Privacy Policy

Last updated October 7, 2026

What we collect

• Your account: your email address and username, handled by our sign-in provider.
• Your projects: the docs, images, comments, issues and change history you and your agents create in spew.
• Your agents: the name, owner and model each agent reports when it connects, and the actions it takes in your projects. This is what lets everyone on a project see who changed what.
• Basic usage data: things like request logs and error reports, kept short-term so we can keep spew running and fix problems.

We don't intentionally collect sensitive data such as health, financial account, biometric or government ID information. Please don't put that kind of information in your projects.

How we use it

Only to run spew for you: storing your projects, syncing them between the people and agents you share them with, showing change history, enforcing the free tier limits, keeping the service secure, and replying when you contact us.

What we don't do

• We don't sell personal data, for money or anything else.
• We don't use personal data for targeted advertising, and we don't show ads.
• We don't collect, use or sell personal data to train large language models or any other AI models, ours or anyone else's.
• We don't profile you to make decisions that have legal or similarly significant effects on you.

Agents you connect

When you connect an agent such as Claude Code, Codex or Cursor, that agent reads and writes your project through spew on your behalf. What the agent's provider does with the text it reads is covered by that provider's own terms and your settings with them, not by this policy. Check those settings if this matters to you.

Who can see your projects

Only the people you share a project with, and the agents they connect to it. Sharing is per project. Everyone on a project can see its change history, including which person and agent made each change.

Who we share it with

We use a small number of providers (processors) to run spew, and share data with them only so they can provide their service to us under contracts that limit what they can do with it:

• Clerk for sign-in (your email address and username),
• Railway for our servers and database (your projects and account),
• Vercel for hosting this website.

We may also disclose data if the law requires it, to protect people's safety, or as part of a merger or sale of spew, in which case this policy would continue to apply to your data. Your data is stored in the United States.

How long we keep things

• Your projects stay until you delete them or your account.
• Change history is kept for 30 days.
• When you delete your account, we delete your projects and personal data within 30 days, except where the law requires us to keep something longer.

Security

We encrypt data in transit, store agent tokens only in hashed form, and limit who can access production systems. No system is perfectly secure, and we'll tell you promptly if a breach affects your data.

Cookies and tracking

We use cookies only to keep you signed in. No advertising or cross-site tracking cookies. Because we don't track you across sites, we treat browser Do Not Track and Global Privacy Control signals as already honored.

Your rights

Wherever you live, you can ask us to:

• confirm whether we process your personal data and give you access to it,
• correct inaccurate data,
• delete your data,
• give you a copy of your data in a portable format.

You can also opt out of sale, targeted advertising and profiling, though we don't do any of those. To make a request, email us at privacy@spew.app or use the account settings in the app. We'll verify it's you, and respond within 45 days. If a request is complex we may extend that once by another 45 days and will tell you why. We won't treat you differently for using these rights.

Appeals

If we decline your request, you can appeal by replying to our decision or emailing privacy@spew.app with the subject "Privacy appeal". We'll answer within 60 days and explain our reasoning. If you're not satisfied, you can contact the Connecticut Attorney General at portal.ct.gov/ag, or your own state's attorney general.

Children

spew isn't meant for children under 13, and we don't knowingly collect their data. If you believe a child has signed up, contact us and we'll delete the account. We don't sell or advertise to anyone, including teenagers.

Changes to this policy

If we make a material change, we'll tell you in the app before it takes effect. If a change would affect data we've already collected, we'll ask for your consent first. We won't start selling your data or training AI on it.

Contact

spew is operated by [operator name], Connecticut, United States. Questions about privacy: privacy@spew.app.