Global Privacy Notice

1. Scope and controller

This notice applies to Spairly websites, applications, APIs, runner integrations, support, and marketplace services operated by Famplified LLC (“Spairly,” “we,” “us,” or “our”). Famplified LLC is the controller or business responsible for personal information where those concepts apply. A customer organization may be a separate controller for information it directs us to process.

Privacy questions and rights requests may be sent to privacy@spairly.com. General support is available at hello@spairly.com.

2. Information we may collect

• Account and identity information, such as name, email, authentication identifiers, language, country, organization, role, and verification status.
• Request, task, and contribution information, including descriptions, beneficiaries, acceptance criteria, messages, status events, reviews, disputes, and contribution records.
• Estimate and Social Good intake information, including contact details, organization, project description, beneficiary and impact statements, current method, baseline hours or cost, target budget, language, and campaign attribution submitted with the form.
• Files and metadata you choose to provide, including names, types, sizes, hashes, safety results, provenance, and generated artifacts.
• Transaction and compliance information, such as billing status, payout status, tax or identity-verification status, fraud signals, and records required by payment providers. Spairly should not store complete payment-card numbers.
• Agent and runner telemetry, including declared tools, model identifiers, prompt or template versions, task events, usage estimates, errors, and evidence needed to verify a result. Contributor provider credentials are not collected by Spairly.
• Technical and security data, including IP address, device and browser information, request identifiers, timestamps, logs, cookie preferences, and abuse or incident signals.
• Communications and support information, including emails, feedback, complaints, and records of rights requests.
• Inferences and review outputs, including safety classification, risk level, likely Social Good eligibility, quality scores, and reasons generated by automated systems or human reviewers.

3. Sources of information

We receive information directly from you, from an organization that administers your account or project, from contributors and reviewers participating in a project, from service providers, and automatically from your use of the service. We may verify public organizational or professional information using lawful public sources.

4. Why we process information

Where the GDPR, UK GDPR, or similar law applies, our legal bases may include performance of a contract, steps requested before a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where required. We do not rely on consent when another basis is more appropriate, and consent may be withdrawn without affecting earlier lawful processing.

• Provide accounts, authenticate users, support authorized roles, and operate project workflows.
• Create, scope, route, run, review, and verify requests and artifacts.
• Assess safety, legitimacy, policy compliance, fraud, and Social Good eligibility.
• Provide support, communicate service information, and resolve disputes.
• Respond to estimate requests, evaluate Social Good applications, measure which outreach produced a submitted request, and prevent duplicate or abusive submissions.
• Secure the service; prevent abuse, malware, credential exposure, and unauthorized access.
• Maintain financial, audit, tax, and legal records and enforce our agreements.
• Improve reliability, accessibility, templates, evaluation methods, and cost controls using minimized or de-identified data where practical.

5. AI-assisted processing and human review

Spairly may use automated systems to help classify requests, identify missing information, detect unsafe or prohibited content, estimate effort, recommend Social Good eligibility, and evaluate submitted artifacts. We disclose the important factors used, preserve material reasons, monitor quality and bias, and provide a route to request human review.

AI output is advisory. Spairly does not intend to make a solely automated decision that has a legal or similarly significant effect on a person. Publishing a request, denying a Social Good subsidy, suspending an account, resolving a dispute, or releasing a payout requires meaningful review by an authorized person.

6. How information may be disclosed

The current public website and intake service are hosted on Amazon Web Services in the United States. Amazon infrastructure services store the request and may send an operational email notification to Famplified LLC. We will update this notice before activating additional material providers. Spairly does not sell personal information for money and does not use personal information for cross-context behavioral advertising. If that practice changes, we will provide legally required notice and choices before the change.

• To requesters, contributors, reviewers, and organization administrators as needed for the selected project and their roles.
• To infrastructure, security, communications, analytics, identity, AI, file-scanning, and payment providers acting under contracts and access restrictions.
• To professional advisers, auditors, insurers, authorities, or counterparties when reasonably necessary for legal compliance, safety, dispute resolution, financing, reorganization, or a business transfer.
• With your direction or consent.

7. Retention

We retain information only as long as reasonably needed for the purposes described above, including safety, audit, dispute, tax, and legal requirements. Retention depends on the record and project status. Our operational target is 30 days for ordinary application logs; temporary uploads are deleted or quarantined according to file policy; completed project and financial records may be retained for up to seven years when required; and account information is retained while an account is active plus a reasonable closure period.

Unconverted estimate and Social Good intake records have an operational deletion target of 180 days. If a request becomes an active project, the relevant record may be retained under the project, financial, dispute, and legal schedules described above.

Backups, fraud records, legal holds, and de-identified records may remain longer. Production retention schedules must be reviewed before paid launch and enforced through documented deletion jobs and storage lifecycle rules.

8. Security

We use measures designed for the sensitivity of the data, including encryption in transit and at rest, least-privilege access, private storage, logging, file scanning, versioning, environment separation, and incident-response procedures. No service can guarantee absolute security. Do not submit secrets, provider credentials, medical records, government identifiers, financial records, or other prohibited sensitive information.

9. International transfers

Spairly is operated from the United States and information may be processed in countries where we or our providers operate. Where required, we use recognized transfer mechanisms, such as adequacy decisions, contractual safeguards including Standard Contractual Clauses, transfer assessments, and supplementary security measures. You may request information about the applicable safeguard.

10. Your privacy rights

To exercise a right, email privacy@spairly.com and identify the account or project involved. We may verify your identity and authority, respond within the legally required period, explain any lawful limitation, and support authorized agents where required. We will not unlawfully discriminate against you for exercising a privacy right.

• Know or be informed about personal information processing.
• Request access, correction, deletion, or a portable copy.
• Request restriction or object to certain processing, including direct marketing.
• Withdraw consent where processing depends on consent.
• Request meaningful human review and contest an AI-assisted decision.
• Opt out of sale, sharing, targeted advertising, or qualifying automated decision technology where applicable. Spairly currently states that it does not sell or share data for behavioral advertising.
• Appeal a denied request where applicable and contact a competent privacy regulator.

11. Regional disclosures

Residents of the EEA, United Kingdom, Switzerland, Brazil, Canada, Australia, California, and other covered jurisdictions may have additional rights and complaint routes under local law. California users may request categories, sources, purposes, recipients, and specific pieces of personal information and may use applicable opt-out and correction rights. Brazilian users may request confirmation, access, correction, anonymization, blocking, deletion, portability, information about sharing, and review. Canadian and Australian users may raise access, correction, openness, and complaint requests.

Coverage thresholds and exemptions vary. This notice provides a common baseline without waiving any right or claiming that every law applies to every processing activity.

12. Children

Spairly is a general-audience business service for adults and is not directed to children. You must be at least 18 to create an account or submit work. Do not upload information about a child unless Spairly has expressly approved a lawful, safeguarded workflow. If we learn that we collected personal information directly from a child in violation of this rule, we will delete it and take appropriate action.

13. Cookies and tracking

The public static website is designed to operate without non-essential advertising or analytics cookies. Essential security, authentication, language, and preference technologies may be used when application features launch. See the Cookie Notice for current categories and controls.

14. Changes

We may update this notice as our service and legal obligations change. We will post a new effective date and provide additional notice when a change is material or consent is required.