Privacy Policy

We at Spree are committed to protecting your privacy. This privacy policy applies to our browser extension (Spree), our website (https://getspree.co), any subdomains of GetSpree.co.

The information we gather or process is used solely for core functionality of Spree and to improve the quality and security of our service. Your information isn't and has never been sold to third parties.

What information is being stored, or accessed?

Spree account information

Your name, email, account settings, and extension data (such as to-dos and links) are transferred and stored securely, solely for your usage within our extension and not shared with any other third parties, except as specified in this policy.

Data accessible through WebExtensions API

WebExtension APIs used within Chrome Extensions and Firefox Add-ons have fine-grained permission levels that are enforced by the Web Browser, restricting information that our extension has access to within your Browser. The Spree extension can only access specific information that you have explicitly granted permission for. We do not track your browsing history.

Additional optional permissions may be requested when you enable specific features. When you enable a feature that requests an optional permission, your Web Browser will make it clear what permission(s) are being requested. The feature will be accessible once you choose to allow the requested permission(s).

Information/Permission Feature Where it is used Optional
Tabs, Web Navigation Managing Tabs Accessing tabs and web navigation are mandatory to provide the core funcitonality of the extension. We interact with the Tabs and Web Navigation APIs to keep track of your tabs and add the Spree overlay, restore Sprees by creating a new tab, and updating the icons and titles of tabs. No
Local Storage Storing Sprees We store your Sprees, tab URLs, icons, and other data in your browsers' local storage. No
Identity Online Account Used to assist and identify users when they sign up for an online Spree account to backup their Sprees, and share them between devices. Yes

You can prevent your location and/or IP address from being sent to directly to our third-party weather provider by turning off the Weather app (Settings → General → Toggle Weather). Alternatively, with the Spree Plus advanced Weather app, your location is sent only to our servers to retrieve current weather information.

Feature usage data

To improve the content, features and overall experience of the extension, we gather and log data on how our users access and use Spree Dashboard. For example, we may log actions like clicking on a photo source, favoriting a quote, or completing a to-do (not the content of the to-do, just the action of completing it).

Some of this usage data is sent to Google Analytics. In these cases, we do not send any identifying information that could be correlated with your account. We also make use of their IP anonymization feature to prevent your IP from being associated with your usage data.

What vendors/sub-processors do you use?

We use several vendors/sub-processors to conduct various aspects of our business.

Vendor Purpose
Google Cloud Services Google Cloud Services powers our core Cloud infrastructure (providing the necessary hardware, software, networking, storage, and other related technology required).
Google Analytics Google Analytics is an industry standard third-party analytics service that we use to better understand the usage and performance of our service(s). The information is anonymized so that it is not tied to your IP address.
Slack Used for internal communications. User data may be discussed for support purposes.
Gmail Used for internal communications. User data may be discussed for support purposes.

What are my rights in relation to my personal data?

By using Spree Dashboard, you may exercise the following rights:

The right to refuse to provide your personal data

The voluntary Personal Data you provide to us is an integral part of your use of Spree Dashboard. You can choose to forego the provision of that data, but you will be restricted from using our services.

The right to access and modify your personal data

Through your use of Spree, you can access and amend your own data at any time. This includes changing or removing your Sprees, tabs, URLs, etc.

The right to be forgotten

You can delete your account by removing the extension from your browser, and sending us a removal request to hello@getspree.co. See the "What happens to my data when I delete my account?" section below to learn more about the deletion process.

The right to obtain your personal data

Upon request, we will provide a data export of all your data stored in our system. If you wish to receive an export of your data, or have any problems deleting your account, please contact us.

The right to submit a complaint

If you have a complaint about the way in which your Personal Data is handled, please contact us. After submitting a complaint, we will reply within five (5) business days to confirm that we have received your complaint. After receiving your complaint, we will investigate it and provide you with our response within two (2) weeks.

The right to submit a complaint with a data protection authority

If you are a resident of the European Union, and you are not satisfied with the outcome of the complaint submitted to us, you have the right to lodge a complaint with your local data protection authority.

What happens to my data when I delete my account?

Upon account deletion, your account is flagged as deleted and your data is no longer accessible. This data is stored for a grace period (90 days) to allow for account recovery in the case of accidental or malicious deletion, or your desire to reopen your account. Upon request, you can expedite the process of performing a hard delete to remove all of your personal data from our databases. After a hard delete, your data will be deleted from our system, but could still be present in encrypted database backups for up to an additional 35 days.

To request an expedited hard delete, please contact us.

Is my data secure?

Data security is a priority at all times. We use a Tier 1 cloud provider to run our operations (Google Cloud Services).

In Transit

All data communication in transit to and from our servers is secured using HTTPS/TLS. All Spree domains have HTTP Strict Transport Security (HSTS) enabled and are in the HSTS Preload list on the major browsers supporting this feature.

At Rest

All data in our databases and their associated backups are encrypted at rest.

Will the privacy policy change?

Although most changes are likely to be minor, Spree may change its Privacy Policy from time to time, and at Spree’s sole discretion. Spree encourages visitors to frequently check this page for any changes to its Privacy Policy. Your continued use of this site after any change in this Privacy Policy will constitute your acceptance of such change.

If you have any questions about Spree's Privacy policy, please contact us.

Last updated December 09, 2020.