Privacy Policy

When you use Sparebox, we collect different types of information depending on how you use the platform:

Account Information

• Name and email address (required to create an account)
• Password (securely hashed — we never see your actual password)
• OAuth data if you sign up with GitHub or Google (profile info they share)

Payment Information

• Billing details and payment method (processed by Stripe — we don't store your card numbers)
• Payout information for hosts (bank account or Stripe Connect details)

Host Machine Information

• Hardware specs (CPU, RAM, storage, GPU if applicable)
• Connection quality and uptime metrics
• Geographic region (for latency optimization, not precise location)

Usage Data

• Agent deployment and usage statistics
• Performance metrics and error logs
• Feature usage patterns to improve the platform

We use your information to:

• Provide the service: Match deployers with hosts, manage deployments, handle authentication
• Process payments: Handle subscriptions, calculate host payouts, manage billing
• Communicate with you: Send transactional emails (verification, password resets, payment confirmations)
• Improve Sparebox: Understand usage patterns, fix bugs, build better features
• Maintain security: Detect abuse, prevent fraud, protect the network

We don't sell your data. We don't use your information for targeted advertising. We don't share your personal information with third parties for their own marketing purposes.

We use a few trusted services to run Sparebox:

• Stripe — Payment processing. They have their own privacy policy.
• Resend — Transactional email delivery (verification emails, password resets).
• Vercel — Web hosting and infrastructure.
• Supabase — Database hosting (your data is encrypted at rest).

These services only receive the minimum information needed to do their job.

We use session cookies only — small files that keep you logged in while you use Sparebox. These are essential cookies, not tracking cookies.

We don't use analytics trackers, advertising pixels, or third-party cookies. When you browse Sparebox, you're not being tracked across the web.

We keep your data for as long as you have an account with us. When you delete your account:

• Your personal information is deleted within 30 days
• Some anonymized usage data may be retained for analytics
• We may retain certain records as required by law (e.g., payment records for tax purposes)

You have control over your data:

• Access: You can view and export your data from your account settings
• Correction: You can update your information at any time
• Deletion: You can delete your account, and we'll remove your data
• Portability: You can request a copy of your data in a standard format

To exercise any of these rights, email us at support@sparebox.dev.

Sparebox is not intended for anyone under 18 years old. We don't knowingly collect information from minors. If you believe a child has provided us with personal information, please contact us and we'll delete it.

We take security seriously. Your data is encrypted in transit (HTTPS everywhere) and at rest. We use industry-standard security practices, regular security reviews, and limit access to personal data to those who need it.

That said, no system is 100% secure. If we ever experience a data breach that affects you, we'll notify you promptly.

We may update this policy from time to time. If we make significant changes, we'll let you know via email or a notice on our website. The "Last updated" date at the top tells you when we last made changes.

Questions about this policy? Concerns about your data? Just want to say hi?

Email us at support@sparebox.dev