Who we are
Spondo shows finance teams what their AI tools cost, by person, team and project, and turns it into month-end journals. This notice covers getspondo.com, the demo at demo.getspondo.com and the Spondo app at app.getspondo.com.
Spondo, Shoreditch Exchange, Senna Building, Gorsuch Place, London E2 8JF. For anything about your data, email security@getspondo.com.
Our two roles
For people who visit our website, ask us about Spondo or sign in to the app, we decide what's collected and why, so we're the controller.
For the data a customer's organisation sends us about its own staff (their AI usage, and the bills and invoices behind it), the customer is the controller and we're its processor: we use that data only to provide Spondo to them, as our agreement with them says. If you're a member of staff at one of our customers, your employer is the first place to ask about it; we'll help them answer.
What we collect as controller
Visiting getspondo.com. We count visits with Plausible, which sets no cookies and stores no personal data.
Asking us about Spondo. Our forms ask for your name, work email, monthly AI spend, accounting system and the AI tools you use. We keep them in our CRM, Attio, or receive them by email if Attio is unavailable. We use your IP address only to limit how many forms can be sent from one place in an hour, and don't keep it with your enquiry. If you book a call, you book it on Google Calendar's own booking page, shown inside ours, and Google handles what you enter there.
Trying the demo. The demo signs you in as a temporary user, with no form, and deletes that user and its sample company after two days.
Using the app. For each person with a Spondo login we hold:
- your name, email and a hashed password, or your single sign-on identity;
- your two-factor secret, encrypted, if you turn two-factor on;
- each sign-in session's IP address and browser;
- what you do in the app, to run and support it.
In the app and the demo, PostHog records how people use Spondo (pages, clicks and session replays) and the errors it hits. Replays mask every input and all text on screen, so no figures, names or emails reach PostHog. It knows you by an internal ID and your organisation's name, never your email.
What we process for our customers
- Staff work emails, names and AI-tool usernames, tied to usage counts: cost, tokens, model, session and time.
- Repository, folder and branch names, which can contain people's names.
- Invoices finance uploads, and bills read from connected accounting software.
Spondo never collects prompts, responses, code, file contents or names, full paths, git remote URLs, commit messages, terminal commands or credentials. More on this, and on how it's protected, is on our security page.
Why we use it
- To provide Spondo to the customer you sign in for, under our agreement with them.
- To answer your enquiry and follow up about Spondo, which is in our legitimate interests and yours.
- To keep Spondo secure, fix errors and improve it, in our legitimate interests.
- To send emails the app needs: confirming your address, password resets and invitations.
We never sell personal data, never use it to train AI models and send no customer data to any AI model.
Who we share it with
- Render hosts the app and its database in the EU (Frankfurt).
- Resend, in its EU region, sends the app's emails and any enquiry it forwards to us.
- PostHog, in its EU cloud, for product analytics, masked session replay and errors.
- Attio keeps enquiries from our website and the demo.
- Plausible counts visits to getspondo.com, without personal data.
- Google runs the booking page for calls.
Attio and Google may process enquiry and booking details outside the UK and EU, under their own terms. A customer's accounting, chat, project and AI tools aren't on this list: they're the customer's own systems, connected with its permission.
Cookies
getspondo.com sets no cookies. Google's booking page may set its own when you open it. The app and the demo set a cookie that keeps you signed in, and PostHog stores an identifier in your browser to tell visits apart.
How long we keep it
- A customer's data, including its users' logins: while it uses Spondo, so past journals stay traceable, and deleted within 30 days of the contract ending, or sooner on request.
- Demo users: two days.
- Enquiries: while we're in touch about Spondo, and deleted on request.
Your rights
Under UK and EU GDPR you can ask for a copy of your data, and to correct, delete or move it, or restrict or object to how we use it. Email security@getspondo.com. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, or to your local data protection authority.
Changes
When this notice changes, we'll update it here and change the date at the top.