This policy explains how SpinConvert ("SpinConvert", "we", "us") handles personal information when you visit spinconvert.com, join our early-access list, create a SpinConvert account, or interact with a SpinConvert campaign on a merchant's online store.
1. Who this policy covers
- Website visitors and early-access sign-ups: people who browse spinconvert.com or submit our forms.
- Merchants: businesses and their team members who use the SpinConvert dashboard.
- Shoppers: visitors to a merchant's store who enter a SpinConvert spin-to-win campaign. For this data the merchant is the controller and SpinConvert processes it on the merchant's behalf.
2. Information we collect
Information you give us
- Early-access and contact forms: email address, store website, store platform, your message and your consent choice.
- Merchant accounts: name, email address, password (stored securely by our authentication provider) or Google sign-in details, workspace and store details, and billing information handled by our payment provider.
- Campaign entries (shoppers): the email address and any optional fields the merchant's form asks for, the consent choice, the prize won and the reward code issued.
Information collected automatically
- Technical data needed to run the service securely, such as IP address, browser type, pages visited and timestamps, which are kept in security and server logs.
- Campaign events such as impressions, wheel opens, spins and reward redemptions, used to provide analytics to the merchant.
- Optional analytics cookies on spinconvert.com, only if you accept them (see our Cookie Policy).
3. How we use information
- To provide, operate and secure SpinConvert, including bot protection and fraud prevention.
- To send account, onboarding and early-access emails, and product updates you agreed to.
- To show merchants their campaign leads and performance analytics.
- To process subscriptions and payments.
- To respond to your messages and provide support.
- To meet legal obligations.
We do not sell personal information, and we do not use shoppers' campaign data for our own marketing.
4. Legal bases
Where data protection laws such as the GDPR apply, we rely on your consent (for example, for marketing emails and analytics cookies), the performance of a contract (to provide the service to merchants), and our legitimate interests (to keep the service secure and improve it).
5. Service providers
We use trusted providers to run SpinConvert, who process data on our instructions:
- Amazon Web Services: hosting, database and authentication.
- Mailgun: email delivery.
- Cloudflare Turnstile: bot protection on our forms and campaigns.
- Google: sign-in with Google, and Google Analytics if you accept analytics cookies.
- Stripe: subscription billing and payments (we do not store full card details).
Some providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.
6. Retention
We keep early-access sign-ups until launch communications are complete or you unsubscribe. We keep merchant account data while the account is active and for a limited period afterwards for legal and accounting purposes. We keep campaign leads for as long as the merchant keeps them in their account. Security logs are kept for a limited period, normally no more than 90 days.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent at any time. Every marketing email includes an unsubscribe link. To make a request, email hello@spinconvert.com. If you entered a merchant's campaign, you can also contact that merchant directly. You may also complain to your local data protection authority.
8. Security
We use encryption in transit and at rest, access controls, isolation between merchant workspaces, and server-side verification to protect data. No system is completely secure, but we work to protect your information and will notify affected users of a breach where the law requires it.
9. Children
SpinConvert is a business service and is not directed at children under 16.
10. Changes
We may update this policy from time to time. We will post the new version here and update the date above, and tell merchants about significant changes.
11. Contact
Questions about privacy? Email hello@spinconvert.com or use our contact form.