Privacy Policy

1. Introduction

Spico (“Spico”, “we”, “us”) provides an AI marketing service that researches, plans, and produces marketing for your website — both when you ask it to, and on a recurring schedule of its own once you have connected a site. This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using Spico, you agree to the practices described here.

2. Information we collect

• Account information — your email address and the website domain you choose to analyze, created when you sign up.
• Connected account data — data from services you choose to connect. Google Search Console is read-only: we read your search metrics to power your reports and never write to it.
• Changes to connected sites — WordPress, Webflow and GitHub are read and write. Where you connect one, Spico can update the page title and meta description on your WordPress or Webflow site, and open a pull request on your GitHub repository. A WordPress change is live immediately; a Webflow change appears when you next publish; a GitHub pull request changes nothing unless you merge it. Spico does not post to social accounts and does not publish new pages or articles for you. You can disconnect any of these at any time from your settings.
• Content you provide — the messages, prompts, brand details, and documents you create while using Spico.
• Usage data — basic logs about how you interact with the service, used for reliability and abuse prevention.
• Payment information — if you upgrade to a paid plan, billing is handled by our payment processor; we do not store your full card details.

3. How we use your information

• To provide, operate, and improve the Spico service.
• To generate the reports, drafts, and recommendations you request, and the work Spico performs on its own schedule.
• To manage your account, credits, and subscription.
• To communicate with you about your account, support, and service updates.
• To detect, prevent, and address fraud, abuse, or security issues.

4. Service providers and sub-processors

We rely on trusted third parties to run Spico, and we share only the data needed for each to perform its function:

• Supabase — authentication and database hosting for your account and content.
• OpenAI— large language model processing behind Spico's replies, research, and documents.
• Google APIs — read-only access to your Search Console data, only after you explicitly connect it.
• Research and data providers — web, Reddit, and competitor-metrics providers used to fetch the live data behind your reports.

We do not sell your personal information, and we do not use your private content to train our own models.

5. Google user data

Spico's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We access this data solely to display and analyze it for you within Spico, and never to serve advertising or to sell it.

6. Data retention

We retain your account information and content for as long as your account is active. When you delete your account, we delete or de-identify your personal data within a reasonable period, except where we must retain it to comply with legal obligations.

7. Data security

We use industry-standard measures to protect your data in transit and at rest. No system is perfectly secure, but we work to safeguard your information and to limit access to it within our team and providers.

8. Your rights

You may request access to, correction of, or deletion of your personal data, and you can disconnect any connected Google account at any time from your settings. To make a request, contact us at the address below.

9. Cookies

We use essential cookies to keep you signed in and to operate the service. We do not use third-party advertising cookies.

10. Children's privacy

Spico is not directed to children under 16, and we do not knowingly collect personal information from them.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, notify you.

12. Contact us

If you have any questions about this Privacy Policy or your data, contact us at rayanebenchaalal@gmail.com.