Privacy Policy

Last updated: July 2, 2026

This policy explains what data Spine collects, why we collect it, and what control you have over it. The short version: we collect what we need to run the service for you, we don’t sell it, and you can take it with you at any time. Spine is operated by trAIngen, a B2B product studio based in India.

What we collect

Account information — your name, email address, and workspace details you provide when you sign up.
Workspace content — the data you and your team put into Spine: contacts, companies, deals, invoices, inventory records, notes, and files. This data is yours; we store and process it solely to provide the service.
Usage data — which features are used, basic device and browser information, and IP addresses in security logs. We use this to keep the service reliable and to understand what to improve.

How we use it

To provide, operate, and improve Spine.
To send transactional email — sign-in links, receipts, workspace invitations, and important service notices. We do not send marketing email without your consent.
To detect abuse and keep accounts and workspaces secure.

We do not sell personal data, and we do not use your workspace content for advertising — ours or anyone else’s.

Processors we rely on

Spine runs on a small set of infrastructure providers, each processing data only as needed to deliver the service:

Hetzner — cloud hosting. Your workspace data lives on servers managed by us in Hetzner data centres.
Resend — transactional email delivery (receipts, invitations, alerts).
Razorpay — payment processing. Card and payment details are collected and handled directly by Razorpay; card data never touches our servers.

Cookies

We use cookies for one thing: keeping you signed in. These are session cookies essential to the service. There are no third-party advertising trackers on Spine — no pixels, no cross-site profiling.

Data retention and deletion

While your account is active, we retain your data so the service works.
If you cancel, your workspace data is retained for 60 days so you can come back or finish exporting, after which it is permanently deleted from our systems.
You can export your data at any time from your workspace settings.
Want it gone sooner? Email us and we will delete your workspace ahead of schedule.

Your rights

You can access, correct, export, or delete your personal data. Workspace members should route requests through their workspace administrator where the data belongs to the workspace; for anything else, contact us directly and we will respond within a reasonable time, and in any case within the timelines applicable law requires.

Changes to this policy

If we make material changes to this policy, we will notify you by email or in-app before they take effect.

Contact

Questions, requests, or concerns about privacy: write to [email protected] and we will get back to you within one business day.