The Spool List ("we," "us," or "our") operates The Spool List mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information. By using the App, you agree to this policy.
1. Information We Collect
1.1 Information you provide directly
- Account information: Name, email address, and password when you register.
- Profile information: Profile photo, bio, location (city/region), and equipment tags if you register as a Maker.
- Job postings: Project descriptions, budgets, file attachments (STL, STEP, DXF, SVG, PDF, images), and related metadata.
- Messages: Text and file content sent through the in-app messaging system.
- Payment information: We do not store payment card details. Stripe handles card/bank payments; WalletConnect handles on-chain transactions. We store only transaction IDs and status.
- Support communications: Messages you send to our support team.
1.2 Information collected automatically
- Usage data: Features used, screens viewed, taps, session duration.
- Device information: Device type, OS version, unique identifiers, app version.
- Log data: IP address, access times, crash reports.
- Location: Approximate (city/region) from IP, or precise if you grant permission — used to match buyers with nearby makers.
- Analytics: Firebase Analytics for aggregated usage patterns.
- Crash reporting: Firebase Crashlytics for stability.
1.3 Information from third parties
- Google/Apple Sign-In: Name and email from your chosen provider.
- Stripe: Transaction status and payout information.
- LiveKit: Stream metadata (session IDs, duration). Stream content is not stored beyond the live session unless you explicitly save a recording.
2. How We Use Your Information
- Create and manage your account
- Match buyers with makers based on equipment, location, and job requirements
- Process payments and manage escrow
- Deliver and display live streams and files
- Send transactional notifications (job updates, messages, payment confirmations)
- Send promotional communications if you've opted in
- Improve and develop new features
- Detect and prevent fraud and prohibited activity
- Comply with legal obligations
3. How We Share Your Information
We do not sell your personal information.
3.1 With other users
Your public profile (name, photo, bio, equipment tags, ratings) is visible to other users. Public streams are visible to all App users.
3.2 With service providers
| Provider | Purpose |
|---|---|
| Firebase (Google) | Auth, database, analytics, crash reporting |
| Stripe | Payment processing and payouts |
| LiveKit | Real-time live streaming |
| WalletConnect / Reown | Crypto wallet connection |
| RevenueCat | Subscription management |
| Apple | App distribution and in-app purchases |
3.3 For legal reasons
We may disclose information if required by law, court order, or to protect the safety of our users or others.
3.4 Business transfers
If The Spool List is acquired or sold, your information may be transferred. We will notify you before transfer.
4. Data Retention
We retain your information while your account is active or as needed for legal compliance. You may request deletion by emailing [email protected]. Transaction records are retained for up to 7 years. Backups are purged within 90 days.
5. Data Security
We use TLS/HTTPS encryption for all data in transit, Firebase Security Rules for database access control, malware scanning for all uploaded files, and job-scoped file access with no public URLs.
6. Children's Privacy
The App is not directed to children under 13. We do not knowingly collect data from children under 13. The App is rated 17+ on the App Store. Contact [email protected] if you believe a child has submitted information.
7. Your Rights and Choices
- Access: Request a copy of your personal data.
- Correction: Request correction of inaccurate data.
- Deletion: Request deletion of your account and data.
- Opt-out of marketing: Unsubscribe via email link or by contacting us.
- Push notifications: Disable in iOS Settings at any time.
- Location: Revoke in iOS Settings → Privacy & Security.
To exercise rights: [email protected]
California (CCPA): We do not sell personal information. Contact us for access, deletion, or opt-out requests.
EEA/UK (GDPR): Lawful bases include contract performance, legitimate interests, consent, and legal obligation. You may lodge a complaint with your local data protection authority.
8. International Data Transfers
The Spool List is based in the United States. By using the App from outside the US, you consent to your information being processed in the United States.
9. Changes to This Policy
We'll notify you of material changes via the App or email. Continued use after the effective date constitutes acceptance.
10. Contact
Privacy: [email protected]
Support: [email protected]