Legal

Privacy Policy

Your privacy is important to us. Please read our policy carefully.

Effective Date: January 8, 2026


1. Introduction

CartHopper Inc. ("Company," "we," "us," or "our") operates Sprello, a visual workflow automation platform that enables users to orchestrate AI models for creative production. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website (https://sprello.ai), our application, and any related services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.


2. Information We Collect

2.1 Information You Provide to Us

We collect information you provide directly to us, including:

  • Account Information: When you create an account, we collect your name, email address, password, and any profile information you choose to provide.

  • Payment Information: When you subscribe to our paid services, we collect billing information such as your payment card details (processed securely through our payment processor, Stripe), billing address, and transaction history.

  • Workspace Information: If you create or join a workspace, we collect workspace names, member information, roles, and organizational settings.

  • User Content: We collect content you upload, create, or generate through the Service, including images, videos, text, workflows, prompts, and any other materials you submit.

  • Communications: When you contact us for support or other inquiries, we collect the content of those communications.

2.2 Information We Collect Automatically

When you access or use the Service, we automatically collect certain information, including:

  • Usage Data: Information about how you use the Service, including workflow executions, AI model usage, credit consumption, feature interactions, and session information.

  • Device Information: Information about the device you use to access the Service, including hardware model, operating system, unique device identifiers, and browser type.

  • Log Data: Server logs that record information such as your IP address, access times, pages viewed, and referring URLs.

  • Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect information about your interactions with the Service.

2.3 Information from Third Parties

We may receive information about you from third parties, including authentication providers (such as Google) if you choose to sign in using a third-party service, payment processors, and analytics providers.


3. How We Use Your Information

We use the information we collect for various purposes, including:

  • Providing, maintaining, and improving the Service
  • Processing transactions and managing your subscription and credit balance
  • Enabling AI model operations and workflow executions on your behalf
  • Personalizing your experience and providing content recommendations
  • Communicating with you about updates, security alerts, and support
  • Analyzing usage patterns to improve our Service and develop new features
  • Detecting, preventing, and addressing fraud, abuse, and security issues
  • Complying with legal obligations and enforcing our terms

4. AI Processing and Third-Party Model Providers

Sprello integrates with various third-party AI model providers (including but not limited to Google, fal.ai, Runway, and others) to deliver image generation, video generation, and other AI-powered features. When you use these features:

  • Your prompts and input content are transmitted to the relevant AI model provider to generate outputs
  • Each AI provider has its own privacy policy and data handling practices
  • We do not control how third-party AI providers use, store, or process data submitted to their services
  • We recommend reviewing the privacy policies of any AI providers whose models you use through our Service

We make commercially reasonable efforts to select AI providers with appropriate data protection practices, but we cannot guarantee how they process or retain your data.


5. How We Share Your Information

We may share your information in the following circumstances:

  • With Workspace Members: Content and information within a workspace may be visible to other members of that workspace based on role permissions.

  • With Service Providers: We share information with third-party vendors who perform services on our behalf, such as payment processing, hosting, analytics, and customer support.

  • With AI Model Providers: As described above, we transmit your inputs to third-party AI providers to generate outputs.

  • For Legal Reasons: We may disclose information if required by law, legal process, or government request, or if we believe disclosure is necessary to protect our rights, safety, or property, or that of others.

  • Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of that transaction.


6. Data Retention

We retain your information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within 90 days, except where we are required to retain it for legal or regulatory purposes.

User-generated content, including AI-generated outputs, may be retained in our systems for a period after deletion requests to ensure service continuity and allow for content recovery requests. Backup copies may persist for a limited time according to our backup retention schedule.


7. Data Security

We implement appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.


8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

  • Access: You can request a copy of the personal information we hold about you.
  • Correction: You can request that we correct inaccurate or incomplete personal information.
  • Deletion: You can request that we delete your personal information, subject to certain exceptions.
  • Data Portability: You can request a copy of your data in a structured, commonly used format.
  • Opt-Out: You can opt out of marketing communications at any time by clicking the unsubscribe link in our emails.
  • Cookie Preferences: You can manage your cookie preferences through your browser settings.

To exercise any of these rights, please contact us at contact@sprello.ai.


9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, the right to opt out of the sale of your personal information (we do not sell personal information), and the right to non-discrimination for exercising your privacy rights.


10. International Users

CartHopper Inc. is based in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that are different from the laws of your country.

By using the Service, you consent to the transfer of your information to the United States and other countries. We take appropriate measures to ensure that your personal information receives adequate protection in accordance with this Privacy Policy.


11. Children's Privacy

The Service is not intended for children under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child without parental consent, we will take steps to delete that information. If you believe we have collected information from a child, please contact us.


12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We may also provide notice through the Service or by email for significant changes. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.


13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

CartHopper Inc.
New York, NY
Email: contact@sprello.ai
Website: https://sprello.ai