Privacy Policy

This document describes what data SpotN collects, why, and how it’s handled. It covers two distinct categories of data: your data (as the user of the software) and third-party business data that the engine finds for you. This policy works alongside our Terms of Service, which governs your use of SpotN more broadly.

1. Who We Are

SpotN is software published by Axel Goncalves (“we”), based in Western Australia. For any question about this policy: contact@getspotn.com.

2. Data We Collect About You (the Account Holder)

When you create an account via “Sign in with Google,” we receive:

• Your name, email address, and Google profile picture
• A unique Google identifier (to find your account on each login)
• Google access tokens (access token / refresh token), which let us act on your behalf only for the features you explicitly activate: creating a Google Sheet in your Drive, sending an email from your Gmail. We never read your existing emails or the rest of your Drive.
• If you connect HubSpot or Pipedrive: similar tokens, used only to create/update records in your own CRM.
• If you subscribe to a paid plan: billing information handled by our payment processor, Stripe. We store a Stripe customer ID and subscription status/renewal date to know what plan you’re on, but we never see or store your full card number — Stripe handles that directly, under its own security and compliance standards (PCI DSS).

We also collect the data you generate by using the software: your searches (industry, location, number of leads requested), your leads’ status in the pipeline, your notes, and a record of emails you send from the app (subject + content, for CRM history purposes).

Email tracking and replies: to show you which prospects engaged, links in emails sent through sequences or the Copywriter Agent are replaced with SpotN redirect links that record whether a link was clicked (no tracking pixel, no open tracking). These emails also carry a SpotN reply address: when a prospect replies, the reply is received by our server, saved as a note on that lead, and forwarded to your own email address so you can answer directly from your inbox.

3. Data the Engine Finds on Third-Party Businesses

This is the core of the product: SpotN visits public sources (Google Maps listings, company websites, public Facebook pages) to gather business information: company name, address, phone number, website, Google rating, and contacts (name, role, professional email) when publicly displayed.

Important points:

• This data concerns businesses and their professional representatives, not private individuals in a personal capacity.
• It comes only from publicly accessible pages, without bypassing authentication or restricted access.
• It’s collected for a specific purpose: letting you contact these businesses as part of a legitimate B2B commercial approach.
• Collecting personal data, even public data (a named email like firstname@company.com, for example), is regulated differently depending on the country. SpotN’s approach is built around B2B use in Australia and the United States, our primary markets.
• Cache shared between users: to avoid unnecessarily re-visiting the website of a business already found recently, discovered contacts (not the Google rating, always checked live) may be reused for 30 days if another SpotN user searches for the same business. This isn’t a permanent database: past that window, the business is visited live again.

4. How We Use This Data

• Running the software (showing your results, your pipeline, your past searches)
• Executing the actions you trigger yourself (Sheet export, sending an email, HubSpot sync)
• Diagnosing bugs and maintaining the service (see Security section)

We don’t sell or rent any data, yours or that of the businesses found, to anyone.

5. Who This Data Is Shared With

Integrations you activate yourself: SpotN doesn’t share anything with these services in the background. The transfer only happens at your explicit initiative (you connect your account, you click a send button, you set up an automation), to a service you already use independently of SpotN:

• Google: authentication and the Sheets/Gmail features you activate
• HubSpot: if you connect your account, the companies/contacts you choose to send there
• Pipedrive: if you connect your account, the companies/contacts you choose to send there
• Zapier: if you generate an API key and set up an automation, the data you choose to route through it

Infrastructure needed to run the service, with no action on your part:

• Stripe: if you subscribe to a paid plan, your billing details and payment information, handled entirely by Stripe under its own privacy and security terms
• Sentry (if enabled): in case of a technical error, a report containing the error’s context is sent to this diagnostic service so the bug can be fixed quickly. These reports aren’t designed to include the content of your searches
• Our host (Hostinger): where the data is stored

None of this data is shared for advertising purposes or resold to third parties.

6. AI Processing & Third-Party AI Services

SpotN uses Anthropic’s Claude API (direct developer API access, not a consumer plan) to generate the email copy for the Copywriter Agent feature. The only inputs sent to Claude are: the publicly-sourced business/lead data described in Section 3 (company name, website, Google rating, contact name/role), and the campaign brief you fill in yourself (product, audience, tone, etc.).

Your Google Workspace data is never sent to Claude or any other AI service. The Google access tokens described in Section 2 are used exclusively to write: creating a Sheet in your Drive, sending an email from your Gmail. SpotN never reads the content of your Gmail, Drive, or existing Sheets, so there is nothing from those sources for an AI model to process. Anthropic’s API does not train its models on API customer data.

We don’t use any self-hosted or offline AI model, and we don’t route requests through a third-party AI aggregator or gateway — only Anthropic’s API, directly.

Limited Use Compliance Statement: SpotN’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. How Long We Keep This Data

Your searches and associated leads remain available for as long as your account exists, so you can find them in your LeadVault. If you request account deletion, your data (yours and the leads associated with your account) is permanently deleted within 30 days.

8. Your Rights

Revoking Google access: you can remove SpotN’s access to your Google account at any time from your Google Account permissions. Once revoked, SpotN can no longer send email or create files on your behalf, and the stored Google tokens stop working; they are permanently deleted with your account.

You can at any time request:

• Access to the data we hold about you
• Correction of inaccurate information
• Deletion of your account and associated data

For now, these requests are made by email to contact@getspotn.com (no self-service “delete my account” button in the interface yet). We aim to respond to any request within 30 days.

If a business or person found by the engine wants their information removed from our results, the same email address can be used to make that request.

If you’re a California resident (or resident of another US state with its own privacy law), you may have additional specific rights under laws like the CCPA/CPRA, including the right to know what categories of data we collect and to opt out of the “sale” or “sharing” of your data — SpotN doesn’t sell or share data for advertising purposes (see Section 4). Contact us at the email above with any request.

9. Security

Passwords are never stored (login exclusively via Google OAuth). Access tokens are stored encrypted in the database. Communication with the site happens over HTTPS.

If a data breach occurs that’s likely to result in a real risk to you, we’ll notify affected users and any relevant authority as required by applicable law, without undue delay once we’re aware of it.

10. Cookies

Only one session cookie is used, strictly necessary to keep you logged in. No advertising or third-party tracking cookies.

11. Children’s Privacy

SpotN is a B2B tool intended for business use by adults. It’s not directed at children, and we don’t knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us at the email above and we’ll delete it.

12. Changes to This Policy

This policy may evolve as the product evolves. The “last updated” date at the top of this document will be refreshed with each significant change.

13. Contact

For any question: contact@getspotn.com