Privacy Policy

1. Introduction

Spico (“Spico”, “we”, “us”) provides an AI marketing assistant that helps you research, plan, and produce marketing for your website. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Spico, you agree to the practices described here.

2. Information we collect

• Account information — your email address and the website domain you choose to analyze, created when you sign up.
• Connected account data — if you connect Google Search Console or Google Analytics, we access your search and traffic metrics on a read-only basis to power your reports. We never make changes to your connected accounts.
• Content you provide — the messages, prompts, brand details, and documents you create while using the agents.
• Usage data — basic logs about how you interact with the service, used for reliability and abuse prevention.
• Payment information — if you upgrade to a paid plan, billing is handled by our payment processor; we do not store your full card details.

3. How we use your information

• To provide, operate, and improve the Spico service and its agents.
• To generate the reports, drafts, and recommendations you request.
• To manage your account, credits, and subscription.
• To communicate with you about your account, support, and service updates.
• To detect, prevent, and address fraud, abuse, or security issues.

4. Service providers and sub-processors

We rely on trusted third parties to run Spico, and we share only the data needed for each to perform its function:

• Supabase — authentication and database hosting for your account and content.
• OpenAI— large language model processing for the agents' responses and documents.
• Google APIs — read-only access to your Search Console and Analytics data, only after you explicitly connect them.
• Research and data providers — web, Reddit, and competitor-metrics providers used to fetch the live data behind your reports.

We do not sell your personal information, and we do not use your private content to train our own models.

5. Google user data

Spico's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access this data solely to display and analyze it for you within Spico, and never to serve advertising or to sell it.

6. Data retention

We retain your account information and content for as long as your account is active. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we must retain it to comply with legal obligations.

7. Data security

We use industry-standard measures to protect your data in transit and at rest. No system is perfectly secure, but we work to safeguard your information and to limit access to it within our team and providers.

8. Your rights

You may request access to, correction of, or deletion of your personal data, and you can disconnect any connected Google account at any time from your settings. To make a request, contact us at the address below.

9. Cookies

We use essential cookies to keep you signed in and to operate the service. We do not use third-party advertising cookies.

10. Children's privacy

Spico is not directed to children under 16, and we do not knowingly collect personal information from them.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you.

12. Contact us

If you have any questions about this Privacy Policy or your data, contact us at rayanebenchaalal@gmail.com.