Privacy Policy — Spio
Last updated: 12 September 2026 Operated by: Spio LLC, 1680 Michigan Ave, Ste 700, Miami Beach, FL 33139, USA Contact: privacy@spio.com
1. Who we are
Spio ("we", "us") operates spio.com, a question-and-answer site where visitors ask questions and receive answers generated from an expert's own written material. This policy explains what we collect, why, and what you can do about it.
2. What we collect
When you read the site We do not require an account to read. Our hosting provider, Cloudflare, processes your IP address and request metadata to deliver pages and protect against abuse.
When you ask a question
- The text of your question
- A one-way hashed form of your IP address, used only to enforce a daily limit on
how many questions one person can submit
- Your browser's user agent string
When you register
- Your email address
- Whether you opted in to the weekly email
- Your IP address, user agent, timestamp and the version of the terms you agreed
to, recorded as proof of consent
We do not collect your name, phone number, date of birth, payment details or location beyond what an IP address implies. We do not use advertising trackers or third-party analytics cookies.
3. What is published
Answers are published publicly at spio.com and are visible to anyone, including search engines and AI systems that crawl the web.
Your name and email are never published. Where a question you submitted leads to a published answer, the question may be edited, shortened, merged with similar questions, or rewritten before publication. Do not include information in a question that you would not want to be public.
4. Why we process your data
| Purpose | Lawful basis (UK/EU GDPR) |
|---|---|
| Answering your question and publishing the answer | Legitimate interests |
| Preventing spam and abuse | Legitimate interests |
| Sending you the weekly email | Consent |
| Keeping a record of consent | Legal obligation |
Where we rely on consent, you can withdraw it at any time without affecting processing that already happened.
5. Who we share it with
We do not sell personal data. We share it only with service providers acting on our instructions:
- Cloudflare, Inc. — hosting, content delivery, and the database in which
questions, answers and consent records are stored
- Anthropic PBC — question text and the expert's written material are sent to
Anthropic's API to draft answers. We do not send your email address or any identifying information with it.
- [EMAIL PROVIDER] — sending verification and newsletter emails
Some of these providers process data in the United States. Where required, we rely on [Standard Contractual Clauses / the UK International Data Transfer Addendum / the EU-US Data Privacy Framework] — counsel to confirm the correct mechanism.
We may also disclose data where legally required, or to protect the rights or safety of any person.
6. Automated processing and AI
Answers on this site are drafted by an AI system trained on and constrained to the expert's own written material, and reviewed by the expert before publication. The site discloses this on every page.
No automated decision is made about you that produces legal or similarly significant effects.
7. How long we keep it
- Unclaimed question submissions: deleted after 30 days
- Published questions and answers: retained indefinitely as site content, with
no personal identifiers attached
- Account email and consent records: retained while your account is active and
for [X] years afterwards, since consent records are the evidence that we were permitted to contact you
- Hashed IP records used for rate limiting: deleted after 30 days
8. Your rights
If you are in the UK or EU, you have the right to access, correct, delete, restrict or object to our processing of your data, and to receive a copy in a portable format. If you are in California, you have the right to know what we collect, to delete it, and to opt out of any sale or sharing — we do not sell or share personal information as those terms are defined by the CCPA.
To exercise any of these, email privacy@spio.com. We will respond within one month.
You can unsubscribe from the weekly email at any time using the link in every message.
You have the right to complain to a supervisory authority — in the UK, the Information Commissioner's Office.
9. Cookies
We use one cookie, and only for site administrators signing in to the admin area. It is strictly necessary and stores no personal data.
Your browser's session storage is used to hold a question you are part-way through writing so that you do not lose it. That stays on your device and is never sent to us until you submit.
10. Children
This site is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has given us personal data, email privacy@spio.com and we will delete it.
11. Security
Data is stored on Cloudflare infrastructure and transmitted over HTTPS. Admin access requires a password and all administrative endpoints are authenticated. No system is perfectly secure, and we cannot guarantee absolute security.
12. Changes
If we change this policy we will update the date above. Material changes affecting how we use your data will be notified by email to registered users.