SprigDeal
← Back to SprigDeal
SPRIGDEAL · LEGAL

Privacy Policy

This policy explains what personal information SprigDeal collects, how we use and share it, how long we keep it, and the choices and rights you have.

Effective October 29, 2026

1. Who is responsible

SprigDeal is operated by Luis Rodriguez, an individual based at Uspallata 547, Buenos Aires, Argentina. We are the controller of the personal information we collect about our account holders and website visitors. For privacy questions or requests, contact privacy@sprigdeal.com.

2. Two kinds of information

Information about you: when you visit sprigdeal.com or use a SprigDeal account, we decide how that information is used, and this policy applies to it.

Information your business enters about its customers: names, contact details, addresses and project details in estimates are entered and controlled by the SprigDeal user. For that information we act as a service provider (processor) on the user’s behalf and use it only to provide the service. If you are a customer of a business that uses SprigDeal, please contact that business first about your information.

3. Information we collect

  • Account information: email address, password (stored only as a secure hash by our authentication provider), sign-in identifiers and email-verification status.
  • Workspace information: business name, trade, contact details, settings and optional business address.
  • Content you add: customers, estimates, line items, prices, notes, follow-ups and the decisions your customers record on shared estimates.
  • Billing information: plan, subscription status and Paddle customer and transaction references. Paddle collects your card or other payment details directly; SprigDeal never receives or stores full payment-card numbers.
  • Communications: messages you send to our mailboxes and support requests.
  • Technical and security information: IP address, browser and device type, request logs, timestamps, rate-limit counters and audit records generated when you use the service.

4. How we use information

  • to create and secure your account and workspace and deliver the features you use;
  • to generate, share and track estimates and follow-ups you create;
  • to process subscriptions, renewals, cancellations and refunds with Paddle;
  • to send service emails such as verification, password reset, receipts, estimate delivery and important account notices;
  • to answer support requests and feedback;
  • to detect, prevent and investigate fraud, abuse and security incidents;
  • to keep records required for tax, accounting and legal obligations;
  • to understand aggregate usage and improve SprigDeal.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use the content of your workspace to train third-party AI models.

5. Legal bases (EEA, UK and similar laws)

Where these laws apply, we rely on: performance of our contract with you (providing the service and billing); our legitimate interests (security, fraud prevention, service improvement and responding to inquiries), balanced against your rights; compliance with legal obligations (tax and accounting records); and your consent where we ask for it, which you can withdraw at any time.

6. Who we share information with

  • Service providers that process data for us under contract: Google Firebase and Google Cloud (authentication, database, hosting and logs), Paddle (checkout, billing and tax as Merchant of Record) and Resend (transactional email delivery). Google Fonts may receive standard request data when delivering typefaces.
  • Your customers, when you choose to share an estimate link with them.
  • Authorities or other parties when required by law or a valid legal process, or where reasonably necessary to protect the rights, safety or property of SprigDeal, our users or others.
  • A successor if the service is reorganized, sold or transferred, subject to this policy.

Paddle processes payment information under its own Privacy Policy.

7. Cookies and similar technologies

We use only the storage needed to sign you in, keep the service secure and run checkout. We do not use advertising cookies. See our Cookie Policy for details.

8. International transfers

We are based in Argentina and our providers operate infrastructure in several countries, including the United States and Brazil. When information is transferred across borders, we rely on safeguards offered by our providers, such as standard contractual clauses, to protect it.

9. How long we keep information

We keep account and workspace information while your account is active. When you delete your account, we cancel any active subscription and remove your workspace, customers, estimates, follow-ups, shared links and sign-in account, usually within 30 days once cancellation and cleanup complete. We may keep limited records longer where needed for tax, accounting, fraud prevention, security or legal claims, minimized or pseudonymized where possible. Security logs are kept for a limited period and then deleted.

10. Security

We protect information with encryption in transit, server-side authorization checks, isolation between workspaces, least-privilege access and monitoring. No system is perfectly secure; if we learn of a breach affecting your personal information, we will notify you and authorities as required by law. Please report security concerns to security@sprigdeal.com.

11. Your rights and choices

Depending on where you live (for example, under Argentina’s Personal Data Protection Law 25,326, the GDPR, UK GDPR or US state privacy laws), you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. You can update most information in the app and delete your account from account settings. For other requests, write to privacy@sprigdeal.com. We will verify your identity before acting and respond within the time required by law. We will not discriminate against you for exercising your rights.

You can also complain to your local data-protection authority. In Argentina, that is the Agencia de Acceso a la Información Pública (AAIP).

12. Children

SprigDeal is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

13. Changes to this policy

We will update this policy when our practices change and post the new effective date. For material changes, we will notify account owners by email or in the app before they take effect.

14. Contact

Privacy requests go to privacy@sprigdeal.com. Other mailboxes:

Questions? Contact privacy@sprigdeal.com.