Privacy Policy

1. Scope and Roles

1. 1.1

   This policy applies to:

   • Glyffio websites (including https://glyffio.com and https://glyffio.com/welcome);
   • Speargly (ingest, assets, queue, and explain workflows for media optimization); and
   • other Glyffio services that link to this policy.
2. 1.2

   Glyffio as a business. When you visit our websites, contact us, or interact with us as a prospective or current customer, Glyffio processes personal data for its own business purposes (for example, responding to inquiries, operating public pages, and improving products).

3. 1.3

   Glyffio on behalf of customers. When customers use Speargly to ingest origin URLs, run optimization jobs, or otherwise process media that may include personal data, Glyffio may process that data on the customer’s behalf to provide Speargly. In that case, the customer’s privacy notices and instructions generally govern that data, and a separate Data Processing Agreement may apply where required.

4. 1.4

   Rights and obligations may vary by location. This policy does not claim compliance with a specific privacy framework unless Glyffio later publishes that claim after legal review.

2. Information We Collect

Depending on how you interact with Glyffio and Speargly, we may collect:

3. How We Use Information

We use personal data to:

• provide, operate, and maintain Glyffio websites and Speargly;
• run ingest, probe, optimization, queue, and explain workflows you request;
• communicate about the Services, including support via support@glyffio.com;
• monitor usage, prevent abuse, and secure the Services;
• improve features and user experience (for example, Core Web Vitals–oriented optimization tooling described on Speargly pages);
• administer any future subscriptions if introduced; and
• comply with legal obligations.

4. Service Providers

1. 4.1

   We may use service providers to host infrastructure, deliver fonts or other static assets, send email, or support operations.

2. 4.2

   Providers reflected in current public site materials:

   • Google Fonts (fonts.googleapis.com / fonts.gstatic.com) — typography on Glyffio and Speargly about pages
   • Customer-designated media origins — third-party hosts of images you choose to ingest (not Glyffio subprocessors; you control which origins you point to)
3. 4.3

   No other subprocessors (hosting, analytics, or payments) are named in current Glyffio/Speargly materials. When additional vendors are engaged, Glyffio will update this section or publish a subprocessor list.

5. Data Retention

1. 5.1

   We retain personal data as long as needed for the purposes described in this policy, including providing the Services, responding to support requests, and meeting legal requirements.

2. 5.2

   Speargly-specific retention consistent with product design:

   • Origin media — remains at your origin; Speargly is not a permanent archive
   • Asset inventory / job state — treated as a transient working set for the optimize workflow (Ingest → Assets → Queue → Explain), not long-term DAM storage
   • Browser session data — `speargly_ingest_url` in `sessionStorage` lasts for the browser session (or until cleared)
   • Account and support records — retained while needed to operate the relationship and for a reasonable period afterward for legitimate business and legal needs

6. Security

1. 6.1

   We take reasonable administrative, technical, and organizational measures designed to protect personal data.

2. 6.2

   No method of transmission or storage is completely secure. Current Glyffio/Speargly materials do not claim SOC 2, ISO 27001, HIPAA, PCI DSS, or similar certifications. Speargly product pages describe secure distribution and access-control concepts at a product level for Glyffio’s broader platform positioning; they are not a substitute for a certified security report.

7. Cookies and Analytics

1. 7.1

   We may use cookies and similar technologies on Glyffio websites and Speargly. Details are in the Cookies Policy.

2. 7.2

   No third-party analytics product is identified in current Glyffio or Speargly page sources. If analytics are added later, this policy and the Cookies Policy will be updated.

8. International Transfers

1. 8.1

   If you access Glyffio websites or Speargly from outside the region where systems are operated, your information may be processed in other countries.

2. 8.2

   Specific hosting regions are not published on https://glyffio.com or Speargly product pages. For current location details, contact privacy@glyffio.com.

9. Privacy Rights

1. 9.1

   Depending on where you live, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing.

2. 9.2

   To exercise rights regarding data Glyffio processes for its own purposes, contact privacy@glyffio.com.

3. 9.3

   If Glyffio processes personal data on a customer’s behalf through Speargly, please contact that customer first. We will assist customers with verified requests as appropriate.

4. 9.4

   Specific statutory rights and response timelines depend on applicable law and are not enumerated as a compliance claim in this MVP policy. Contact privacy@glyffio.com for assistance.

10. Children’s Privacy

1. 10.1

   Glyffio’s websites and Speargly are directed to businesses and professionals (startups, SMEs, and teams shipping digital products), not children. We do not knowingly collect personal data from children under 13 (or the higher age required in your jurisdiction). If you believe we have collected such data, contact privacy@glyffio.com.

11. Changes to This Policy

1. 11.1

   We may update this Privacy Policy from time to time. The “Last updated” date will change when we do. Material changes may be communicated through the Services, https://glyffio.com, or by email when appropriate.

2. 11.2

   Current version: https://glyffio.com/policies/privacy.