Spreesy.

Privacy Policy

Last updated: 20 August 2026

1. Who we are

Spreesy is the data controller for personal data described in this policy. Contact: support@spreesy.com.

2. Information we collect from you

  • Account: your email address (and name/avatar if you sign in with Google), plus the sign-in codes we email you.
  • Use of the app: the products you search for (ASINs, product text), your saved lists, and your CSV exports.
  • Billing: handled by Polar, our merchant of record. Polar and its payment providers process your card and billing address; we receive subscription status and never see card numbers.
  • Communications: messages you send to support.
  • Logs and security: IP address, request logs, and the signals Cloudflare Turnstile uses to tell humans from bots.

3. How we use it

  • To provide the Service: run searches, keep your lists, meter exports.
  • To sign you in and send transactional email (sign-in codes, billing).
  • To prevent fraud and abuse and keep the Service reliable.
  • To respond to support requests.
  • To comply with legal obligations.
  • To measure and improve the Service and our marketing: product analytics (PostHog, recorded server-side without cookies) and, only after you accept them in the cookie banner, web analytics and advertising measurement tags (such as Google Analytics and Reddit conversion tracking) loaded through Google Tag Manager.

4. Creator storefront data

The Spreesy index is compiled from publicly available Amazon Influencer storefront pages, collected in dated passes. For each storefront this can include the public handle, display name, avatar, the products and idea lists shown, video titles and thumbnails, and any social links the creator chose to publish on their storefront. It is a dated snapshot of a public commercial page - not monitoring, and not data from private sources.

We process this data on the basis of legitimate interest (GDPR Art. 6(1)(f)): making public commercial storefronts searchable for the sellers those pages exist to reach. If you are a creator and want your storefront corrected or removed from the index, email support@spreesy.com - we honor removal requests within 30 days, and removal persists across future passes.

5. Who we share data with

We do not sell personal data. We share it only with:

  • Processors that run the Service: Cloudflare (hosting, database, email delivery, bot protection), Polar (billing, as merchant of record), Google (if you use Google sign-in; Google Tag Manager and Google Analytics for consented measurement), Reddit (consented ad conversion measurement), Stape (hosts our tag server), CookieYes (the cookie banner), Resend (fallback email delivery), and PostHog (analytics, where enabled).
  • Authorities, where disclosure is required by law.
  • A successor, if the business is transferred - under this same policy.

6. Cookies

Essential cookies are always on: your sign-in session and security. Your theme choice is stored locally in your browser. Analytics and advertising cookies (Google Analytics, Reddit and similar measurement tags, loaded through Google Tag Manager) are set only after you accept them in the cookie banner; decline and they stay off - the Service works the same either way. You can change your choice at any time via Cookie preferences.

7. Retention

Account data is kept while your account is active and deleted or anonymized within 90 days of account closure, except records we must keep by law (e.g. billing). Export-usage records are kept as billing evidence for the same period.

8. Your rights

Depending on your jurisdiction you may have the right to access, correct, delete, or port your personal data, to object to or restrict processing, to withdraw consent, and to complain to a supervisory authority (for EU/EEA residents). Write to support@spreesy.com.

9. Security

Data is encrypted in transit and at rest, access is controlled, and sign-in uses one-time codes rather than stored passwords. No system is perfectly secure, and we cannot guarantee absolute security.

10. International transfers

Our infrastructure providers may process data outside your country; where they do, transfers are covered by appropriate safeguards such as standard contractual clauses.

11. Children

The Service is for adults (18+). We do not knowingly collect data from children and will delete any we learn of.

12. Changes

We will post any changes here and update the date above. Material changes will be flagged in the app or by email.

13. Contact

support@spreesy.com · See also the Terms of Service and Refund Policy.