Privacy Policy

SprytStack builds digital platforms for local businesses. In this policy “we” means SprytStack. Questions about your information go to support@sprytstack.com.

• Contact and demo requests. Your name, email, and anything else you choose to add, such as business name, phone, business type, website, budget and message.
• AI tools. The business type and goals you type into “Find your platform” or “Generate my own mockup”. Generated mockups are saved so you can share their link, and anyone with the link can view them. Please don't include personal details in these answers.
• Accounts. If you sign in, your email address and a securely hashed password. We confirm your email address before an account can be used.
• Product updates. If you subscribe in our site footer, your email address, where you signed up and when. Every email has a one-click unsubscribe link.
• Technical data. Like most websites, the services that deliver our pages and fonts receive your IP address and browser details when your browser requests them.

The showcase demos (sample orders, bookings, customers and subscriptions) use made-up data. Anything you enter there stays in your own browser, and only if you allow preferences storage.

• To reply to your requests and set up walkthroughs, and to send you a copy of what you asked for.
• To send product updates, only if you subscribed.
• To run the AI tools you use and show you the result.
• To keep the site working, secure and free of abuse.

We don't sell your personal information and we don't use it for advertising.

Websites at /app/… belong to the businesses we build them for. The business decides how it uses the requests you send it; we store and deliver them on its behalf.

• Booking requests: your name, phone, the service and notes go to that business and are emailed to it. Your private tracking link lets you follow or cancel the request.
• Online orders: your name, phone, optional email, delivery address and what you ordered go to that business so it can prepare and deliver your order. Your private link lets you follow or cancel it while it's new.
• Payments and deposits: when a business takes card payments online, you pay on a secure Stripe page in the business's own Stripe account. We never see or store your card number; we only receive whether the payment succeeded.
• Customer accounts, loyalty and gift cards: if you sign in to a business's site with an email link, it can show your past requests, loyalty stamps and rewards. Gift cards store the buyer's and recipient's email and the remaining balance; codes are stored in a form that can't be read back.
• The business's AI assistant: a business owner can connect their own AI assistant (such as Claude) to read their requests and orders. That assistant is chosen and controlled by the business.
• Visit statistics (when the business uses our Analytics): counted without cookies and without storing your IP address or browser details. A visit is recognised only within one day through a one-way code that can't be traced back to you. Sending Global Privacy Control or Do Not Track turns this off.
• Maps: a Google Map loads only if you click “Show map”; Directions and review links open Google.
• Messages about your request (when the business uses our Automation): a confirmation, status updates, a reminder and, after the job, a review request — by email if you gave one, and by text if the business has texting set up. Untick “Send me updates” to get none. Offers and “time for your next visit” messages are only sent if you tick “occasional offers”. Every email has an unsubscribe link; reply STOP to texts.

• Supabase: our database, sign-in and file storage.
• Anthropic: processes what you type into our AI tools to generate recommendations and mockups.
• Network Solutions: delivers our emails: requests to our team, your confirmation and product updates.
• Cloudflare Turnstile: checks that forms are used by people rather than bots. It doesn't use advertising cookies.
• Stripe: processes subscription payments from businesses that buy our plans, and card payments customers make to those businesses.
• Google: Maps and business listing data for client websites, and fonts for our pages.
• Twilio: sends text messages about booking requests when a business uses texting.
• SerpApi: checks public Google search rankings for our clients' keywords (no visitor data).
• Amazon Web Services: hosts our website, database and encrypted backups.

Each of them only receives what it needs to provide its service to us.

We don't use advertising or analytics cookies. We use a few small items in your browser, listed below. Necessary items are always on; preferences are only stored if you allow them. Change your cookie settings.

We keep requests and messages for as long as we need them to respond and to keep normal business records, then delete them. Generated mockups may be deleted at any time. You can ask us to delete your information sooner.

You can ask to see, correct or delete the personal information we hold about you by emailing support@sprytstack.com or through our support page. We reply within 30 days, usually much sooner. Depending on where you live, privacy laws such as the GDPR or the CCPA may give you further rights, and we will honour them. You can also clear our items from your browser at any time through your browser settings.

We use encrypted connections, access controls and reputable service providers to protect your information. No system is perfectly secure, so please contact us right away if you notice anything wrong.

Our site is meant for businesses and isn't directed at children under 16.

If we change this policy we will update the date at the top of this page. For significant changes we will make it clear on the site.