Last updated onJuly 25, 2026

Privacy Policy

At SpanSearch, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, process, and protect your information when you use SpanSearch products and services. SpanSearch is built local-first — your research data stays on your device and is not uploaded to our servers.

1. Information We Collect

Personal Information

Account information (name, email address, password)
Personal preference settings
Payment and billing information
Communication preferences and locale settings

Research Data (Stored Locally)

The following data is stored locally on your device and is not uploaded to our servers:

Research reports and generated content
Custom data source configurations and credentials
Research conversations with the AI agent
Source materials and cached content from connected data sources
Citation mappings and cross-verification results

Because this data remains on your device, you have full control over it. Uninstalling the application or clearing local storage will permanently delete this data.

Usage Data

Feature usage and interaction patterns (anonymized)
Credit consumption and subscription status
Error reports and performance diagnostics
Device type and application version

2. How We Use Your Information

Service Delivery: To provide, maintain, and improve our AI research platform features
AI Processing: To send research queries and relevant source content to third-party AI providers for generating responses and citations
Account Management: To manage your subscription, credits, and account settings
Communication: To respond to your inquiries and provide customer support
Security: To protect our platform and users from fraud and unauthorized access
Analytics: To understand usage patterns and improve our services (using anonymized data only)

3. Data Sharing and Third Parties

We do not sell, trade, or rent your personal information. We may share your data only in these limited circumstances:

Third-Party AI Service Providers: To deliver AI-powered research features, your queries and relevant source content are transmitted to third-party AI service providers for processing. These providers process your data solely to generate research responses and are bound by their own privacy policies and data processing agreements. Your data is not used to train AI models.
Payment Processors: Billing information is processed by certified payment providers; we do not store credit card details on our servers
Legal Requirements:When required by law or to protect our rights and users' safety

Your locally stored research data is never shared with third parties unless you explicitly choose to export or share it.

4. Local Data Storage

SpanSearch's local-first architecture is central to our privacy commitment:

All research reports, source configurations, and conversation history are stored on your device
Data at rest is protected with enterprise-grade encryption on your device
We cannot access, read, or recover your locally stored research data
You are responsible for backing up your local data to prevent loss
Only queries necessary for AI processing are transmitted — not your full research archive

5. Data Security

We implement industry-standard security measures to protect your information:

SSL/TLS encryption for data transmission between your device and our services
Enterprise-grade encryption for locally stored research data
Regular security audits and vulnerability assessments
Access controls and authentication systems for account data
Secure payment processing through trusted providers

Note: We do not store credit card information on our servers. All payments are processed by certified payment providers.

6. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

Account data: Until you delete your account or request deletion
Local research data: Retained on your device until you delete it or uninstall the application
AI processing data: Queries transmitted to third-party AI providers are used solely to generate responses and are not retained by us after processing is complete
Legal data: As required by applicable laws and regulations

7. Your Rights and Choices

You have several rights regarding your personal information:

Access: Request a copy of your personal data held on our servers
Correction: Update or correct inaccurate account information
Deletion: Request deletion of your account and associated server-side data
Local Control: Delete, export, or manage your locally stored research data directly within the application
Portability: Export your research data from the application at any time
Restriction: Limit how we process your account information

To exercise these rights regarding server-side data, please contact us through our customer service channels.

8. Cookies and Tracking

Our website uses cookies and similar technologies to enhance your experience:

Essential cookies for website functionality
Analytics cookies to understand usage patterns
Preference cookies to remember your settings

You can manage cookie preferences through your browser settings. The SpanSearch application itself does not use tracking cookies.

9. International Data Transfers

Account and payment information may be transferred to and processed in countries other than your own. AI processing queries are transmitted to third-party providers that may operate internationally. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy and applicable data protection laws. Your locally stored research data is not subject to international transfers.

10. GDPR Privacy (For EU Users)

If you are located in the European Union, you have the following rights regarding your personal data:

Right to Access: Request a copy of the personal data we hold about you
Right to Rectification: Request correction of inaccurate or incomplete data
Right to Erasure: Request deletion of your personal data where there is no legitimate reason to continue processing
Right to Restriction: Request that we restrict processing of your personal data
Right to Data Portability: Receive your data in a structured, machine-readable format
Right to Object: Object to processing based on legitimate interests or for direct marketing
Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

We process your personal data under the following legal bases: performance of a contract, compliance with legal obligations, your consent, and our legitimate interests in providing and improving our services.

11. CCPA Privacy (For California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
Right to Delete: Request deletion of your personal information, subject to certain exceptions
Right to Opt-Out: We do not sell your personal information. You have the right to opt out of any future sale
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your CCPA rights, please contact us through our customer service channels.

12. Updates to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may also send you a direct notification.