Legal

Privacy Policy

This Privacy Policy explains how Canfield Labs, LLC ("Canfield Labs," "we," "us," or "our"), which operates the Shpiel website and application at shpiel.ai (the "Service"), collects, uses, shares, and protects information about you. By using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information we collect

Information you provide

• Account information. When you sign in, we collect your email address. Shpiel uses passwordless "magic link" and one-time-code sign-in, so we do not collect or store a password.
• Speech content and inputs. To write your speech, you provide details such as the occasion, the speaker's role, names, a date, your Jewish tradition, tone and length preferences, and the stories, memories, and notes you choose to share. These may include personal information about you and about others (for example, a person being honored or remembered).
• Generated speeches. The drafts Shpiel produces, and any edits you make, may be saved to your account so you can revisit them.
• Communications. If you email us or contact support, we receive your message and contact details.

Payment information

Payments are processed by our third-party payment processor, Stripe. We do not collect or store your full payment card number. Stripe provides us with limited transaction data (such as confirmation of payment, plan, and the last four digits or card brand) needed to manage your purchase and subscription. Stripe's handling of your information is governed by Stripe's own privacy policy.

Information collected automatically

• Usage and log data. We and our providers automatically record information such as your IP address, browser type, device and operating system, pages viewed, actions taken (for example, generating or editing a speech), and timestamps.
• Cookies and local storage. See Section 5.

2. How we use information

We use information to:

• Provide, operate, and maintain the Service, including generating and editing your speeches and saving your drafts;
• Authenticate your account and keep it secure;
• Process payments, manage subscriptions, and prevent fraud;
• Respond to your inquiries and provide support;
• Understand how the Service is used so we can improve it, fix problems, and develop new features;
• Send you service-related communications (such as sign-in links, receipts, and important notices);
• Save the draft you started and send you occasional reminders about it (for example, a link back to your draft before your event). These are tied to that draft, and you can unsubscribe from them at any time using the link in any such email;
• Protect the rights, safety, and security of Shpiel, our users, and the public; and
• Comply with legal obligations and enforce our Terms of Service.

3. How AI processing works

Shpiel generates speeches using third-party artificial-intelligence models. When you create or edit a speech, the details you provide are sent to our AI provider (currently Anthropic) to produce the text, and to free authoritative Jewish text and calendar reference services to retrieve Torah portions and source texts. This processing is necessary to deliver the Service.

We do not sell your personal information, and we do not use the personal content of your speeches to train our own models. Our AI provider processes your inputs to generate output and under its applicable enterprise or API terms; we encourage you to review that provider's policies. Because AI output can be imperfect, please do not include information you would not want processed by a third-party AI service, and always review your speech before relying on it.

4. How we share information

We share information only as described below. We do not sell your personal information.

• Service providers and subprocessors. We use trusted vendors to run the Service, including hosting and serverless functions (Vercel), database and authentication (Supabase), AI generation (Anthropic), payments (Stripe), email delivery, and authoritative Jewish text and calendar reference services. They may process information only to provide services to us.
• Legal and safety. We may disclose information if required by law, subpoena, or legal process, or if we believe disclosure is necessary to protect rights, safety, property, or to investigate fraud or security issues.
• Business transfers. If Canfield Labs is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.
• Aggregated or de-identified data. We may share information that cannot reasonably be used to identify you.
• With your direction. We share information when you ask us to, for example when you download or share a speech you created.

5. Cookies and local storage

We use cookies and browser local storage for a few distinct purposes:

• Essential. To keep you signed in, hold an in-progress speech, and remember your preferences. These are required for the Service to work. Sign-in is handled by our authentication provider, Supabase.
• Analytics. We use Google Analytics 4 to understand how the Service is used and improve it. It sets first-party cookies (for example _ga and _ga_<id>) and collects usage data such as pages viewed and general location. We also use Vercel Web Analytics, which is cookieless and stores only aggregated, anonymized data.
• Advertising and conversion measurement. We use Google Ads conversion measurement and, where enabled, remarketing to measure the performance of our advertising and reach people who have visited Shpiel. This may set cookies such as _gcl_au. We do not sell your personal information.

Google may process this data as described in Google's Privacy Policy. You can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on, and manage ad personalization in your Google Ad Settings. You can also control or clear cookies through your browser settings, though disabling essential cookies or storage may prevent parts of the Service from working.

6. Data retention

We keep your information for as long as your account is active or as needed to provide the Service, and thereafter as necessary to comply with legal obligations, resolve disputes, and enforce our agreements. You can delete your saved speeches at any time, and you can ask us to delete your account and associated personal information as described in Section 8. Certain records (such as transaction records) may be retained where required by law.

7. Security

We use reasonable administrative, technical, and organizational measures designed to protect your information, including encryption in transit, access controls, and row-level data isolation so that each account can access only its own data. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Your choices and rights

You may access and update your saved speeches within the Service, and you can request to access, correct, export, or delete your personal information by emailing us at team@shpiel.ai. We will respond consistent with applicable law.

U.S. state privacy rights. Depending on your state (for example, California under the CCPA/CPRA), you may have rights to know what personal information we collect, to access or delete it, to correct it, and to not be discriminated against for exercising these rights. We do not sell or "share" personal information for cross-context behavioral advertising.

EEA/UK rights. If you are in the European Economic Area or the United Kingdom, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability, and to lodge a complaint with a supervisory authority. Our legal bases for processing include performing our contract with you, your consent, and our legitimate interests in operating and improving the Service.

To exercise any right, contact team@shpiel.ai. We may need to verify your identity before acting on a request.

9. Children's privacy

The Service is intended for adults. You must be at least 18 years old (or the age of majority in your jurisdiction) to create an account or make a purchase. Speeches created with Shpiel may reference or be about minors (for example, a bar or bat mitzvah child) where an adult provides that information, but we do not knowingly collect personal information directly from children under 13 (or under the minimum age in your region). If you believe a child has provided us personal information, contact us and we will delete it.

10. International users

Shpiel is operated from the United States, and we and our providers may process and store information in the United States and other countries. If you use the Service from outside the United States, you understand that your information may be transferred to and processed in countries whose data-protection laws may differ from those in your country.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice as required by law. Your continued use of the Service after an update means you accept the revised Policy.

12. Contact us

If you have questions about this Privacy Policy or your information, contact us at team@shpiel.ai. Shpiel is a service of Canfield Labs, LLC (Delaware, USA).