Privacy Policy

Last updated: 4 February 2026

1. Introduction

Spikefrost is a software platform operated by Spikefrost Limited, a company registered in England and Wales (Company Number 16978632). This Privacy Policy describes how personal data is collected, used, stored, and protected when you access or use Spikefrost's websites, applications, and services.

This is the same Privacy Policy that appears on our homepage at www.spikefrost.com and on our OAuth consent screen.

By using Spikefrost, you acknowledge and agree to the practices described in this policy.

2. Legal Entity and Scope

Spikefrost is operated by Spikefrost Limited, a company registered in England and Wales. The data controller for personal data processed through the Spikefrost platform is Spikefrost Limited, registered at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

Where this policy refers to "Spikefrost", "we", "us", or "our", it refers to Spikefrost Limited.

3. Information We Collect

We collect information necessary to operate, secure, and improve the platform.

Information you provide:

  • Account details such as name, email address, and company information
  • Authentication credentials
  • Communications and support requests

Information generated through use:

  • Platform usage data, logs, timestamps, and interaction events
  • Configuration data related to agents, workflows, and projects
  • Technical data such as IP address, browser type, device information

Information received from third-party services:

  • When you connect third-party accounts (such as Google Workspace), we receive data from those services as described in Sections 5 and 6 of this policy

We do not intentionally collect sensitive personal data.

4. How We Use Information

We use collected data to:

  • Provide and operate Spikefrost
  • Authenticate users and manage accounts
  • Maintain security and prevent misuse
  • Improve performance, reliability, and user experience
  • Communicate service-related updates
  • Enable integrations with third-party services you choose to connect

We do not sell personal data.

5. Google API Services — User Data Disclosure

Spikefrost integrates with Google Workspace services (including Google Drive, Google Docs, Google Sheets, and Google Calendar) to enable users to build applications that interact with their Google data. When you authorise Spikefrost to access your Google account, the following applies:

5.1 What Google User Data We Access

Spikefrost may request access to the following types of Google user data, depending on the features you choose to use:

  • Google Drive: File metadata, file content, folder structure, and sharing permissions, to enable your Spikefrost projects to read from, write to, and manage files in your Google Drive
  • Google Docs: Document content and metadata, to enable your Spikefrost projects to create, read, and edit documents
  • Google Sheets: Spreadsheet content and metadata, to enable your Spikefrost projects to create, read, and edit spreadsheets
  • Google Calendar: Calendar events and metadata, to enable your Spikefrost projects to read and manage calendar data
  • Google Account Profile: Basic profile information (name, email address), for authentication and account identification purposes

We only request access to the scopes necessary to deliver the functionality you have chosen to use.

5.2 How We Use Google User Data

Google user data is used solely to:

  • Provide the specific Spikefrost features and integrations you have chosen to enable
  • Execute actions on your Google Workspace data as directed by you through the Spikefrost platform
  • Display relevant data within the Spikefrost interface to support your workflows

We do not use Google user data to:

  • Serve advertisements, including retargeting, personalised, or interest-based advertising
  • Sell or transfer data to third parties such as advertising platforms, data brokers, or information resellers
  • Train general-purpose or non-personalised AI or machine learning models
  • Determine creditworthiness or for lending purposes
  • Conduct surveillance or track users beyond the scope of delivering requested functionality

5.3 How We Store Google User Data

Google user data accessed through integrations is processed in real time to deliver requested functionality. Where data is cached or stored temporarily, it is held in secure, encrypted environments and retained only for as long as necessary to deliver the service. You may revoke access to your Google data at any time through your Google Account permissions at https://myaccount.google.com/permissions or by disconnecting the integration within Spikefrost.

5.4 How We Share Google User Data

Google user data is only shared with:

  • AI model providers (such as Anthropic), solely to process your requests and deliver platform functionality. These providers act as data processors under contractual safeguards and do not retain your data beyond the scope of processing your request
  • Infrastructure providers (such as Cloudflare and Fly.io), solely for hosting and compute purposes necessary to deliver the service

Google user data is never shared with advertisers, data brokers, or any other third parties for purposes unrelated to delivering the Spikefrost service.

5.5 Limited Use Disclosure

Spikefrost's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5.6 Human Access to Google User Data

Spikefrost does not allow humans to read your Google user data unless:

  • You have given affirmative consent for a specific purpose (for example, providing technical support on a specific issue you have raised)
  • It is necessary for security purposes, such as investigating a bug or abuse
  • It is required to comply with applicable law
  • The data has been aggregated and anonymised and is used solely for internal operations

6. AI Processing and Model Providers

Spikefrost enables interaction with AI-powered agents.

User inputs and outputs may be processed by third-party AI model providers solely to deliver requested functionality. These providers act as data processors under contractual safeguards.

Customer data, including any data received from Google APIs, is not used to train proprietary or third-party AI or machine learning models unless explicitly agreed in writing.

7. Data Sharing

We may share data only:

  • With infrastructure, hosting, analytics, or security service providers
  • With AI model providers to execute user requests
  • When required by law or legal process
  • In connection with corporate transactions such as mergers or acquisitions

Google user data is subject to the additional restrictions described in Section 5 of this policy. All third parties are required to handle data in accordance with this policy.

8. Data Storage and Security

Data is stored in secure environments using industry-standard technical and organisational safeguards, including encryption in transit and at rest. Access is restricted to authorised personnel.

9. Data Retention

Personal data is retained only as long as necessary to:

  • Provide the service
  • Comply with legal obligations
  • Resolve disputes and enforce agreements

Users may request account and data deletion, subject to legal requirements. Upon deletion, all associated Google user data held by Spikefrost will also be deleted.

10. International Data Transfers

Data may be processed or stored in jurisdictions where Spikefrost Limited or its service providers operate. Appropriate safeguards are applied where required by law, including Standard Contractual Clauses approved by the UK Information Commissioner's Office where applicable.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion
  • Restrict or object to certain processing

For Google user data specifically, you may also revoke Spikefrost's access at any time through your Google Account permissions at https://myaccount.google.com/permissions.

Requests can be made using the contact details below.

12. Cookies and Tracking

Spikefrost uses cookies and similar technologies to:

  • Maintain sessions
  • Improve usability
  • Monitor platform performance

You can manage cookies through your browser settings.

13. Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with a revised date. If we change the way we use Google user data, we will notify you and prompt you to consent to the updated policy before making use of your Google data in any new way.

Continued use of Spikefrost constitutes acceptance of the updated policy.

14. Contact

For privacy-related questions or requests:

Email: privacy@spikefrost.com
Website: https://www.spikefrost.com