Privacy Policy
This Privacy Policy explains what personal information Sprouto collects through our website and services, how we use it, who we share it with, and the rights you have over it.
1. Who We Are
Sprouto, 37th Floor, One Canada Square, London, E14 5AA, United Kingdom, is the controller of the personal information described in this policy. It covers www.sprouto.com, including its Sprouto Enterprise pages, and the services we provide. We handle personal information in line with the UK General Data Protection Regulation and the Data Protection Act 2018.
2. Information We Collect
We collect the information you give us: • Consultation and contact forms: your name, email address, phone number, project description and any files you attach, and whether you would like an NDA. • Enterprise contact form: your name, job title, email address, phone number, organisation, turnover range, area of interest and project details. • ScopeAI: your project description, any files you upload, and your answers and choices while building an estimate. • Payments: your name, business name, email address, phone number and billing address, collected by Stripe at checkout. • Discovery calls: the details you enter when booking through Cal.com. We also collect some information automatically: your IP address, browser and device details, and the pages you request, in our hosting provider's logs.
3. How We Use Your Information
We use your information to: • Reply to your enquiries and prepare proposals and estimates. • Take payments, manage subscriptions and keep financial records. • Deliver, support and improve our services and website. • Keep our website secure and prevent spam and abuse. To stop automated abuse, we briefly use your IP address to limit how often our forms and estimator can be used. It is held in memory only, for up to an hour, and is not stored or included in the messages we receive.
4. Legal Basis for Processing
We process your information to take steps at your request before entering a contract and to perform our contract with you, for our legitimate interests in running, securing and improving our business, and to meet our legal obligations, such as keeping financial records.
5. ScopeAI & AI Models
When you use ScopeAI, your project description, files and answers are sent to our estimator service, which uses third-party AI models to write your scope of work and price it. Your estimate is kept so you can come back to it and pay for it. You can ask us to delete it at any time. We do not use the details of your project to train AI models.
6. Cookies
Our website does not set advertising or analytics cookies. When you book a call, Cal.com's booking window may set cookies it needs to work. When you pay, you do so on Stripe's checkout page, which uses cookies for security and fraud prevention. Their own policies cover these. If we introduce analytics in future, we will update this policy and ask for your consent where it is required.
7. Sharing Your Information
We do not sell your personal information. We share it only with providers that help us run our business, under contracts that protect it: • Vercel, which hosts our website. • Resend, which delivers our form notification emails. • Stripe, which processes payments and subscriptions. • Cal.com, which handles discovery call bookings. • Our estimator service's hosting and AI model providers, for ScopeAI. We may also disclose information where the law requires it, or to protect our rights, clients or users.
8. International Transfers
Some of these providers process data outside the UK, including in the United States. Where they do, we rely on safeguards recognised under UK law, such as the UK Extension to the EU-US Data Privacy Framework or the UK International Data Transfer Addendum.
9. Data Retention
We keep enquiries and estimates for up to two years after our last contact, unless you become a client. Client and payment records are kept for six years after an engagement ends, to meet tax and accounting requirements. You can ask us to delete your information sooner, unless we need to keep it by law.
10. Data Security
We use appropriate technical and organisational measures to protect your information, including encrypted connections across our website and limiting access to the people who need it. No method of transmission or storage is completely secure, but we review our safeguards regularly.
11. Your Rights
You have the right to access, correct or delete your personal information, to restrict or object to how we use it, and to receive a copy of it in a portable format. To use any of these rights, email us. If you are unhappy with how we handle your information, you can complain to the Information Commissioner's Office at ico.org.uk.
12. Changes & Contact
We may update this policy from time to time. The date at the top of this page shows when it last changed. Questions about this policy or your information? Contact us at hello@sprouto.com.
