Privacy Policy
Last updated: February 28, 2026
1. Information We Collect
We collect information you provide directly, such as your name, email address, company name, and role when you create an account or request early access. We also collect usage data including how you interact with Spaces, features used, and session duration. Technical data such as browser type, IP address, and device information is collected automatically.
2. How We Use Your Information
We use your information to provide and improve the Spaces platform, communicate with you about your account and our services, analyze usage patterns to enhance the product, provide customer support, and send you relevant updates about Spaces (which you can opt out of at any time).
3. LLM & AI Data Practices
Spaces tracks metadata about AI agent interactions — cost, duration, token usage, and task attribution. We do not store the content of LLM prompts or completions. Your code, prompts, and AI-generated outputs remain yours. We never use customer data to train AI models. All AI interaction metadata is encrypted in transit and at rest.
4. Data Sharing
We do not sell your personal information. We may share data with service providers who assist in operating Spaces (hosting, analytics, email delivery), but only as necessary and under strict contractual obligations. We may disclose information if required by law or to protect the rights, safety, or property of Spaces, our users, or the public.
5. Data Security
We implement industry-standard security measures to protect your data, including encryption in transit (TLS 1.3) and at rest (AES-256), regular security audits, access controls, and monitoring. SOC 2 Type II certification is currently in progress. We maintain incident response procedures and will notify affected users promptly in the event of a data breach.
6. Data Retention
We retain your account data for as long as your account is active. Usage and analytics data is retained for up to 24 months. You may request deletion of your data at any time by contacting us. Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law.
7. Your Rights
You have the right to access, correct, or delete your personal data. You can export your data at any time from your account settings. You have the right to object to processing or request restriction of processing. If you are in the EU/EEA, you have rights under the GDPR including data portability. California residents have additional rights under the CCPA.
8. Cookies & Tracking
We use essential cookies to maintain your session and preferences. We use analytics cookies (which you can opt out of) to understand how Spaces is used. We do not use third-party advertising cookies. You can manage cookie preferences through your browser settings or our cookie consent banner.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice within Spaces. Your continued use of Spaces after changes take effect constitutes acceptance of the updated policy. We encourage you to review this page periodically.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at privacy@spaces.so. For data protection inquiries in the EU, you may also contact our Data Protection Officer at the same address.