Privacy Policy
Your privacy is important to us. Please read our policy carefully.
Last Updated: April 6, 2026
At Sprello, we take your privacy seriously. This Privacy Policy explains how Sprello, Inc. ("Sprello," "we," "us," or "our") collects, uses, discloses, and protects your personal information when you access or use our website (sprello.ai), platform, APIs, and related services (collectively, the "Services").
By using or accessing our Services, you acknowledge that you accept the practices and policies outlined in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Services.
Your use of the Services is also subject to our Terms of Service. Any terms not defined in this Privacy Policy have the meanings given in our Terms of Service.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice on our website or by sending you an email. Your continued use of the Services after any changes constitutes your acceptance of the updated Privacy Policy.
1. What This Privacy Policy Covers
This Privacy Policy covers how we treat Personal Data that we collect when you access or use our Services. "Personal Data" means any information that identifies or relates to a particular individual, including information referred to as "personally identifiable information" or "personal information" under applicable data privacy laws.
This Privacy Policy does not cover the practices of companies we do not own or control, or people we do not manage, including third-party AI model providers whose services are accessed through our platform.
2. Personal Data We Collect
Information You Provide to Us
Account Information. When you create a Sprello account, we collect information such as your name, email address, and password. If you sign up using a third-party authentication provider (such as Google), we receive your name and email address from that provider.
Workspace Information. When you create or join a workspace, we collect the workspace name and your role within that workspace.
Payment Information. We use Stripe to process payments. Stripe collects your payment card information, billing address, and other billing details directly. Sprello does not receive or store your full payment card information. We may receive and store information associated with your payment, such as the last four digits of your card, your country of origin, and transaction history.
Communication Information. When you contact us for support, provide feedback, or otherwise communicate with us, we collect the information you provide, such as your email address and the content of your message.
Customer Content. We collect the content you upload to or create through the Services, including images, videos, text prompts, workflow configurations, and generated outputs ("Customer Content"). Customer Content may include personal information if you choose to include it in your uploads or prompts.
Information Collected Automatically
Device and Usage Data. When you use the Services, we automatically collect information about your device and how you interact with the Services, including your IP address, browser type, operating system, referring URLs, pages visited, and timestamps.
Cookies and Similar Technologies. We use cookies and similar technologies to recognize your browser, remember your preferences, and understand how you use our Services. See Section 7 (Cookies and Tracking Technologies) for more information.
Log Data. Our servers automatically record information when you access the Services, including your IP address, the date and time of your request, and the features you use.
3. How We Use Your Personal Data
We use your Personal Data for the following purposes:
Providing and Improving the Services
- Creating and managing your account and workspaces.
- Processing your transactions and managing your subscription and credit balance.
- Providing, operating, maintaining, and improving the Services.
- Providing customer support and responding to your requests.
- Monitoring and analyzing usage patterns to improve the Services.
AI Content Generation
- Processing your Customer Content (prompts, reference images, and other inputs) through third-party AI model providers to generate outputs as part of the Services. See Section 5 (AI Data Processing) for details on how your data is handled by AI providers.
Communication
- Sending you service-related notices, updates, and security alerts.
- Responding to your comments, questions, and support requests.
- Sending you marketing communications, where permitted by law. You can opt out of marketing emails at any time by clicking the unsubscribe link in any marketing email.
Security and Compliance
- Detecting, preventing, and addressing fraud, abuse, security incidents, and technical issues.
- Enforcing our Terms of Service and other agreements.
- Complying with applicable laws, regulations, and legal processes.
Analytics and Aggregated Data
- Creating aggregated, de-identified, or anonymized data from Personal Data we collect. We may use and disclose such data for any lawful business purpose, including to analyze and improve the Services, provided that such data cannot be used to identify you.
4. How We Disclose Your Personal Data
We disclose your Personal Data to the following categories of third parties:
Service Providers. We share information with third-party service providers who perform services on our behalf, including hosting providers, payment processors, analytics providers, customer support tools, and email delivery services. These providers are contractually required to use your information only to provide services to us.
AI Model Providers. When you use the Services to generate content, your inputs (prompts, reference images, and other Customer Content) are transmitted to third-party AI model providers for processing. See Section 5 (AI Data Processing) for details.
Workspace Collaborators. If you are part of a workspace with other users, certain information (such as your name, email address, role, and the content you create) may be visible to other workspace members based on workspace permissions.
Legal and Compliance. We may disclose your information to law enforcement, government authorities, or other third parties if we believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our Terms of Service; to protect the rights, property, or safety of Sprello, our users, or the public; or to detect, prevent, or address fraud, security, or technical issues.
Business Transfers. If Sprello is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your Personal Data may be transferred as part of that transaction. We will notify you of any such change and any choices you may have regarding your information.
With Your Consent. We may disclose your information with your consent or at your direction.
We do not sell your Personal Data.
5. AI Data Processing
Sprello is an AI workflow orchestration platform. When you use the Services to generate images, videos, or other content, your inputs are transmitted to third-party AI model providers for processing. This section explains how your data is handled in that process.
What data is sent to AI providers. Only the specific inputs required for each generation task are sent to AI providers. This includes prompts, reference images, and model-specific parameters that you configure in your workflow. No user metadata, workspace information, billing data, or unrelated assets are transmitted.
No training on your data. AI model providers used by Sprello are contractually restricted from using your inputs or outputs to train, fine-tune, or improve their models. This applies to all providers designated for enterprise use.
Data retention by providers. AI model providers may temporarily retain your inputs and outputs for a limited period for the purpose of providing the service and abuse monitoring. Retention periods vary by provider and are documented in our AI Data Handling documentation, available to customers upon request.
Output storage. Generated outputs are stored in your workspace on Sprello's infrastructure. Outputs are access-controlled and are not shared with other customers or workspaces.
Fine-tuning. Where fine-tuning is performed on behalf of a customer, only that customer's data is submitted to the provider's fine-tuning API, and the resulting model is hosted by the provider. Customer data used for fine-tuning is subject to the same no-training restrictions described above.
6. Data Security
We implement and maintain reasonable administrative, technical, and organizational measures designed to protect your Personal Data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls based on the principle of least privilege, multi-factor authentication for access to production systems, and regular security assessments.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security.
You are responsible for maintaining the security of your account credentials and for any activity that occurs under your account.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve the Services. These include:
Essential Cookies. Required for the Services to function, such as authentication and session management. These cannot be disabled.
Analytics Cookies. Used to understand how visitors interact with the Services, including page views, feature usage, and traffic sources. We use analytics services that may set their own cookies.
Preference Cookies. Used to remember your settings and preferences.
You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Services.
The Services do not currently respond to "Do Not Track" signals.
8. Data Retention
We retain your Personal Data for as long as your account is active or as needed to provide you the Services. When you delete your account, we will delete or de-identify your Personal Data within 90 days, unless we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.
Customer Content (including generated outputs) is retained in your workspace until you delete it or until your account is terminated. Following account termination, Customer Content is deleted within 90 days.
We may retain aggregated or de-identified data that cannot identify you for any lawful business purpose.
9. Your Rights and Choices
Depending on where you are located, you may have certain rights regarding your Personal Data:
Access. You may request access to the Personal Data we hold about you.
Correction. You may request that we correct inaccurate or incomplete Personal Data.
Deletion. You may request that we delete your Personal Data, subject to certain legal exceptions.
Data Portability. You may request a copy of your Personal Data in a structured, machine-readable format.
Objection and Restriction. You may object to or request restriction of certain processing of your Personal Data.
Withdraw Consent. Where we rely on your consent to process your Personal Data, you may withdraw that consent at any time.
To exercise any of these rights, please contact us at contact@sprello.ai. We will respond to your request within the timeframe required by applicable law.
10. International Data Transfers
Sprello is based in the United States. If you access the Services from outside the United States, your Personal Data may be transferred to, stored, and processed in the United States or other countries where our service providers operate.
Where required by applicable law, we rely on appropriate legal mechanisms to transfer Personal Data internationally, including Standard Contractual Clauses approved by the European Commission and data processing agreements with our service providers.
11. European Economic Area, United Kingdom, and Swiss Users
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply to you.
Legal Basis for Processing. We process your Personal Data only where we have a valid legal basis, including:
- Performance of a contract: To provide the Services to you and fulfill our obligations under the Terms of Service.
- Legitimate interests: To operate, improve, and secure the Services, to communicate with you, and to conduct analytics — where these interests are not overridden by your rights.
- Consent: Where you have given us specific consent to process your data for a particular purpose.
- Legal obligation: To comply with applicable laws and regulations.
Data Controller. Sprello, Inc. is the data controller for your Personal Data processed in connection with the Services.
Data Protection Officer. You may contact us with privacy inquiries at contact@sprello.ai.
Right to Lodge a Complaint. If you believe we have violated your data protection rights, you have the right to lodge a complaint with your local data protection supervisory authority.
12. California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the CPRA, provides you with additional rights regarding your Personal Data.
Right to Know. You have the right to request that we disclose the categories and specific pieces of Personal Data we have collected about you, the categories of sources from which it was collected, the business purposes for collection, and the categories of third parties with whom it was shared.
Right to Delete. You have the right to request deletion of your Personal Data, subject to certain exceptions.
Right to Opt-Out of Sale. We do not sell your Personal Data.
Right to Non-Discrimination. We will not discriminate against you for exercising your privacy rights.
To exercise your California privacy rights, please contact us at contact@sprello.ai.
13. Children's Privacy
The Services are not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect Personal Data from children under 13. If we learn that we have collected Personal Data from a child under 13, we will delete that information promptly. If you believe that a child under 13 has provided us with Personal Data, please contact us at contact@sprello.ai.
14. Third-Party Links and Services
The Services may contain links to third-party websites or services that are not owned or controlled by Sprello. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access.
15. Contact Us
If you have any questions or concerns about this Privacy Policy or our privacy practices, please contact us at:
Sprello, Inc.
Email: contact@sprello.ai
Website: https://sprello.ai