( PRIVACY POLICY )

Your data,
your control.

We treat data privacy as an engineering problem, not just a legal requirement. Here's exactly how we protect your information.

LAST UPDATED · JULY 2026
At Spell Agency, we believe enterprise AI should be secure by default. Our infrastructure is designed to minimize data retention, maximize encryption, and ensure you maintain complete ownership of your intellectual property.
( 01 )

What data we collect

We collect only the minimum data necessary to deliver AI services and improve our systems:

Account information: name, email, company details, and billing information.
Usage data: API calls, feature usage, and system performance metrics.
Training data: proprietary datasets you explicitly upload for custom model development.
( 02 )

How we protect your data

Model Isolation Guarantee

Your data is never used to train our foundational models or shared across client instances. Each deployment operates in a sandboxed VPC with encrypted ingress/egress.

( 03 )

Data retention & deletion

We retain training data only as long as your subscription is active. Upon contract termination:

72 hours

All proprietary models and datasets are cryptographically shredded within 72 hours of cancellation. This is irreversible and auditable.

( 04 )

Third-party services

We use trusted infrastructure providers (Google Cloud Platform, AWS) to host services. All sub-processors have Data Processing Agreements (DPAs) in place ensuring GDPR and CCPA compliance.

( 05 )

Your rights

You have the right to:

Access your data

Request a copy of all data we hold

Correct inaccuracies

Update incorrect information

Delete your data

Request permanent deletion

Export your data

Portable, machine-readable format

Questions about our privacy practices?

Our security team is here to help.

hello@spell.agency Contact page