Privacy Policy
Last updated: May 5, 2026
This Privacy Policy explains how Spol Inc. ("Spol," "we," "us," or "our") collects, uses, stores, and shares information when you use the Spol website, browser extensions, applications, APIs, and related services (collectively, "Spol" or "the Service").
By using Spol, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.
This policy is governed by the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy law.
1. Information We Collect
We collect only information that is necessary to operate and improve the Service.
1.1 Authentication Data
When you create an account, we collect:
- Email address
- Account identifiers and display names
- Authentication tokens and session credentials
- Login timestamps and related access data
We use this information solely to identify your account and provide access to the Service.
1.2 Chat Data
When you use Spol's chat or assistant features, we collect the content you submit, including:
- Prompts and questions
- Messages and conversation history
- Media references and context you provide
- Feedback you submit about responses
1.3 Usage Data
We collect anonymized or aggregated data about how the Service is used, such as:
- Feature interactions and navigation patterns
- Error logs and diagnostic information
- Performance and stability metrics
Usage data does not identify you personally and is used only to improve the Service.
1.4 Information We Do Not Collect
We do not collect:
- Payment or financial information (handled by third-party processors where applicable)
- Sensitive personal information such as health, biometric, or government ID data
2. How We Use Your Information
We use the information we collect to:
- Operate the Service: Authenticate your account, process requests, and deliver features
- Improve the Service: Analyze usage patterns, fix bugs, and develop new functionality
- Train AI systems: Use Chat Data to train, evaluate, tune, test, and improve the machine learning models that power Spol (see Section 3)
- Communicate with you: Send important notices, updates, or responses to your inquiries
- Comply with legal obligations: Meet applicable legal, regulatory, and law enforcement requirements
We do not use your information for advertising. We do not sell your personal information to third parties.
3. Chat Data & AI Model Training
When you submit Chat Data, you grant Spol a license to use that data to train and improve our AI systems. This is described in detail in our Terms of Service.
In practice, this means:
- Chat Data may be reviewed, processed, and incorporated into model training datasets
- Derived outputs (e.g., model weights, evaluation results) may persist even after your account is deleted
- Deleting your account will stop future collection of Chat Data but cannot reverse data already used in training pipelines
We handle Chat Data with care and do not use it for any purpose unrelated to operating and improving Spol.
4. Information Sharing & Disclosure
We do not sell, rent, or trade your personal information. We may share information only in the following circumstances:
4.1 Service Providers
We work with trusted third-party vendors who help us operate the Service, such as cloud hosting providers, authentication services, and analytics tools. These vendors are bound by confidentiality obligations and may only use your information to perform services on our behalf.
4.2 Legal Requirements
We may disclose your information if we believe in good faith that doing so is required to:
- Comply with applicable law, regulation, or legal process
- Protect the rights, property, or safety of Spol, our users, or the public
- Detect or prevent fraud, abuse, or security incidents
4.3 Business Transfers
If Spol Inc. is involved in a merger, acquisition, financing, or sale of all or part of its assets, your information may be transferred as part of that transaction. We will notify you of any such change through the Service or by email where required by law.
4.4 With Your Consent
We may share information for other purposes if you provide explicit consent.
5. Data Retention
| Data Type | Retention Period |
|---|---|
| Authentication data | For the life of your account, plus as required by law |
| Chat Data (active systems) | Until account deletion, subject to the AI training exception in Section 3 |
| Usage data (aggregated) | Indefinitely, as it does not identify you |
| Legal/compliance records | As required by applicable law |
When you delete your account, we will make reasonable efforts to remove your personal information from active systems within a reasonable timeframe. Some data may be retained in backups or archives for a limited period before being purged.
6. Security
We implement commercially reasonable technical and organizational measures to protect your information from unauthorized access, loss, alteration, or disclosure. These include:
- Encryption of data in transit (TLS) and at rest where applicable
- Access controls limiting who can access personal data
- Regular security reviews and monitoring
No system is completely secure. You are responsible for keeping your account credentials confidential. If you believe your account has been compromised, please contact us immediately at contact@spol.io.
7. Your Rights
Under PIPEDA and applicable Canadian privacy law, you have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Request that we correct inaccurate or incomplete personal information
- Withdrawal of consent: Withdraw consent to certain uses of your information (note: this may affect your ability to use the Service)
- Deletion: Request deletion of your personal information, subject to legal obligations and the AI training exception described in Section 3
- Complaint: Lodge a complaint with the Office of the Privacy Commissioner of Canada (OPC) if you believe we have not handled your personal information in accordance with applicable law
To exercise any of these rights, please contact us at contact@spol.io. We will respond within the timeframe required by applicable law (typically within 30 days).
8. Third-Party Services
Spol may interact with or link to third-party platforms, APIs, and services. This Privacy Policy applies only to information collected and processed by Spol. Third-party services have their own privacy practices and policies, which we do not control and are not responsible for.
We encourage you to review the privacy policies of any third-party services you interact with through Spol.
9. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, provide additional notice through the Service or by email.
Your continued use of Spol after updated terms become effective constitutes your acceptance of the revised Privacy Policy.
10. Contact
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at contact@spol.io.
For privacy complaints, you may also contact the Office of the Privacy Commissioner of Canada