Privacy Policy

1. Data controller

2. Data collected

As part of using the Spruce platform, we collect the following data:

3. Data related to your LinkedIn connection

The Client must connect their LinkedIn account via a secure third-party technical provider.

Spruce only receives the information necessary:

• First name, last name, profile photo, and LinkedIn URL
• Detection of Sales Navigator status
• Existence of a LinkedIn connection with a prospect
• Conversations and messages needed for follow-up
• Replies received and connection requests
• Public information from prospect profiles
• History of prospecting actions

Spruce is an independent solution — not affiliated with, partnered with, or endorsed by LinkedIn Corporation or Microsoft Corporation.

4. Data processed by artificial intelligence

AI may process certain data to:

• Organize and sort leads
• Scan profiles and assign personas
• Score, rank, or disqualify prospects
• Provide personalized prospecting advice
• Generate personalized messages
• Qualify the "temperature" of replies
• Process certain conversations in AI Setting

AI-generated content is provided as assistance only. The Client remains responsible for configuration and for messages they validate.

5. Purposes and legal bases

6. Retention period

The Client may delete their account from the Application settings. Extended retention may be requested, billed up to a maximum of €25 per month.

7. Data recipients

8. Transfers outside the European Union

GoDaddy.com LLC is based in the United States. These transfers are governed by the standard contractual clauses of the European Commission (Article 46 of the GDPR). Stripe Payments Europe Ltd is based in Ireland (EU): no transfer outside the EU for payments.

9. Cookies

The site uses cookies strictly necessary for the platform's technical operation (authentication, session). No advertising or third-party tracking cookies are set without your consent.

10. Your rights

Under the GDPR, you have the following rights:

• Right of access (art. 15): obtain a copy of your personal data.
• Right to rectification (art. 16): correct inaccurate or incomplete data.
• Right to erasure (art. 17): request deletion of your data.
• Right to data portability (art. 20): receive your data in a structured format.
• Right to object (art. 21): object to processing based on legitimate interest.
• Right to restriction (art. 18): request temporary restriction of processing.

Contact: contact@getspruce.io. Response within 30 days. You can also contact the CNIL — www.cnil.fr.

Prospect data: The Client is responsible for the data of their prospects imported into the Application and for objection requests made by their prospects.

11. Contractual confidentiality

Each party agrees to preserve the confidentiality of non-public information: sales data, prospect lists, strategies, access credentials, financial information, and internal content. This obligation remains in effect throughout the relationship and after its termination.

12. Security

Spruce implements appropriate technical and organizational measures:

• Encryption of communications (HTTPS/TLS)
• Access control and secure authentication
• Hashed passwords
• GDPR-compliant measures

13. Changes

Spruce reserves the right to modify this policy at any time. Any substantial change will be notified to you by email or via the platform. Continued use constitutes acceptance.