Privacy Policy
Spion is a browser extension that records workflows you choose to capture, analyzes them with AI, and helps you turn them into automations. This policy explains exactly what Spion collects, what it does with that information, and what it never does. We've written it in plain language because that's how we'd want it explained to us.
The short version: Your recordings live in your browser. When you ask Spion to analyze a recording, the captured steps are sent for AI processing to generate your suggested workflow — and are not stored on our servers afterward. We keep a small amount of account data (your email, your plan, and your recording counts) so the product can work. We don't sell your data, ever.
What Spion records
Spion only captures activity while you have explicitly started a recording by clicking record. When a recording is active, Spion captures the sequence of actions you take in your browser — such as clicks, navigation between pages, and form interactions — so it can reconstruct and analyze your workflow. Spion does not run in the background watching you. Nothing is captured before you press record or after you press stop.
What we collect and store
- Your email address — used as your account identifier so your plan and recording limits work across sessions and devices.
- Your plan and usage counts — which plan you're on (Free, Pro, or Ultra) and how many recordings you've made this month, so we can apply your limits.
- Export activity — which export formats you use (for example, Claude or Zapier), so we can understand which features matter most. This is logged as a count and tool name, not the content of your workflows.
Your actual recordings and saved workflows are stored locally in your browser, not on our servers.
How AI analysis works
When you choose to analyze a recording, the captured steps are sent to our processing service, which uses Anthropic's Claude API to generate your optimized workflow suggestion. This data is used solely to produce your result and is not retained on our servers after the analysis is returned. We route these requests through our own secure server so that no API credentials are ever exposed in the extension.
What we never do
- We never sell your personal information or your workflow data to anyone.
- We never capture your activity outside of an active recording you started.
- We never store the content of your recordings on our servers after analysis.
- We never use advertising trackers inside the extension.
Third-party services
Spion relies on a small number of trusted providers to operate: Anthropic (AI analysis), Supabase (account and usage database), Cloudflare (secure request routing), and Lemon Squeezy (payment processing for paid plans). Each processes only the data necessary for its function. Payment details are handled entirely by Lemon Squeezy as merchant of record — Spion never sees or stores your card information.
Data retention
Account data (email, plan, usage counts) is retained while your account is active. Recording content sent for analysis is not retained after the result is returned. You can request deletion of your account data at any time by emailing us.
Your rights
You can clear all locally stored recordings and workflows at any time from the extension's settings. You can request access to, correction of, or deletion of the account data we hold about you by contacting us at the address below. We'll respond promptly.
Children
Spion is a productivity tool intended for professional use and is not directed at children under 16. We do not knowingly collect data from children.
Changes to this policy
If we make material changes to this policy, we'll update the date at the top and, where appropriate, notify users. Continued use of Spion after changes means you accept the updated policy.
Contact
Questions about your privacy or this policy? Email us at hello@spion.io and we'll help.