Legal
Privacy Policy
Effective 2026-11-01
This policy covers the paid team features at sprag.io and the orders for them.
Scope
- The free Sprag CLI on its own sends nothing and needs no account. Every place the CLI can reach over the network is listed in the network access table.
- This policy applies to the paid team features, the pages at sprag.io, and orders for the paid plans.
What we collect
- Orders: organization name, owner and admin emails, the payer's name and email, and business details for a tax invoice (for bank deposit payments). Card numbers and other payment details are handled by the payment provider, and Sprag does not store them.
- Sign-in: the owner or admin email.
- Team sync, from computers that joined a team: display name, OS name and version, CPU architecture, Sprag version, daily totals of spend, savings and delegated runs, and the share of each model family. Host names, user names and file paths are not sent.
- Prompt capture, only on Enterprise and only when the organization turns it on: for prompts a person typed themselves, the time, the project folder name and the text (up to 20,000 characters, with values that look like tokens or keys masked).
Why we use it
- To take and fulfill orders, handle payment and issue tax invoices.
- To open organizations, sign people in and show the team dashboard.
- To answer questions and requests, and to meet legal duties.
How long we keep it
- Organization data is deleted within 30 days after the organization is closed.
- Contract and payment records are kept for 5 years, and consumer complaint and dispute records for 3 years, as the Act on Consumer Protection in Electronic Commerce requires.
- We do not sell personal data, and we share it only with the processors below or where the law requires.
Processors and overseas transfer
| Recipient | Country | Items | Purpose | Retention | If you refuse |
|---|---|---|---|---|---|
| Supabase Inc. | United States (the company). Data is stored in Seoul, South Korea (ap-northeast-2). | Sign-in email, organization data, team sync data and, if turned on, captured prompts | Database and authentication | Until 30 days after the organization is closed | The team features cannot be used without it. |
| Toss Payments Co., Ltd. | South Korea (domestic) | Payer name, email and payment details | Payments in Korea | Payment records for 5 years | Pay by bank deposit or through Paddle instead. |
| Resend, Inc. | United States | Sign-in email address | Sending sign-in code emails | Until the email is delivered, then as Resend's own retention policy states | You cannot sign in to the team dashboard without it. |
| Paddle.com Market Ltd | United Kingdom | Payer name, email, payment details and tax information | Overseas payment and sales as the Merchant of Record | As the law requires and as Paddle's own privacy notice states | Overseas payment becomes unavailable. Pay in Korea or by bank deposit instead. |
Your rights
You can ask to see, correct, delete or stop the processing of your personal data. Write to sales@sprag.io and we will handle the request without delay.
How we destroy data
When the retention period ends or the purpose is fulfilled, we delete the data in a way that cannot be restored. Records we must keep by law are kept separately until that period ends.
Cookies and similar tools
- sprag.io has no advertising cookies and no analytics scripts, and the site does not set cookies of its own.
- Your browser's local storage keeps your language choice and, after you sign in at sprag.io/team, the sign-in session.
- Pages load fonts from Google Fonts, and the dashboard pages load a script from jsDelivr, so those providers see your IP address as in any web request.
Security measures
- Data is encrypted in transit.
- Row-level access control in the database limits each person to the data of their own organization.
- We collect only what the service needs.
Privacy officer
Name: 고주호. Email: sales@sprag.io
Changes to this policy
If we change this policy, we post the new version on this page with its effective date before it takes effect.
Questions: sales@sprag.io