Privacy policy

This policy covers spriggit.com and the Spriggit app, run by Erin Wiggers. It explains what personal data Spriggit handles and why.

What Spriggit collects

• Account details for the people in a workspace: name, email address and sign-in records.
• What the Spriggit Scan form asks for: name, work email, agency and the notes you add.
• Data from connected HubSpot portals: the portal’s setup, and the record values a feature reads, such as an audit’s data checks.
• Billing details, handled by Stripe. Spriggit doesn’t store card numbers.

Why

To run the service: plan and apply the changes your agency approves, run audits, keep change records and documents, send the emails the service needs, and bill for it. Scan requests are used to reply to you about the Scan.

Record values and AI

Whether record values from a client’s portal may go into AI prompts is that client’s setting. When they may, names, emails, phone numbers and card or Social Security number shapes are replaced with tokens first. AI requests use the provider and key your agency chooses.

Where it is stored

Spriggit’s database and files are stored with Supabase in Canada (Montreal). The app runs on DigitalOcean in New York. HubSpot tokens and AI keys are encrypted at rest.

Who processes it

• Supabase: database, sign-in and file storage.
• DigitalOcean: hosting.
• Resend: email.
• Stripe: billing.
• The AI provider your agency picks: Anthropic, OpenAI or Google Gemini.
• HubSpot: the Scan form and the portals your agency connects.

How long it is kept

• Portal snapshots: daily for 35 days, weekly for 26 weeks, monthly for 24 months.
• Record values an audit needs for a fix: 30 days, or longer while that fix can still be undone.
• After a portal is uninstalled: its HubSpot tokens are deleted at once, and its history 90 days later.

Your choices

You can ask to see, correct or delete your personal data, or to have a disconnected portal’s data deleted before the 90 days are up. Email the address below. Spriggit doesn’t sell personal data and doesn’t use it for advertising.

Changes

If this policy changes, the new version is posted here with its date.

Questions about this page go to [email protected].