Privacy Policy

1. Introduction

Secret Sprite ("we," "us," or "our") creates and runs AI-written publications for businesses, and is operated by The Letter Company. This Privacy Policy explains how we collect, use, disclose and protect your information when you use our website and service at secretsprite.com.

2. Information We Collect

Account and billing information

When you buy a sprite, you enter your email address and payment details on a checkout page hosted by Stripe. Stripe processes your card; we never see or store your full card number. We store your email address and the Stripe customer and subscription identifiers needed to manage your plan.

Your website and requests

We store the website domain you give us for each sprite and read that site's public pages to understand your business and market. We also store the requests you make to your sprite, such as topics you ask it to write about.

Domains typed on our website

When you type a website into the box on our home page, we record the domain you typed, even if you do not go on to buy. We use this to understand demand and may contact that business about Secret Sprite.

Conversations with your sprite

Messages you send to your sprite's assistant, and its replies, are saved so it can remember your conversation and so we can improve the service. They are processed by our AI providers to generate replies.

Publication performance

We collect data about your publications, including which posts search engines have indexed and how often they appear in search results, to show you in your dashboard.

Website and product analytics

We collect our own analytics about how our website and dashboard are used: pages viewed, how far you scroll, which sections you see, buttons and questions you click, how long you stay, the site or link that referred you (including campaign and creator codes in the link), your browser, device type, operating system, screen size, language, time zone and approximate country. We connect these to a random identifier stored in your browser, and, once you buy, to your account.

3. How We Use Your Information

• Provide the service: create, write, host and publish your publications, and show you how they perform.
• AI processing: send your website content and requests to our AI providers to plan and write posts and to power your sprite's assistant.
• Billing: manage your subscription, charges and invoices through Stripe.
• Authentication: send single-use sign-in links and keep you signed in.
• Email: send sign-in links, launch updates and account notices.
• Analytics and outreach: understand how the site is used, measure which campaigns and creators bring visitors, improve the service, and contact businesses that showed interest.

4. Third-Party Services

We use the following third-party services to operate Secret Sprite:

• Stripe: payment processing, subscriptions and the billing portal.
• Supabase: database hosting. Your data is stored in Supabase-managed PostgreSQL databases.
• Vercel: hosting for our website and for your publications, and domain registration.
• Resend: delivery of email.
• Agent37: hosting for your sprite's assistant, which runs on third-party AI models.
• AI providers, including Anthropic: research, writing and naming for your publications.
• Google Search Console: search indexing and impression data for your publications.
• The Letter Company's publishing platform: planning, writing and publishing your posts.

5. Data Security

• Sign-in links are single-use, expire quickly and are stored only as hashes. Your session is a secure, HTTP-only cookie.
• The keys that connect your sprite's assistant to your account are stored only as hashes, and each assistant can only see its own customer's publications.
• Secret Sprite's data is kept in its own isolated database schema with restricted access.
• All data is transmitted over HTTPS.

6. Data Sharing

We do not sell your personal information. We share data only in the following circumstances:

• Service providers: the providers listed above process data on our behalf to operate the service.
• AI processing: website content, requests and chat messages are sent to our AI providers to generate posts and replies.
• Publishing: your publications and their posts are public on the web by design.
• Legal requirements: we may disclose data if required by law, legal process or government request.

7. Cookies and Browser Storage

We use a cookie to keep you signed in, and store a random identifier and the link you first arrived from in your browser's local storage for analytics. We do not use third-party advertising cookies.

8. Data Retention

Your data is retained for as long as your account is active and as needed to provide the service, keep records of payments and meet legal obligations. Analytics data may be kept after you cancel. Some data may persist in backups for a limited period.

9. Your Rights

You may ask us to access, correct or delete your personal information, or to stop contacting you, by emailing us at the address below. Depending on where you live, you may have additional rights under local law, which we will honor.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised date. Your continued use of Secret Sprite after changes are posted constitutes acceptance of the updated policy. See also our Terms of Service.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at hello@secretsprite.com.