Privacy Policy

1. Introduction

SpuddySearch ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SMS-based search service.

By using SpuddySearch, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Username, password (encrypted), and phone number
• User Preferences: Location (optional), timezone, unit preferences, and custom context
• Search Queries: The questions you send via SMS

2.2 Automatically Collected Information

• Usage Data: Number of searches, timestamps of activity
• Device Information: Phone number used to send SMS

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our SMS search service
• Process your search queries and deliver responses
• Personalize responses based on your preferences
• Manage your account and subscription
• Send service-related SMS messages
• Monitor usage to prevent abuse
• Improve our service quality

4. Data Storage and Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Passwords are encrypted using bcrypt
• Secure Sessions: Session tokens with 7-day expiration
• Limited Access: Only authorized personnel can access user data
• Regular Security Updates: We maintain up-to-date security practices

Data is stored on secure servers with regular backups. We retain your data only as long as necessary to provide our services or as required by law.

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in these circumstances:

• Service Providers: With TextBee for SMS delivery and Google Gemini for AI responses
• Legal Requirements: If required by law or valid legal process
• Protection: To protect our rights, privacy, safety, or property
• Business Transfer: In connection with a merger or acquisition

6. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a portable format
• Restriction: Request limited processing of your data
• Object: Object to certain types of processing

To exercise these rights, contact us at privacy@spuddysearch.com or use the account management features in your dashboard.

7. SMS Communications

By providing your phone number, you consent to receive:

• Responses to your search queries
• Verification codes for account security
• Important service updates
• Test messages you request

You can stop all SMS communications by texting "STOP" to our service number.

8. Children's Privacy

SpuddySearch is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this privacy policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this policy. Continued use of the service after changes constitutes acceptance.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@spuddysearch.com
• Support: support@spuddysearch.com
• SMS: Text "PRIVACY" to 07356252233

12. Data Controller

SpuddySearch is the data controller responsible for your personal data. We are committed to protecting your privacy and handling your data with care and in compliance with applicable data protection laws.