Privacy Policy

Spawn Labs, Inc. (“Spawn,” “we,” “us,” or “our”) is committed to protecting your privacy. This policy explains how we collect, use, disclose, and safeguard your information when you use the Spawn platform, website, APIs, and related services.

By using the Service you consent to the practices described here. If you disagree, please do not use the Service.

Account Information. Name, email, and authentication credentials. Google OAuth provides your name, email, and profile picture.

Usage Data. Pages visited, features used, agent sessions, timestamps, device info (browser, OS, screen resolution), and referring URLs.

Agent & Session Data. Prompts, agent configurations, generated outputs, session logs, and metadata — required for session history and continuity.

Payment Information. Processed by Stripe. We do not store full card numbers.

Uploaded Content. Files and data sources you upload for agent functionality.

Integration Data. Tokens, metadata, and synced data from connected third-party services (via Nango or other providers).

• Operate and maintain the Service
• Process transactions and manage your account
• Execute agent sessions and deliver generated artifacts
• Improve, personalize, and expand the platform
• Send updates, security alerts, and support communications
• Analyze usage patterns to improve performance
• Detect and prevent fraud, abuse, and technical issues
• Comply with legal obligations

We do not sell your personal information. We may share data with:

• Service Providers — cloud infrastructure (Google Cloud), payments (Stripe), email (Resend), analytics (PostHog), sandbox execution (Modal, Daytona, E2B)
• AI Model Providers — prompts are sent to Anthropic, OpenAI, and Google to generate responses; each has its own privacy policy
• Integration Partners — data shared as needed when you connect third-party services
• Legal Requirements — when required by law or governmental request
• Business Transfers — in connection with a merger, acquisition, or sale of assets

• Prompts and context are sent to third-party AI providers (Anthropic Claude) to power agent actions
• Agent sessions may execute code in sandboxed environments; generated files are stored on your behalf
• We do not use your prompts or outputs to train our own models without explicit consent
• Generated content may be inaccurate — you are responsible for reviewing outputs

• Encryption in transit (TLS) and at rest
• Fernet-encrypted secret vault for credentials
• JWT-based authentication with secure cookies
• Regular security assessments and monitoring
• Least-privilege access controls

Data is stored on US-based servers. No method of storage or transmission is 100% secure — we cannot guarantee absolute security.

• Account data retained until deletion
• Session data retained for continuity
• Usage logs may be retained in aggregated form
• Payment records retained per financial regulations

Upon account deletion we will delete or anonymize your information within 30 days, except where retention is required by law.

Depending on your jurisdiction you may:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your personal information and account
• Export your data in a portable format
• Object to or restrict certain processing
• Withdraw consent where processing is consent-based

Contact us at privacy@spawnlabs.ai — we respond within 30 days.

• Essential Cookies — authentication session and preferences; required for the Service to function
• Analytics — Vercel Analytics and PostHog help us understand usage and improve the product

You can control cookies through browser settings. Disabling essential cookies may prevent use of certain features.

The Service is not for children under 18. We do not knowingly collect information from children. If you believe a child has provided us data, contact privacy@spawnlabs.ai.

Your information may be transferred to the United States and other countries where we or our service providers operate. For EEA users we rely on standard contractual clauses and approved transfer mechanisms.

We may update this policy at any time. Material changes will be posted here and, for significant changes, emailed to your registered address. Continued use constitutes acceptance.