Privacy Policy
Last updated: November 4, 2025
Overview
Spreadli ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how the Spreadli Chrome Extension and web services collect, use, and safeguard your information.
1. Information We Collect
Information You Provide
- Email Address (optional): When you register for a Pro, Team, or Agency account
- Content Input: Text, URLs, or YouTube links you submit for repurposing
- API Configuration: Custom API endpoint settings (if configured)
- Brand Voice: Optional brand voice profiles you create
Automatically Collected Information
- Device ID: A randomly generated unique identifier stored locally in your browser
- Usage Data: Number of repurpose requests, credit usage, feature usage
- Extension Version: For compatibility and support purposes
- Browser Information: Browser type and version for optimization
- Technical Data: IP address, timestamps, error logs
Chrome Extension Specific Data
- Local Storage: Extension preferences, workspace content, and cached results stored in your browser using Chrome's storage API
- Tab Information: When you use the extension on YouTube or web pages (only accessed when you click "Repurpose")
2. How We Use Your Information
We use collected information to:
- Provide Services: Generate AI-powered content repurposing from your inputs
- Account Management: Track Pro/Team/Agency subscription status, credit balance, and usage limits
- Improve Service: Analyze usage patterns to enhance features and user experience
- Customer Support: Respond to user inquiries, troubleshoot technical issues, and provide assistance
- Security: Prevent fraud, abuse, and unauthorized access
- Transactional Communications: Send receipts, subscription confirmations, and important service notices
- Legal Compliance: Meet legal obligations and enforce our terms of service
3. Data Storage & Location
Local Storage (Your Browser)
Extension preferences, workspace content, device ID, and cached results are stored locally in your browser using Chrome's storage API. This data never leaves your device unless you explicitly submit content for repurposing.
Server Storage (Cloud)
The following data is stored securely on our cloud servers:
- Email address and subscription status
- Credit balance and usage history
- Brand voice profiles (if created)
- Account settings and preferences
Content Processing
User-submitted content (text, URLs, YouTube links) is processed in real-time for AI generation and is not permanently stored on our servers after processing completes.
4. Third-Party Services
We use the following trusted third-party services to provide our functionality:
OpenAI
- Purpose: AI content generation and repurposing
- Data Shared: Content you submit for repurposing (text, URLs, video transcripts)
- Privacy Policy: openai.com/privacy
- Note: OpenAI may use data to improve their models according to their policy
Upstash Redis
- Purpose: User account data storage and credit tracking
- Data Shared: User ID, email, subscription status, credit balance, rate limiting data
- Privacy Policy: upstash.com/privacy
Paddle (Payment Processing)
- Purpose: Subscription billing for Pro, Team, and Agency plans
- Data Shared: Email, payment information, subscription details
- Privacy Policy: paddle.com/legal/privacy
- Note: We do not store credit card information - Paddle handles all payment data securely
Jina AI Reader
- Purpose: Extract readable content from blog posts and articles
- Data Shared: URLs you submit for repurposing
- Privacy Policy: jina.ai/privacy
Vercel (Hosting)
- Purpose: Host our API and website infrastructure
- Data Shared: Technical logs, API requests
- Privacy Policy: vercel.com/legal/privacy-policy
5. Data Security
We implement industry-standard security measures to protect your data:
- Encryption in Transit: All data transmitted between your browser and our servers uses HTTPS/TLS encryption
- Encryption at Rest: Sensitive data stored in our databases is encrypted
- API Security: API keys and secrets are securely stored as environment variables, never in code
- Access Control: Limited employee access to user data on a need-to-know basis
- Regular Audits: Periodic security reviews and vulnerability assessments
- Rate Limiting: Protection against abuse and unauthorized access
6. Chrome Extension Permissions
Our Chrome Extension requests the following permissions. Here's why we need each one:
storage
Save user preferences, workspace content, and cached results locally in your browser. This enables offline access and faster loading.
tabs
Open upgrade/pricing pages when you click upgrade buttons, and navigate to support documentation.
activeTab
Access the current tab's content when you choose to repurpose it (only when you explicitly click "Repurpose").
scripting
Future feature: Extract content directly from web pages for easier repurposing.
Host Permissions
- api.spreadli.com: Required for AI content generation API calls
- spreadli.com: Access to account management, pricing, and support pages
- r.jina.ai: Content extraction service for blog posts and articles
- piped.video: YouTube transcript fetching service
- youtube.com: Video metadata and content extraction
7. Your Rights & Choices
You have the following rights regarding your personal data:
Access
Request a copy of all personal data we hold about you.
Correction
Update or correct inaccurate information in your account settings or by contacting us.
Deletion
Request deletion of your account and all associated data. We will comply within 30 days.
Data Portability
Request an export of your data in a machine-readable format.
Opt-Out
Unsubscribe from promotional emails via unsubscribe links (you will still receive transactional emails).
Withdraw Consent
Withdraw consent for data processing at any time by deleting your account.
To exercise any of these rights, contact us at: privacy@spreadli.com
8. Data Retention
- Active Accounts: Data retained while your account is active and for legitimate business purposes
- Inactive Accounts: Accounts inactive for 12+ months may have data archived or deleted
- Deleted Accounts: All personal data permanently deleted within 30 days of account deletion request
- Local Storage: Cleared when you uninstall the Chrome Extension
- Legal Requirements: We may retain certain data longer if required by law
9. Cookies & Tracking
- No Third-Party Advertising Cookies: We do not use advertising or tracking cookies from third parties
- Chrome Storage API: Used only for extension functionality (preferences, workspace, device ID)
- Session Data: Temporary session data for API authentication
- Analytics: We may collect anonymous usage statistics to improve the service
10. Children's Privacy
Spreadli is not intended for users under 13 years of age (or the age of digital consent in your region). We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately at privacy@spreadli.com.
11. International Data Transfers
Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have data protection laws different from your country. By using Spreadli, you consent to the transfer of your information to these countries. We ensure appropriate safeguards are in place to protect your data.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Changes will be posted on this page with a new "Last Updated" date. Material changes will be communicated via email (if you have an account). Continued use of Spreadli after changes constitutes acceptance of the updated policy.
13. Legal Compliance
Spreadli complies with:
- GDPR (General Data Protection Regulation) for EU users
- CCPA (California Consumer Privacy Act) for California residents
- Chrome Web Store Developer Program Policies
- Other applicable data protection laws
14. Do Not Sell My Personal Information
We do not sell your personal information to third parties. We only share data with service providers as necessary to operate our service, as described in this policy.
15. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law, typically within 72 hours of discovering the breach.
16. Contact Information
For privacy questions, data requests, or concerns:
Email: privacy@spreadli.com
Support: support@spreadli.com
Website: spreadli.com
17. Your Consent
By using the Spreadli Chrome Extension and services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and sharing of your information as described herein.
Summary: We collect only the data necessary to provide our AI content repurposing service. We use trusted third-party providers (OpenAI, Upstash, Paddle, Jina AI) to deliver functionality. We don't sell your data. You have full control over your information and can request deletion at any time. We comply with GDPR, CCPA, and Chrome Web Store policies.