Legal
Privacy Notice
1. Who we are
Spanstream LLC, a Wyoming limited liability company doing business as SpanStream ("SpanStream", "we", "us"), 30 N Gould St, Suite 4000, Sheridan, WY 82801, United States, is the controller of the personal information described here. This notice covers spanstream.com and spanstream.ai. Contact us through our contact form (topic "Legal/privacy") or by post to the address above.
2. What we collect and why
- Contact form: your name, email address, the topic you choose and your message. We use them to read, route and answer your message and keep a record of the conversation. The website keeps no copy. Giving us these details is optional, but we need them to reply.
- Server and request logs: time, page requested, IP address, approximate location and browser type. We use them to deliver, secure and fix the website. We keep them for 3 days.
- Spam check: the Contact page uses Cloudflare Turnstile, which checks browser and device signals (such as your IP address) to tell people from bots. Cloudflare also uses these signals, as a separate controller, to improve its bot detection, under its Turnstile Privacy Addendum (opens in a new tab).
Please do not send sensitive personal information through the form.
No cookies, no analytics. Our website sets no cookies and uses no analytics, advertising or social-media tools. Cloudflare may set a strictly necessary security cookie only if it shows you a security check. We do not track you across websites, so Do Not Track and Global Privacy Control signals change nothing here; we treat a Global Privacy Control signal as a request to opt out of sale or sharing, which we do not do anyway.
AI assistance. AI assistants help us sort messages. A person decides anything important. We make no decisions about you by automated means alone that have legal or similarly significant effects.
Client work. Client data we handle while doing client work is covered by our written agreement with that client.
3. Legal basis (EEA and UK)
Under the GDPR and UK GDPR we rely on our legitimate interests: replying to messages, keeping records of our correspondence, and keeping the website secure and free of spam. You can object at any time (section 7).
4. We do not sell or share personal information
We do not sell or share personal information, and we do not use it for targeted advertising.
5. Who receives it
Our service providers: Cloudflare (hosting, security, spam check), Resend (delivering form messages) and our team email and AI-assistant service provider. We may also disclose information where the law requires, to protect our rights, or to a successor in a merger or sale of our business.
These providers are based in the United States. For transfers from the EEA, UK or Switzerland we rely on safeguards such as the EU-US Data Privacy Framework or standard contractual clauses.
6. How long we keep it
- Form messages and our replies: 12 months after the conversation ends, unless we need a message longer for a legal claim or tax record. Resend keeps its delivery copy for 30 days.
- Request logs: 3 days.
- Data Cloudflare processes for its network and spam check: under Cloudflare's own policies.
7. Your rights
EEA and UK. You can ask to access, correct or delete your personal information, to restrict or object to its use, and to receive it in a portable format. You can complain to your local data-protection authority or, in the UK, the Information Commissioner's Office (ICO).
US state privacy laws. Where they apply, you can ask to know, access, correct and delete your personal information, and to opt out of its sale or sharing. We will not discriminate against you for using these rights. You may use an authorised agent.
How to ask. Use our contact form (topic "Legal/privacy") or write to us at the address in section 1. We may need to verify your request.
8. Children
The website is not directed at children under 16.
9. Changes
We will post any update here with a new "Last updated" date.