Privacy Policy

specsy.io ("specsy", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our platform at specsy.io.

By using specsy.io, you agree to the collection and use of information in accordance with this policy.

We collect the following types of information:

Account Information

When you create an account, we collect your email address. If you set up a creator profile, we also collect your display name, bio, and optional avatar URL.

Purchase Information

When you purchase a spec, we record the transaction, including which spec was purchased, the price paid, and the date. We do not store your payment card details. All payment processing is handled by Stripe.

Usage Information

We collect standard web server logs including IP addresses, browser type, pages visited, and referring URLs. This information is used to operate and improve the platform.

Creator Payout Information

If you connect a Stripe account to receive payouts as a creator, Stripe collects and stores your banking and identity information directly. specsy does not have access to your bank account details.

We use the information we collect to:

• Create and manage your account
• Process purchases and deliver spec files via email
• Send transactional emails (purchase confirmations, download links, review requests)
• Pay creators their earnings via Stripe Connect
• Provide customer support
• Detect and prevent fraud or abuse
• Analyze usage patterns to improve the platform
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your data for advertising or marketing profiling.

By creating an account or making a purchase, you agree to receive transactional emails including purchase confirmations, download links, and review request emails. These are necessary for the service and cannot be opted out of while you have an active account.

We do not send marketing newsletters or promotional emails unless you have explicitly opted in. You may opt out of any marketing communications at any time by clicking the unsubscribe link in any such email.

We use the following third-party services to operate specsy.io:

• Supabase: database and authentication provider. Your account data and purchase history are stored on Supabase infrastructure. See Supabase's Privacy Policy.
• Stripe: payment processing and creator payouts. Stripe handles all card data and identity verification. See Stripe's Privacy Policy.
• Resend: transactional email delivery. Your email address is passed to Resend to deliver purchase confirmation and download emails. See Resend's Privacy Policy.

Each of these providers is bound by their own privacy policies and data processing agreements. We select providers that meet appropriate data protection standards.

specsy.io uses cookies and similar tracking technologies to maintain your session and remember your authentication state. These are strictly necessary for the platform to function.

We do not use advertising cookies or behavioral tracking cookies. If we introduce optional analytics cookies in the future, we will request your consent before setting them.

We retain your account information for as long as your account is active. If you request deletion of your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g. transaction records required for tax purposes, which we retain for 7 years).

Purchase records are retained to support download access, dispute resolution, and creator payout records.

We implement reasonable technical and organizational measures to protect your personal information, including encrypted data transmission (HTTPS), secure authentication via Supabase, and restricted access to production systems.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Correction: request that we correct inaccurate data
• Deletion: request that we delete your account and personal data
• Portability: request your data in a machine-readable format
• Objection: object to certain types of processing

To exercise any of these rights, contact us at hello@specsy.io. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect and how we use it
• The right to request deletion of your personal information
• The right to opt out of the sale of your personal information (note: we do not sell personal information)
• The right not to be discriminated against for exercising your privacy rights

To submit a CCPA request, email us at hello@specsy.io with the subject line "CCPA Request."

specsy.io is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will make reasonable efforts to notify users via email or a notice on the platform.

Continued use of specsy.io after changes constitutes acceptance of the revised policy.

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at hello@specsy.io.