Legal

Privacy Policy

Effective July 3, 2026. Written in plain language on purpose.

Who we are

Sproutable (sproutable.ai) helps founders take a raw idea to a named, branded, launched company. This policy explains what information we handle to do that, and what we deliberately don't. Questions or requests: privacy@sproutable.ai.

What we collect

Your account. The email address you sign in with (via Google or an email magic-link) and a display name if your sign-in provides one.

What you create. The content of your launch project — your idea text, chosen name, brand selections, bios, website copy, the company facts you add for a pitch deck (team, traction, the ask), and your choices along the way (industry, platforms). This is your work product; we store it so you can resume and edit it.

Billing facts. Your subscription tier, credit balance, and an audit log of billing events. Payment details (card numbers) go directly to Stripe — we never see or store them.

Basic technical data. Server logs (IP address, request path, timestamps) for security and abuse prevention. If we introduce product analytics, they will be event-based and anonymized — your project content will never become analytics data — and this policy will be updated first.

Pitch-deck link analytics.If you share a deck with a tracked link, we record which slide was on screen and for how long, keyed to a salted one-way hash of the viewer's IP and browser that rotates daily. We never store a viewer's name, email, or raw IP address, and the tracking stops the moment you revoke the link.

What we never collect

Government identifiers (like SSNs) and KYC documents.Sproutable never asks for them. If we ever add a service that legally requires them, they would be collected exclusively inside that licensed partner's own secure flow — never touching Sproutable's database or logs.

Social media passwords. When you claim handles, you create every account yourself on the platform. We store your handles, profile links, and claim status — never a password.

Who processes it for us

We run on a small set of infrastructure providers, each processing data only to provide their service: Vercel (hosting), Supabase (database and sign-in), Anthropic (AI generation — your idea and project text is sent to their AI API to generate your names, brand, and site copy; under the API terms it is not used to train models), Stripe (payments), and Google Fonts(font delivery). We don't sell your data, and we don't share it with anyone else except as required by law.

Cookies

We use cookies to keep you signed in. That's currently it. If we add analytics or referral cookies later, this policy will say so before they ship.

Your data is yours

The ownership promise that applies to your domain, brand, and site applies to your data too: you can export your project content and request deletion of your account and everything in it at any time by emailing privacy@sproutable.ai. Deleting your account removes your projects, brand selections, and billing records (except what payment regulations require Stripe and us to retain).

Security & retention

Data is encrypted in transit and at rest by our infrastructure providers. We keep your project data for as long as your account exists — including on the free tier after a subscription ends, so your work is never held hostage.

Changes

If this policy changes materially, we'll update the effective date above and note the change plainly. No silent edits.