Spoolis

Privacy Policy

Last updated August 10, 2026

This policy explains how Spoolis, operated by Understand My Policy, Inc. (“Spoolis,” “we,” “us,” or “our”), collects, uses, shares, and protects information when you use spoolis.com, the Spoolis API and MCP server, and related services (together, the “Service”). It is part of our Terms of Service.

The short version: we collect what the Service needs to work, a Spool is shared with the other party to your transaction by design, we never sell your personal information, and we never use your content to train AI models.

1. Information we collect

  • Account information. When you create an account, we collect your email address and basic profile details through our sign-in provider. Sign-in is passwordless; we never see or store a password.
  • Spool content. The transactions you record: titles, descriptions, amounts, terms, conditions, party names or labels, evidence you submit, and the event history of each Spool.
  • Content you paste or upload during creation. When you use AI-assisted creation, the listing text, chat excerpts, or other content you provide so the Service can propose terms from it.
  • API and agent activity. If you use the API or MCP server, the requests made under your keys, for security, rate limiting, and support.
  • Usage and device information. Standard log data (IP address, browser type, pages viewed) and product analytics events, collected to operate and improve the Service.

We do not collect payment card numbers or bank details. Today all settlement in the Service is simulated; if real payment integrations launch, payment details will go directly to the payment provider, not to us, and this policy will be updated first.

2. A Spool is shared by design

A Spool is a shared transaction record. The other party to your Spool sees its terms, state, evidence, and receipt, and keeps that access as their own record of the transaction, including after you close your account. That sharing is the product working as intended, not a disclosure choice we make about your data.

Share links. A Spool has a share link so you can send it to your counterparty. Anyone who has the link can view that Spool’s shared page. Treat a Spool link like the transaction record it opens: share it only with people who should see the transaction. Spool pages are not listed publicly and are excluded from search engine indexing directives we control, but a link, once shared, can be forwarded by whoever holds it.

3. How we use your information

  • Provide the Service: create and display Spools, keep both parties synchronized, run verification checks you request, and produce receipts;
  • Propose Spool terms from content you paste, when you use AI-assisted creation;
  • Operate, secure, and improve the Service, including monitoring for abuse;
  • Provide support and respond to you;
  • Send transactional account notices;
  • Comply with law and enforce our Terms.

We do not sell your personal information. We do not show ads.

4. How AI processing works

When you use AI-assisted creation, the content you paste is sent to our AI provider to extract proposed terms. Every extracted term carries the source it came from, amounts are parsed by deterministic code rather than authored by the model, and nothing becomes part of a Spool until you confirm it. Our AI provider processes this content under terms that prohibit using it to train their models. We do not use your content, your Spools, or your transaction history to train AI models, ours or anyone else’s.

We may produce de-identified, aggregated statistics (for example, how often a condition type is used) to operate, improve, and describe the Service. These are stripped of identifiers and combined so they do not identify you, your counterparty, or your transactions.

5. How we protect your information

  • Encryption. Data is encrypted in transit and at rest.
  • Access controls. Database access is deny-by-default; your data is reachable only through the application’s own server-side code, which enforces who may see and act on each Spool.
  • Append-only history. A Spool’s event history is append-only: events are added, never edited or silently deleted, so the record both parties rely on cannot be quietly rewritten.
  • Minimization. We collect what the Service needs and no more.

No system is perfectly secure, and we cannot guarantee absolute security.

6. Service providers we rely on

We share information only with the vendors that make the Service work, and only as needed for them to perform their function: authentication (sign-in and accounts), hosting and database (running the Service and storing data), AI processing (proposing Spool terms, under no-training terms), and product analytics (understanding usage; we proxy analytics through our own domain). If real payment providers, email delivery, or other vendors are added, we will update this policy.

7. When we may disclose information

We may disclose information if required by law, subpoena, or legal process; to protect the rights, safety, or property of Spoolis, our users, or others; to investigate fraud or abuse; or in connection with a merger, acquisition, or sale of assets (in which case this policy continues to apply to your information until changed as described below).

8. Your choices and rights

  • Access and export. Your Spools are visible in your account, and each Spool’s machine-readable record is available through the Service’s documented interfaces.
  • Correction. Agreed terms on a Spool are part of a shared record and cannot be silently rewritten after both parties agree; account details you provided can be corrected at any time.
  • Deletion. You can ask us to close your account and delete your personal information at support@spoolis.com. One honest limit: because a Spool is a shared transaction record, we may retain the record of completed transactions where the other party relies on it or where the law requires it, with your account identity unlinked from it to the extent we reasonably can.
  • Analytics. Product analytics are used to operate and improve the Service, not for advertising.

Depending on where you live, you may have additional rights (such as access, portability, or deletion rights under state privacy laws). Contact us at support@spoolis.com and we will honor the rights that apply to you.

9. Data retention

We keep your information while your account is active. After account closure, we delete or de-identify personal information within a reasonable period, except transaction records retained as described in Section 8, information we must keep to comply with law, and routine backups that age out on their own schedule.

10. Children

The Service is for adults. It is not directed to children under 18, and we do not knowingly collect information from them. If you believe a child has used the Service, contact us at support@spoolis.com and we will delete the account.

11. International users

The Service is operated from the United States, and your information is processed and stored there. If you use the Service from elsewhere, you consent to that processing.

12. Changes to this policy

We will update this policy as the Service evolves, including before any launch of real payment integrations or new data-collecting features. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice.

13. Contact

Questions about privacy? Contact us at support@spoolis.com.