Privacy Policy

1. Who we are

Spintaxify CMS (“Spintaxify”, “we”) is an independent product run by its founder. It runs spintaxifycms.com, the dashboard and the analytics script that our customers add to their websites. For account data we decide how it is used. For the visitor data collected on our customers’ websites, the website owner decides and we process it on their behalf.

2. Data we collect from account holders

• Account: your name, email address and sign-in details. Passwords are stored only as a secure hash by our sign-in provider. If you sign in with Google, we receive your name and email from Google.
• Your workspace: projects, website addresses, articles, topics, settings and the email addresses of team members you invite.
• Billing: your plan, its status and renewal date. Payments are processed by Lemon Squeezy. We never receive your full card number.
• Google Search Console (only if you connect it): a read-only access token, stored encrypted, and the search data of your own sites, such as search queries, clicks, impressions and pages.
• Payment providers (only if you connect one in Analytics): a read-only key, stored encrypted, and payment events such as amount, currency, time and the page or channel that brought the buyer. No card details.
• Messages: what you send us through the Contact page or by email.
• Technical logs: IP address, browser and error details, kept for a short time for security and to fix problems.

3. Website analytics (visitors of our customers’ sites)

Our analytics script is cookie-free and does not build profiles of people. When someone visits a site that uses it, we record:

• the page, the referring site, campaign (UTM) tags and the time spent on the page;
• approximate location (country, region and city) worked out from the IP address at the moment of the visit;
• browser, operating system, device type and language;
• clicks on links to other sites, and events or goals the website owner chooses to send.

We do not store IP addresses. To count unique visitors we keep a one-way code made from the IP address, browser and a random value that changes every day. The daily value is deleted, so a visitor cannot be followed from one day to the next or across different websites.

If the website owner uses revenue attribution, the script keeps the first landing page and source for 30 days in the visitor’s browser storage (no cookie) so a later purchase can be credited to the right page. Visitors can opt out of being counted on a site by setting spintaxify_ignore in their browser’s local storage.

4. How we use data

• to provide the service: write and publish articles, show analytics and search reports, send the emails you turned on (sign-in codes, reports and alerts);
• to keep accounts and the service secure and to fix problems;
• to handle billing and answer your questions.

We do not show ads, we do not sell personal data, and we do not use your content or your visitors’ data to train AI models.

5. AI writing

When Spintaxify writes for you, we send the topic, your niche profile, your business description and public text from your website to our AI provider to produce the article. The provider processes this only to return the text to us.

6. Service providers we use

• Supabase: database and sign-in.
• Vercel: website and app hosting.
• Groq: AI text generation.
• Resend: sending emails.
• Lemon Squeezy: payments, taxes and invoices (Merchant of Record).
• Google: Google sign-in and the Search Console API, when you use them.

These providers process data only to deliver their part of the service. Some of them may process data in the United States or other countries, with suitable safeguards in place.

7. Google user data

Spintaxify’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Search Console data only to show it to you inside Spintaxify, we do not share it with anyone else, and you can disconnect Google at any time.

8. Cookies

Our website and dashboard use only what is needed to keep you signed in. We use no advertising or tracking cookies, and our analytics script sets no cookies at all.

9. How long we keep data

• Account and workspace data: while your account is open. After you ask us to delete your account, we delete it within 30 days.
• Analytics data: while the website’s project exists in Spintaxify. Deleting the project deletes its data.
• Technical logs: a short time, usually a few weeks.
• Billing records: as long as the law requires; Lemon Squeezy keeps the invoices.

10. Security

All connections use HTTPS. Access tokens and keys you connect are stored encrypted, and each workspace can only see its own data.

11. Your rights

You can ask us to show, correct, export or delete your personal data, or object to how we use it. Contact us from the email on your account and we will reply within 30 days. If you live in the EU or UK, you can also complain to your local data protection authority. Visitors of our customers’ websites should first contact the owner of that website.

12. Children

Spintaxify is not meant for children under 16, and we do not knowingly collect their data.

13. Changes

We will update this page when our practices change and change the date at the top. For important changes we will email account owners.