Privacy Policy

This Privacy Policy describes how Kollektiv LLC ("Company", "we", "us", or "our"), operating as Spawnbase, collects, uses, and shares information when you use our workflow automation platform ("Service").

The Service is intended for users who are at least 18 years old. We do not knowingly collect information from anyone under 18. If you believe someone under 18 has provided us with personal information, please contact us and we will delete it.

1. Information We Collect

Account Information

When you create an account using one of our supported authentication methods (such as OAuth or email-based authentication), we collect:

• Name and email address
• Profile picture (from your authentication provider)
• Authentication provider identifiers

Workflow Data

When you create and run workflows, we collect:

• Workflow definitions and configurations
• Run history, status, and timing information
• Workflow outputs and results
• Cost and usage metrics

Usage Data

We automatically collect information about how you use the Service:

• Features used and actions taken
• Run counts and execution patterns
• Error logs and diagnostic information

Technical Data

We collect standard technical information including:

• IP address and approximate location
• Browser type and version
• Device type and operating system
• Referring URLs and page views

Payment Information (Future)

When billing is introduced, payment information will be processed by a third-party payment provider. We will not store credit card numbers or full payment details on our servers.

2. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data on the following legal bases:

• Contract performance: Processing necessary to provide the Service you signed up for (account management, workflow execution)
• Legitimate interests: Improving the Service, preventing fraud, and ensuring security, where these interests are not overridden by your rights
• Legal obligations: Compliance with applicable laws and regulations
• Consent: Where required, such as for optional analytics

3. Third-Party Services & Data Processors

We share information with the following categories of third-party services to provide and operate the Service:

Infrastructure & Hosting

The Service is hosted on cloud infrastructure providers that process requests globally. Your data may be processed at edge locations nearest to you.

Integration Services

When you connect third-party integrations (such as communication tools, monitoring services, or productivity applications), your credentials may be stored and managed by those services or their intermediaries. We receive only the data necessary to execute your workflows.

AI Model Providers

When workflows use AI agents, prompts and relevant context are sent to language model providers via AI gateway services for processing. We do not control how these providers handle your data beyond our contractual agreements with them.

Analytics & Error Tracking

We use analytics services to understand how users interact with the Service and error tracking services to monitor and fix issues. These services may receive page views, feature usage, anonymized behavioral data, and technical information about your session.

Email Communications

We use transactional email services to send service-related communications such as account verification, security alerts, and support responses.

Payments (Future)

When billing is introduced, payments will be processed by a third-party payment provider that handles all payment card data directly.

4. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Execute and monitor your workflows
• Send service-related communications (account updates, security alerts)
• Respond to your support requests
• Detect and prevent fraud, abuse, and security incidents
• Analyze usage patterns to improve the Service
• Comply with legal obligations

Important: We do NOT use your workflow data, prompts, or outputs to train AI or machine learning models. Your data is used only to provide the Service to you.

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• All data transmitted over HTTPS encryption
• Secure storage with access controls
• Regular security reviews and updates
• Limited employee access on a need-to-know basis

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

• Active accounts: Data retained while your account is active
• Deleted accounts: Data purged within 30 days of deletion
• Run logs: Retained for 90 days, then automatically deleted
• Backups: May persist for up to 90 days after deletion for disaster recovery

We may retain certain information longer if required for legal compliance, dispute resolution, or fraud prevention.

7. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the data we hold about you
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Export: Export your workflow definitions
• Restriction: Request restriction of processing in certain circumstances
• Objection: Object to processing based on legitimate interests
• Opt-out: Opt out of non-essential communications

To exercise these rights, contact us at legal@spawnbase.ai. We will respond to requests within 30 days.

8. Cookies & Tracking

Spawnbase uses a session cookie solely for authentication purposes. This cookie is essential for maintaining your logged-in state and cannot be disabled while using the Service.

We do not use advertising cookies, third-party tracking cookies, or cross-site tracking technologies.

9. California Privacy Rights (CCPA)

We do not sell your personal information to third parties. We do not share your data for advertising or cross-context behavioral advertising purposes.

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. Since we do not sell personal information, there is nothing to opt out of. For other requests, contact us at legal@spawnbase.ai.

10. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. Our infrastructure processes requests at edge locations globally. By using the Service, you consent to this transfer of information.

For transfers from the EEA, we rely on appropriate safeguards including standard contractual clauses and adequacy decisions where applicable.

11. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email or prominent notice in the Service. Your continued use after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights, contact us at legal@spawnbase.ai.

Kollektiv LLC
Wyoming, United States