Last updated·21 October 2026

Privacy Policy

Introduction

This Privacy Policy describes how Spreeflo Ltd, which provides Spreelytics, and its corporate affiliates (collectively, "Spreelytics," "we", “us” or "our") processes personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including as applicable, our website, social media pages, marketing activities, and other activities described in this Privacy Policy (collectively, the “Service”)).

Spreelytics may provide additional or supplemental privacy policies to individuals for specific products or services that we offer at the time we collect personal information. Spreelytics provides various services. We do not offer products or services for use by individuals for their personal, familial, or household purposes. Accordingly, we treat all personal information we collect as pertaining to individuals in their capacities as representatives of the relevant enterprise customer or in their professional capacities and not their individual capacities.

NOTICE TO EUROPEAN USERS: Please see the Notice to European Users section for additional information for individuals located in the European Economic Area or United Kingdom (which we refer to as “Europe” or “European” and should be understood accordingly) below.

Personal information we collect

We may collect personal information from or about you from a variety of sources. Below, we describe the various manners in which we may collect such personal information. We may combine your personal information that we obtain from various sources.

Information you provide to us or that we generate about you

Personal information you may provide to us through the Service or otherwise or that we may generate about you, includes:

Contact data , such as your first and last name, email address, billing and mailing addresses, professional title and company name, and phone number.
Demographic data , such as your city, state, country of residence, and postal code.
Account data , such as the username and password that you may set to establish an online account on the Service, information about where you found us, and any other information that you add to your account profile.
Communications data based on our exchanges with you, including when you contact us through the Service, communicate with us via chat features, social media, or otherwise.
Transactional data , such as information relating to or needed to complete your orders on or through the Service, including order numbers and transaction history.
Marketing data , such as your preferences for receiving our marketing communications and details about your engagement with them.
User-generated content data , such as reviews, comments, questions, messages and other content or information that you generate, transmit, or otherwise make available on the Service, as well as associated metadata. Metadata includes information on how, when, where and by whom a piece of content was collected and how that content has been formatted or edited. Metadata also includes information that users can add or can have added to their content, such as keywords, geographical or location information, and other similar data.
Financial data , such as your financial account numbers or payment card information, including corporate payment card information.
Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.

Third-party sources

We may obtain personal information about you from other sources, such as:

Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.
Private sources, such as data providers (including licensors) and social media platforms (such as Meta).
Customers
Service Providers that provide services on our behalf or help us operate the Service or our business.
Marketing partners, such as joint marketing partners.
Parties to corporate transactions, such as mergers, acquisitions, bankruptcy, dissolution, or sale of business or assets.

Automatic data collection

We, our service providers, and our business partners may automatically log information about you, your device, and your interaction over time with the Service, our communications and other online services. The information collected automatically may include:

Device data , such as your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
Online activity data , such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
Communication interaction data , such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.

Cookies

Some of our automatic data collection is facilitated by cookies and similar technologies. Our Cookie Policy lists each one and how long it lasts. We also store a record of your choice about these technologies.

How we use your personal information

We may use your personal information for the following purposes or as otherwise described at the time of collection:

Service delivery and operations

We may use your personal information to: provide and operate the Service and our business; establish and maintain your user account on the Service; enable security features of the Service, such as by sending you security codes via email or SMS; communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages; and provide support for the Service, and respond to your requests, questions and feedback.

Service personalization

We may use your personal information to: understand your needs and interests; remember the devices from which you have previously logged in; personalize your experience with the Service and our Service-related communications; and remember your selections and preferences as you navigate our digital properties.

Research and development

We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services. We may create aggregated, de-identified and/or anonymized data from personal information we collect and share it with third parties for lawful business purposes.

Marketing and advertising

Direct marketing: We may send you direct marketing communications and may personalize these messages based on your needs and interests. You may opt-out as described below.

Service improvement and analytics

We may use your personal information to analyze usage of the Service, improve the Service, and understand user activity. We use Spreelytics, our own analytics product, for this purpose.

Compliance and protection

We may use your personal information to comply with applicable laws, respond to lawful requests, protect rights and property, prevent fraud, and enforce the terms and conditions of the Service.

We share personal information only with companies that help us run Spreelytics, and only what each one needs:

Amazon Web Services hosts Spreelytics and sends our emails.
Stripe handles payments for paid plans.
Google, if you sign in with Google.
Crisp, if you use the support chat in the app.
Fireworks.ai, if you use Ask AI. It may not use your data to train its models.

The companies that handle the data you collect with Spreelytics are listed on our Sub-processors page. We never sell personal information.

How long we keep it

Your account. We keep it until you delete it. You can do that yourself in Account, under Danger zone: click Delete account. Any team where you're the only member is deleted too, with all its data. If a team still needs you, for example because you're its only admin, the app asks you to sort that out first. If you also use Spreeflo with the same login, the login and your teams stay for Spreeflo. We delete your Spreelytics data instead: all analytics in the teams where you're the only member, your Ask AI chats and your connected AI apps.
Analytics in your teams. The Free plan keeps 13 months of analytics and Growth keeps 5 years. Each month we delete analytics older than that. If you move to a plan that keeps less, we keep the older data for 60 days in case you move back, then delete it. Session recordings are kept for 30 days. Deleting an audience or a team deletes its analytics. Our Data Processing Agreement covers how we handle this data for you.
Billing records. We keep invoices and payment records for as long as UK tax law requires, even after you delete your account.
Support chats. We keep them so we can follow up. Ask us and we'll delete them.
Server logs. These include IP addresses. We delete them after 90 days at most.

How to contact us

Email: contact@spreelytics.com

Governing Law: This Privacy Policy is governed by the laws of the United Kingdom.

Notice to European Users

Controller: Spreeflo Ltd, registered in England and Wales under company number 16068434, is the controller for purposes of UK GDPR and EU GDPR. For the data our customers collect with Spreelytics, the customer is the controller and we are its processor, under our Data Processing Agreement.

Legal Basis for Processing: Contractual necessity, legitimate interests, compliance with law, or consent as applicable.

Data Transfers Outside Europe: Spreelytics stores data in the United States, with Amazon Web Services. Personal data may be transferred outside the UK/EEA with appropriate safeguards such as standard contractual clauses.

Your Rights: Access, correction, deletion, restriction, portability, objection, and withdrawal of consent in accordance with GDPR. You can delete your account yourself (see "How long we keep it"); for anything else, email contact@spreelytics.com. You can also complain to the Information Commissioner's Office (ICO) in the UK, or to the data protection authority where you live.