Privacy Policy

Spycraft, hereinafter referred to as "the Company," is committed to protecting the privacy and security of your personal information. This Privacy Policy outlines the types of personal information we collect, how we use it, and your rights regarding your personal data. You should get acquainted with this privacy policy because it assists you in making informed decisions regarding your relationship with us. This Privacy Policy applies to all visitors and users of Spycraft. This privacy policy applies to the services provided by Spycraft, operated by Endurance Theory B.V., available at https://www.spycraft.co/.

This privacy policy covers:
Information collected and its use (sections 1–3)
Legal bases and sharing (sections 4–5)
Your rights (section 6)
Security and connection controls (sections 7–8)
International transfers (section 9)
Contact and changes (sections 10–11)
Google API data (section 12)
Agent connections and AI processing (section 13)
Account controls and children (section 14)
Policy notices (section 15)
Retention and deletion (section 16)
Read the sections below for details.
Privacy contact: ankit@spycraft.co

1. Information We Collect

We may collect the following types of personal information:
1. Contact information, including name, email address, phone number, and postal address
2. Account and organisation identifiers, connection permissions and authentication information.
3. Transactional information related to purchases and interactions
4. Technical information such as IP address, device information, and browsing history
5. Research queries, filters, saved boards, drafts and other content you provide.
6. Information related to adverts that have been utilized by you
7. Marketing information and related data

2. How we collect that information

We collect information you supply when creating an account, contacting support, making purchases, saving content or using research and planning tools. Connected agent workspaces send the tool requests you authorise. We also retrieve public advertising and social content for research, and collect technical information when the service is used.

3. How We Use Your Information

1. To provide and maintain our services.
2. To communicate with you about your account and our services.
3. To personalize your experience and provide tailored content.
4. To process transactions and provide customer support.
5. To analyze usage trends and improve our services.
6. To comply with legal obligations and protect our rights.

4. Legal Basis for Processing

Where a legal basis is required, processing depends on its purpose and the applicable law:
1. Providing the service and carrying out our contract with you.
2. Consent, where required for an optional feature or communication.
3. Legitimate interests, where permitted, in operating, securing and improving the service.
4. Complying with legal obligations.
5. You may contact us to ask which basis applies to a particular use of your information.

5. Sharing of Your Information

We may share your personal information with third parties in the following circumstances:
1. With providers supporting hosting, storage, payments and AI processing, including Railway, Google Cloud, OpenAI and OpenRouter where used by a feature.
2. With business partners for marketing or promotional purposes, with your consent.
3. In response to legal requests or to comply with applicable laws.
4. In connection with a merger, acquisition, or sale of assets.

6. Your Rights

Depending on your location and the applicable law, your rights may include:
1. The right to access and request a copy of your personal data (GDPR Article 15).
2. The right to rectify any inaccuracies in your personal data (GDPR Article 16).
3. The right to request the erasure of your personal data (GDPR Article 17).
4. The right to restrict or object to the processing of your personal data (GDPR Articles 18 and 21).
5. The right to data portability, where applicable (GDPR Article 20).
6. The rights regarding international transfer of personal data as outlined in the PDPA of Singapore.
7. Data Security

Connection Security

Spycraft's MCP connection uses HTTPS and authenticated access. Authorisation links requests to your account and organisation. No method of transmission or storage is completely secure.

8. Security Measures

Protect your account and connected workspaces:
1. Keep passwords and authentication tokens private.
2. Authorise only agent workspaces and organisations you recognise.
3. Send only the information needed for your research or planning task.
4. Review proposed changes before authorising actions that modify saved content.
5. Disconnect workspaces you no longer use.
6. Contact ankit@spycraft.co if you suspect unauthorised access.

9. International Transfers

Our infrastructure and AI providers may process information in countries outside your own. Cross-border processing is subject to applicable data protection requirements. Contact ankit@spycraft.co for questions about providers, processing locations or applicable safeguards.

10. Contact Us

For privacy questions and requests to exercise your data rights, contact Endurance Theory B.V., the operator of Spycraft, at ankit@spycraft.co.

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be effective immediately upon posting on our website.

12. Google API Services User Data Policy Compliance

Spycraft adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements.

13. Agent Connections and AI Processing

Spycraft supports competitor research, trend discovery and content planning for Instagram and TikTok. When you connect an agent workspace through MCP, we process your account and organisation identifiers, authorisation tokens, tool requests, search filters and results. Results can include public posts, adverts, captions, media references, and content from your authorised boards and saved drafts. Tool arguments and results are exchanged with the agent provider you choose, such as ChatGPT or Codex. Creative analysis may also use external AI services, including OpenAI and models accessed through OpenRouter. These providers process the information sent to them under their applicable terms and privacy policies. Do not include sensitive personal information that is unnecessary for your task.

14.Privacy and Data Management

You can disconnect Spycraft through your agent workspace's connection settings to stop that workspace using its connection. For account deletion or questions about authorisation and stored content, contact ankit@spycraft.co. Separate copies held by third-party agent providers are governed by those providers' policies. Spycraft is intended for adults aged 18 or older. If you believe a child has supplied personal information, contact us so we can investigate.

15. Changes and Notifications

Privacy policy updates will be posted and users are encouraged to review regularly.

16. Data Retention and Deletion

We retain account information, saved boards and drafts for as long as needed to provide the service and maintain your account. Billing, legal, security and dispute records may need to be retained after an account closes. You can request access, correction or deletion by emailing ankit@spycraft.co. We assess requests under applicable law and explain any information that must be retained. Disconnecting an agent does not automatically delete saved Spycraft content or copies already held by your agent provider.