Privacy Policy

1. Scope of This Policy

This policy applies to information collected through:

• Our websites (including sprag.ai and related subdomains)
• Our speech and audio inference APIs and related developer services
• Our web applications, including the playground and developer console
• Direct communications with us

By using these services, you agree to the terms of this Privacy Policy.

2. Who We Are

3. Information We Collect

Information you provide directly

• Name
• Email address
• Any optional information you choose to provide (e.g., company or role)

Billing information

When you purchase paid services, payment is handled by our payment processor, Stripe. Stripe collects your payment card details and billing contact information under its own privacy policy; we receive and store limited billing information, such as your billing name, transaction amounts, and payment status, but never full card numbers.

Content you submit to our Services

• Audio, text, prompts, and other content you submit to our speech and audio APIs
• Transcripts, captions, synthesized speech, and other content generated from your submissions

Our use of this content is described in Section 5 and governed by our Terms of Service.

Automatically collected information

• Device and browser information, such as device type (mobile, desktop, or tablet), operating system, and browser version, collected automatically from your browser or device.
• Approximate location (country or region only), inferred from your IP address for security, fraud prevention, and aggregate analytics. We do not collect or store precise location or GPS data.
• Product and website analytics via Google Analytics and PostHog (pages visited, time spent, browser type, approximate location). If you are signed in, analytics events may be associated with your account.
• Advertising measurement data via Google Ads conversion tracking, used to measure whether our advertising leads to sign-ups or purchases.
• Server and application logs that capture IP addresses, request metadata, and performance data for operational and security purposes.
• Bot challenge responses through Cloudflare Turnstile, which may collect browser and device signals to distinguish humans from automated traffic. Turnstile is subject to Cloudflare's Turnstile Privacy Addendum.

Purpose of Device and Location Data

We infer device type and approximate country solely to:

• Maintain website security and prevent spam or fraudulent registrations.
• Understand general patterns of site and API usage (e.g., which regions developers come from).
• Optimize our website for different device types.

We do not use this information to build advertising profiles of individuals. IP addresses are truncated or anonymized where possible, and this information is retained for a limited period (typically up to 90 days) for operational and analytical purposes.

4. How We Collect Information

We collect information:

• When you create an account or complete forms on our websites
• When you use our APIs and applications
• When you contact us
• Automatically through cookies, logs, and analytics tools

5. How We Use Your Information

Essential communications

• Send account, billing, and security notices
• Respond to support requests and other inquiries

Operational purposes

• Maintain performance, availability, and security of our APIs and infrastructure
• Understand aggregate usage patterns (e.g., number of API requests, device type, and general region)
• Process payments, manage subscriptions, and maintain billing records
• Improve site experience and developer workflows, including device optimization and localization insights
• Maintain, develop, and improve the Services, including testing, evaluation, and the training of our machine learning models, as described in our Terms of Service

With your consent (optional checkbox)

• Send product updates, newsletters, beta invites, and early-access announcements
• Share security or compliance notifications relevant to your interests

You may withdraw consent or unsubscribe anytime via the email link or by contacting us.

6. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide services, maintain security, comply with legal obligations, resolve disputes, and enforce agreements.

The length of time we retain information may vary depending on the type of data and its use, but we regularly review our records and delete or anonymize data that is no longer needed for these purposes.

If you request deletion of your personal data, we will remove it unless retention is required by law or for legitimate business interests (such as security, auditing, or fraud prevention).

7. Data Storage and Protection

Data is stored securely in our cloud infrastructure. We implement administrative, technical, and physical safeguards to prevent unauthorized access or misuse. All transfers occur over encrypted channels (HTTPS/TLS). Payment card details are collected and processed by Stripe and are not stored on our systems.

8. Cookies and Tracking Technologies

8.1 What Cookies Are

Cookies are small text files that help websites function and improve user experience.

8.2 How We Use Cookies

8.3 Managing Cookies

You can manage or clear cookies through your browser settings. Clearing your browser's site data also resets any cookie choices you have made on our sites.

8.4 Third-Party Cookies

Google Analytics and PostHog are third-party analytics services that set their own cookies, and we use Google Ads conversion tracking, which also sets cookies, to measure the performance of our advertising. We do not use cookies to build advertising profiles of you or to serve targeted advertising on our sites. Data collected through these tools is used internally to improve and market our services.

9. Third-Party Features and Links

Our websites and communications may include links to third-party platforms (e.g., GitHub, LinkedIn). These services are governed by their own privacy policies, and we are not responsible for their practices. We also rely on third-party service providers, including Stripe for payments, Google for analytics and advertising measurement, and PostHog for product analytics, which process data as described in this policy and their own.

10. Automated Decision-Making and Profiling

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals. Automated analytics we run are used for performance, reliability, aggregate usage insights, and advertising measurement, as described in Section 8.

11. International Transfers

Our systems are hosted in the United States but may be accessed globally. When we transfer personal data from the EU or UK to the U.S., we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms.

12. Your Rights

Depending on your location, you may have the right to:

• Access, correct, or delete your personal information
• Withdraw consent for communications or cookie use
• Request a copy of the data we hold about you
• Object to or restrict certain types of processing

Contact [email protected] to exercise these rights.

13. California Residents' Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to:

• Know the categories and specific pieces of personal information we collect
• Request deletion of your personal information
• Opt out of the "sale" or "sharing" of personal information. We do not sell personal information; to opt out of advertising-measurement cookies that may constitute "sharing," decline cookies via our cookie banner where shown or contact [email protected]
• Be free from discrimination for exercising these rights

You may also request a copy of this information by contacting [email protected]. Under California's "Shine the Light" law, residents may request disclosure of direct-marketing data sharing (we do not engage in such sharing).

14. Children's Privacy

Our products and services are intended for developers aged 16 and older. We do not knowingly collect personal information from individuals under 16. If you are under 16, please do not create an account or use our services.

If we learn that we have collected personal information from someone under 16 without verified parental consent, we will delete that information promptly and discontinue related communications.

Parents or guardians who believe their child may have provided personal information to Sprag AI can contact us at [email protected], and we will delete the data immediately.

15. Updates to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Updates will be posted here with a revised "Last updated" date.

16. Contact Us