Privacy Policy

Sporely ("we", "us") operates sporely.io and is responsible for the personal data described here. Questions or requests: hello@sporely.io.

Your account. Your email address, your name if you give it, and your sign-in method (email and password, or Google sign-in). Passwords are handled by our authentication provider and stored only as secure hashes; we never see them.

What you put into Sporely. Your funnels and stages, the actions you log, check-ins and notes, targets, and the questions you ask Sporely's assistant, plus the verdicts and answers Sporely creates from them.

Settings. Your workspace name, timezone, week start and plan.

Usage and security records. For each AI request: when it happened, its type, the model, token counts and cost, so we can apply fair-use limits and control spending. We also keep standard server logs, and reports our site's security policy sends when a browser blocks content.

You can connect other tools to Sporely. Connections are optional, read-only, and you can disconnect at any time.

HubSpot. We read your account's name and ID, its pipeline and stage setup, and the field options you use for channels. To count how many records entered each stage each week, our servers read only a short list of fields from your records: the dates they entered stages and their channel values. We store only the resulting weekly totals per stage and channel. We never store contact or lead records, names, email addresses or other personal details from your CRM.

LinkedIn Ads. We read the ad accounts you have access to, your campaign and campaign-group names, and campaign performance (spend, impressions, clicks, lead-form lead counts and conversion counts). We store weekly totals per campaign. We don't receive or store information about the LinkedIn members who saw or interacted with your ads, and we never receive the contents of lead forms.

Access tokens for connected tools are encrypted at rest and used only by our servers. When you disconnect, we delete our copy of the token immediately, and you can choose to delete the figures we synced. You can also remove Sporely's access from the connected tool's own settings.

• To provide Sporely: your board, weekly figures, verdicts and answers.
• To keep accounts secure, prevent abuse, and apply plan and fair-use limits.
• To send service emails, such as confirming your email address or a welcome.
• To fix problems and improve the product.

We use your data to provide the service you asked for (performing our contract with you) and for our legitimate interests in running a secure, reliable product. We don't sell your personal data, we don't use it for advertising, and we don't use your content to train AI models.

Some features use Claude, an AI model by Anthropic. When you log an action, ask for a verdict or ask the assistant a question, our servers send the relevant text and figures from your workspace to Anthropic's API to produce the result. Anthropic processes this under its commercial API terms and does not use API inputs to train its models by default. Requests go only from our servers, never directly from your browser.

We use a small number of service providers, each only for its part of the service:

• Lovable, which builds and hosts the application on Cloudflare's network, and its managed database and sign-in service (Supabase), which store your account and workspace data.
• Anthropic, for the AI features described above.
• Cloudflare Turnstile, to tell people from bots on sign-up and sign-in forms.
• Google, if you choose to sign in with Google.
• HubSpot and LinkedIn, only if you connect them, as described above.

These providers may process data in countries other than yours. Where the law requires it, transfers rely on appropriate safeguards such as standard contractual clauses.

Sporely uses your browser's storage to keep you signed in and to remember small preferences, such as which funnel you last viewed. We don't use advertising or analytics cookies, and we don't track you across other websites. Cloudflare Turnstile may process technical signals from your browser to check that you're not a bot.

We keep your account and workspace data while your account is active. Figures synced from a connected tool are kept until you delete them or your account. AI usage records are kept for as long as we need them for billing, limits and security. When you ask us to delete your account, we delete your account and workspace data, except where the law requires us to keep something.

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict some processing, and to withdraw consent where we rely on it. To make a request, email hello@sporely.io from the address on your account; we'll reply within 30 days. You can also complain to your local data protection authority.

We protect data with encryption in transit, encrypted storage of connection tokens, per-workspace access controls enforced by the database, and least-privilege access for our own systems. No system is perfectly secure; if a breach affects your personal data, we'll notify you as the law requires.

Sporely is a business tool and isn't meant for anyone under 16.

If we change this policy, we'll update the date at the top. For significant changes, we'll tell you by email or in the app before they take effect.