials. Google OAuth provides your name, email, and profile picture.
- Usage data
- Pages visited, features used, agent sessions, timestamps, device info (browser, OS, screen resolution), and referring URLs.
- Agent & session data
- Prompts, agent configurations, generated outputs, session logs, and metadata — required for session history and continuity.
- Payment information
- Processed by Stripe. We do not store full card numbers.
- Uploaded content
- Files and data sources you upload for agent functionality.
- Integration data
- Tokens, metadata, and synced data from connected third-party services (via Nango or other providers).
How We Use Your Information
- Operate and maintain the Service
- Process transactions and manage your account
- Execute agent sessions and deliver generated artifacts
- Improve, personalize, and expand the platform
- Send updates, security alerts, and support communications
- Analyze usage patterns to improve performance
- Detect and prevent fraud, abuse, and technical issues
- Comply with legal obligations
AI & Agent Data Processing
- Prompts and context are sent to third-party AI providers (Anthropic Claude) to power agent actions
- Agent sessions may execute code in sandboxed environments; generated files are stored on your behalf
- We do not use your prompts or outputs to train our own models without explicit consent
- Generated content may be inaccurate — you are responsible for reviewing outputs
Data Storage & Security
- Encryption in transit (TLS) and at rest
- Fernet-encrypted secret vault for credentials
- JWT-based authentication with secure cookies
- Regular security assessments and monitoring
- Least-privilege access controls
Data is stored on US-based servers. No method of storage or transmission is 100% secure — we cannot guarantee absolute security.
Data Retention
- Account data retained until deletion
- Session data retained for continuity
- Usage logs may be retained in aggregated form
- Payment records retained per financial regulations
Upon account deletion we will delete or anonymize your information within 30 days, except where retention is required by law.
Your Rights & Choices
Depending on your jurisdiction you may:
- Access
- The personal information we hold about you.
- Correct
- Inaccurate or incomplete information.
- Delete
- Your personal information and account.
- Export
- Your data in a portable format.
- Object / restrict
- Certain processing activities.
- Withdraw consent
- Where processing is consent-based.
Contact privacy@spawnlabs.ai — we respond within 30 days.
Children's Privacy
The Service is not for children under 18. We do not knowingly collect information from children. If you believe a child has provided us data, contact privacy@spawnlabs.ai.
International Transfers
Your information may be transferred to the United States and other countries where we or our service providers operate. For EEA users we rely on standard contractual clauses and approved transfer mechanisms.
Changes
We may update this policy at any time. Material changes will be posted here and, for significant changes, emailed to your registered address. Continued use constitutes acceptance.
Questions?
Reach out at privacy@spawnlabs.ai.