Privacy Policy

1. Introduction

Spine Software ("Spine", "we", "us", or "our") is committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at spine.software and its subdomains.

2. Information We Collect

We collect information you provide directly to us, including:

• Name and email address when you create an account
• Email address when you join the list on spine.software or on the closed registration page
• Organisation name and details when you set up a workspace
• Records you add in a workspace, such as contacts, leads, tickets, and accounting entries
• Ad account details when you connect Meta, Google, TikTok, LinkedIn, or ChatGPT Ads, including the account name, campaign names, and the performance figures that platform returns. The sign-in token or Ads Manager key stays on our servers
• Authentication data (passwords are hashed and never stored in plain text)
• Usage data and activity logs within the platform
• Payment information processed securely through third-party providers

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our platform
• Create and manage your account
• Email you product notes, and tell you when registration opens, until you ask us to stop
• Read a connected ad account so a lead can be tied to a campaign. Connecting an account does not publish an ad
• Process transactions and send related information
• Send administrative information such as updates and security alerts
• Respond to comments and questions and provide customer support
• Monitor and analyse usage patterns to improve our service

4. Sharing Your Information

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our platform (such as cloud hosting, analytics, and payment processing), provided those parties agree to keep this information confidential. When you connect an ad platform, we exchange data with that platform only for the account you connected.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. All data is encrypted in transit (TLS) and at rest.

6. Cookies

We use cookies and similar tracking technologies to maintain your session and remember your preferences. Session cookies are required for the platform to function. If the public site is locked with a password, we set a cookie so you do not have to enter it again for seven days. You may disable cookies in your browser settings, but this will prevent you from using most features of the platform.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Data portability — receive your data in a structured, machine-readable format

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We keep a newsletter address until you ask us to remove it. We keep an ad connection until you disconnect it. We keep workspace records while the organisation account is active, unless you delete them or ask us to. You may request deletion of your account and associated data at any time by contacting us at privacy@spine.software.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.

10. Contact Us

Spine Software, Montreal, Quebec, Canada. For questions about this policy, write to privacy@spine.software or hello@spine.software.