Privacy Policy
Effective 9 September 2026
Last updated 9 September 2026
Supersedes version of 13 April 2026
1. Introduction
Spool (“Spool,” “we,” “us,” or “our”) is an agentic AI execution platform that acts on behalf of verified human users to complete real-world tasks — including making phone calls, scheduling, coordination, and life administration. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our website, mobile application, and platform services (collectively, the “Services”).
Please read this policy carefully. By using our Services, you agree to the practices described here. If you do not agree, please do not use our Services.
This policy covers two groups of people: Spool users, and the people we contact on a user’s behalf. If you received a Spool-assisted call and are looking for your rights, start at Section 7.
2. Age Restriction
Spool is not intended for use by anyone under 18. We do not knowingly collect personal information from anyone under 18, and you may not create an account if you are under that age.
If we become aware that we have collected personal information from someone under 18, we will close the account and delete the information we hold, and confirm to them when it is done. If you believe we may have collected information from a minor, contact us at privacy@tryspool.com.
3. Information We Collect
Account registration and identity verification
Because Spool initiates calls on your behalf, we verify your identity before activating telephony features. We collect:
Your name
Your email address
A callback phone number, which you verify by code
If we introduce paid plans, we will collect billing information at that point and say so here first. If we ever need identity documentation, we will tell you what we need and why before asking.
Waitlist submissions
If you submitted your email to our beta access list, it will be used solely to notify you of beta access opportunities. If you submitted to our newsletter list, it will be used solely to send our newsletter. We will not use waitlist email addresses for any purpose other than the one you specifically opted into, and we will not sell, share, or cross-use them without your separate, express consent.
Task instructions and interactions
When you use Spool to execute tasks, we collect the instructions you provide, including task descriptions, recipient contact information you supply, and any context you share to help us complete your tasks.
Call recordings and transcripts
Spool records the calls it places and receives on your behalf, and produces a written transcript of each one. Both are linked to your account. Recordings are kept for 24 months from the date of the call and then deleted; transcripts are kept with the conversation they belong to. Section 10 has the full retention table. The person on the other end is told the call is being recorded before the conversation begins — that disclosure is part of the assistant’s opening sentence and cannot be turned off.
We keep recordings and transcripts so that you can see what was said on your behalf, so that we can resolve a dispute about what a task produced, and so that we can investigate a complaint from someone we called. They are available to you for your own calls, and to the Spool staff described in Section 9.
Call and task records
Every AI-assisted call is logged and linked to your verified user ID. Logs include the recipient number, timestamp, what the task was, and call duration.
Consent records
When you tell us the basis on which Spool may contact someone — a verified business, a close contact whose consent you certify, an acquaintance who has consented to specific topics, or a person you have not authorised the assistant to speak with at all — we record the basis you chose, the topics you approved, and when you chose it. For that last group, Spool does not place an assistant call: where a task needs them reached, it connects the user to them directly instead. For each call, we also record the basis and topics that were in force at the moment the call was placed.
Suppression records
When a recipient asks us to stop contacting them, we add their number to Spool’s suppression list, after which no Spool assistant can call it. We record the number, when it was suppressed, and how the request reached us. Where the request was made during a call, the request itself is in that call’s recording and transcript.
Your context layer
To personalize task execution without requiring you to re-explain yourself each time, Spool maintains a context layer associated with your account. See Section 5 for how it works and how you control it.
Your vault
The vault holds the things a task sometimes needs but nobody should be able to read — an account number, a policy number, a date of birth. What we collect is the encrypted form only: each value is encrypted on your device using a password we never receive, and what reaches us is ciphertext we cannot open. The label you give an entry is not encrypted, so name entries descriptively rather than revealingly — “insurance member number” rather than the number itself. Section 5 covers what belongs here and Section 11 covers how the encryption works.
Communications with Spool
If you contact our support team, submit feedback, or interact with us through any channel, we collect the content of those communications.
Information collected automatically
Usage data — features accessed, tasks initiated, task completion events, session duration, and interaction logs
Device and technical data — IP address, browser type and version, operating system, device identifiers, and referral URLs
Log data — server logs, error reports, and performance data
Information from third parties
We may receive information from telephony infrastructure partners, and, where you authorize it, third-party services or integrations you connect to your Spool account.
4. How We Use Your Information
Account and identity
Create and maintain your account (contract performance)
Verify your identity before activating telephony features (legitimate interests)
Prevent fraud and ensure platform security (legitimate interests; legal obligation)
Task execution and communications
Execute tasks on your behalf, including placing and receiving calls (contract performance)
Send transactional communications such as task summaries, confirmations, and account alerts (contract performance)
Route calls efficiently across the platform (contract performance; legitimate interests)
Consent and compliance
Maintain and enforce records of consent, opt-outs, and revocations, including our suppression list (legal obligation; legitimate interests)
Maintain compliance logs for calls, consent, and opt-outs as required by the TCPA, FCC, and applicable telephony regulations (legal obligation)
Respond to lawful legal requests (legal obligation)
What we never do with what you give Spool
Everything you provide in the product — your conversations, the tasks you ask for, your contacts, your context layer, the files you upload, and the recordings and transcripts of calls made on your behalf — is used to carry out what you asked for, and for nothing else. We never use it to:
advertise or market anything, to you or to anyone else
target ads, build advertising profiles, or create audiences
train AI models
sell or disclose to data brokers
This holds no matter how our own marketing changes. If we advertise Spool, we will not use what you told Spool to do it. And it is not ours to trade away: if Spool is acquired, this commitment travels with your data, and we will not weaken it without asking you first.
The AI providers we send your content to are contractually barred from training their models on it. They may retain it briefly to detect abuse of their own services, and then delete it.
Separately, if you gave us your email for our waitlist or newsletter, we use it for that — and only that. Mobile opt-in data and consent records will not be shared with any third party or affiliate for marketing or promotional purposes. Full stop.
Improving Spool
We use information about how the product performs to make it better, and we treat the kinds differently.
Aggregate statistics. How often tasks succeed, how long they take, which steps fail, what errors occur. These describe patterns across many users and identify no one. We use them freely.
Automated quality review. When a task or call finishes, it is assessed automatically to score how well the assistant performed — to catch a misheard number, or a task marked complete that wasn’t. This runs on the written transcript and the details of the task, not on the call audio. It is done by software, what we keep are quality scores rather than your content, and it does not train any AI model. Reviewing a conversation to grade it, and using a conversation to train on, are different things; we do only the first.
Where a review needs the audio rather than the transcript — to hear a misheard number, or how the assistant actually sounded — we listen to the recording. Section 9 sets out who does this and when.
Human review. A limited group of people at Spool read conversation transcripts and listen to call recordings to find out where the product is failing — see Section 9, which lists every circumstance in which a person sees your data. Reviewing your conversation to learn from it, and using it to train a model, are different things; we do only the first.
Internal quality reporting. Our own quality reports show the task you asked for and how well it went, so we can see where the product is failing. They do not include your conversations or your call audio.
Never your vault. Vault entries are encrypted on your device and we cannot read them, so they are excluded from all of this by design rather than by policy.
Text messages
Spool texts you in two situations. Security and verification codes, sent because you asked for one. Notifications about your own tasks — a question the assistant needs answered during a call, a request to approve a vault value, or an update on work you asked for.
Anything you text to Spool is treated exactly as anything you type in the app: it becomes part of the conversation it belongs to, and the rest of this policy applies to it in the same way. The channel does not change how we handle what you send.
Notifications go only to people who have opted in, and we record when you did. Reply STOP to any message to stop them; that never affects a security code you have asked for. We do not text you marketing. Your number and your consent record are not shared or sold for anyone’s marketing, and are passed to our telecommunications providers only to deliver the messages you asked for.
Message frequency varies based on your use of the Services. Message and data rates may apply. You may opt out at any time by replying STOP to any message. Reply HELP for help.
SMS consent is not shared with third parties or affiliates for marketing or promotional purposes. Mobile opt-in information will not be sold or shared with third parties except as necessary to deliver the requested messaging services through our telecommunications and messaging providers.
5. Your Context Layer
Your context layer is a curated set of preferences and information Spool has learned about you — things like how you like to communicate, recurring contacts, or standing instructions. It’s what allows Spool to act on your behalf without you re-explaining yourself every time.
Your control
Your persistent context layer is visible to you at any time and fully editable. You can add, correct, or remove anything in it.
Smaller details that Spool picks up within a single conversation are held with that conversation rather than in your context layer, and are not individually editable. You can remove them by deleting the conversation, which deletes the context held with it.
Your context layer persists independently of your conversation logs — deleting a conversation does not delete context that has already been added to your context layer, but you can edit or remove that directly.
What belongs here, and what doesn’t
Your context layer is ordinary stored information: we hold it in our database, and Spool staff can access it in the circumstances described in Section 9. It is not the encrypted vault.
For account numbers, identity numbers, dates of birth, and anything else you would not want read, use the vault. Those entries are encrypted on your device before they reach us, and we cannot read them. The name you give an entry is not encrypted.
What we send to third-party tools
When completing a task, we send each tool or AI model the context needed for that request. Section 8 lists the providers and what each receives.
6. Conversation Retention
When you delete a conversation, it is removed from your account and no longer appears anywhere in the product, and any files you uploaded to it are deleted from our storage. The conversation’s own text is retained in our systems, because it forms part of the record of actions taken on your behalf.
If you want a conversation erased outright rather than removed from view, email privacy@tryspool.com and we will delete it, along with any context extracted from it, within 30 days. We will tell you if any part of it has to be kept for a legal or compliance reason.
Compliance and operational records associated with that conversation — call metadata, consent logs, suppression records, task outcomes — are retained separately per legal requirements and are not affected by conversation deletion.
7. People Spool Contacts on Your Behalf
When a Spool user asks their assistant to contact you, we hold information about you even though you are not a Spool user: your name and phone number as the user gave them to us, a recording and transcript of any call, and a summary of what the call was for.
You have rights over that information, and you do not need a Spool account to use them. Email privacy@tryspool.com and you can ask us to:
tell you what we hold about you, and which user directed the contact
correct anything that is wrong
delete your information, or add your number to our suppression list so that no Spool assistant can call it
give you a copy of the recording or transcript of a call you were on
Stopping calls and asking for information work differently. To stop Spool calling a number, tell us and we will suppress it, within 10 business days. To learn who directed a call, or to obtain a recording or transcript, we first confirm that you control the number involved, because we cannot tell you who called a number that is not yours. We answer verified requests within 30 days. If a number is suppressed in error, whoever it belongs to can ask us to lift it.
Some records we cannot delete on request, because we need them to answer a regulator or to show that a call was authorized. We will tell you which, and why, if that applies.
Call disclosure and calling hours
Every AI-assisted call discloses at the outset that it is a digital assistant calling on behalf of a named person, and that the call is being recorded. This disclosure is hard-coded and cannot be disabled, and it is delivered again if a different person comes on the line. Where the user has not named a time, Spool picks one inside civil hours in the recipient’s own time zone — for calls to people, between 9:00 AM and 9:00 PM. Where the user has named a time, Spool uses it, and tells them when it falls outside those hours.
If you believe a Spool-assisted call violated our policies, you can report it to compliance@tryspool.com.
8. How We Share Your Information
We do not sell your personal information.
Service providers
We share information with the vendors who make the Services work. Each receives only what its part of a task requires:
AI providers — Anthropic, OpenAI, Google, Fireworks, and Groq — receive the instructions and context needed to reason about a task
Speech providers — AssemblyAI, Deepgram, Soniox, ElevenLabs, Cartesia, and OpenAI — receive call audio to transcribe it, and text to speak it
Telephony — Twilio — places and receives calls and holds the recordings
Research — Brave Search and Google Places — receive search queries, which may contain task context
Infrastructure — our hosting provider, Cloudflare R2 for file storage, Resend for email, and Sentry for error monitoring
We keep this list current. Where we add or change a provider in a way that materially changes what leaves our systems, we will update this policy. All service providers are bound by data processing agreements and may only use your information to provide services to Spool.
At your direction
When you instruct Spool to contact a third party or complete a task on your behalf, you are directing us to share the information necessary to complete that task with that third party. You can control which information is available for tasks by editing your context layer.
Business transfers
If Spool is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will provide notice and, where required, seek consent before your information is transferred and becomes subject to a different privacy policy. The commitments in Section 4 travel with your data.
Aggregate and de-identified data
We may share aggregated information that cannot reasonably be used to identify you, for research, analytics, or business purposes.
9. When Humans Might See Your Data
We don’t promise that no human will ever see your conversations — that promise is both unkeepable and, in some cases, the wrong goal. While Spool is early we are actively reading them, because that is how the product gets better. What we commit to is that human access happens only in the circumstances below, that the people who do it are a limited group rather than the whole company, and that the limits in Section 4 — no training, no advertising, no sale, never the vault — hold in every one of them.
This section is about people. Automated quality scoring and our internal quality reports are software rather than human review, and Section 4 describes them.
1. We are learning how Spool actually performs
Spool is early, and the fastest way to find where it fails is to look at where it failed. A limited group at Spool — a named set of people, not everyone who works here — reads conversation transcripts and listens to call recordings to see how tasks really go: where the assistant misheard something, where it gave up, where it was confidently wrong. What we learn is what we fix.
Three limits hold no matter what we see. What we read is never used to train an AI model. It is never used for advertising, and never sold. And it never includes your vault, which we cannot read at all.
There is no setting to turn this off, and we would rather say so than bury it. Reading what happens is how an early product stops being bad, so it is part of what early access is. If that is not a trade you want to make, don’t take an early-access place — wait for general release, and we will tell you then what review looks like. If you are already here and change your mind, you can close your account at any time and ask us to erase what we hold: Sections 10 and 14 say how, and we will do it.
2. You reported an issue
If you flag a problem with a task, we may review the relevant conversation, including a call recording, to understand what went wrong.
3. We are diagnosing a fault
A small number of Spool engineers can open a conversation, a task, or a call recording to investigate a bug or an outage. We do not use it to browse your data.
4. Someone we called raised a concern
If a call recipient reports a call or asks who directed it, we review that call to answer them.
5. Legal process
We do not share your data with law enforcement or government agencies unless we are legally required to do so by a valid and binding legal demand — such as a court order, subpoena, or warrant. We do not voluntarily cooperate with law enforcement requests that lack legal compulsion. Where we are legally permitted to notify you before producing records, we will.
10. Data Retention
How long we keep things. We keep what we hold for as long as your account is open, and after it closes we keep the records described below. You can also ask us to delete something sooner, and we will.
Your account, conversations, and context layer — While your account is open. Closing it removes them from the Services; email us to have them erased from our systems, within 30 days.
Call recordings and audio — 24 months from the date of the call, then deleted. Available to you and to the recipient of the call in the meantime. Ask us to delete a specific recording sooner and we will, unless we need it to answer an open complaint about that call.
Call transcripts — With the conversation they belong to, and deleted when you ask us to erase that conversation.
Call, consent, and task records — At least four years, as telephony regulations require. These survive account closure.
Suppression records — Kept for as long as the suppression stands — a number stays suppressed only if we keep the record of it. If you ask us to lift a suppression, we remove the record.
Waitlist email addresses — Until you unsubscribe or we no longer run the list.
Where retention is required by law, including TCPA record-keeping obligations, we will retain data for the legally mandated period regardless of account closure or user preference.
11. Data Security
We implement and maintain administrative, technical, and physical measures designed to protect your personal information from unauthorized access, disclosure, alteration, and destruction. These include:
Encryption in transit for all data moving between you, us, and our providers
Client-side encryption for vault entries. Anything you save to the sensitive-information vault is encrypted on your device before it reaches us. We store only the encrypted form. Neither Spool staff nor the AI models we use can read it — when a task needs a vault value, the assistant is told only that you approved the disclosure, and the system speaks the value itself
Encryption at rest for our databases and file storage, provided by our hosting infrastructure
Access controls and authentication requirements, including limits on which staff can access user data
Vendor review — we assess the providers we send data to, and their terms, before we use them
Incident response procedures
No security system is impenetrable. In the event of a data breach that triggers notification obligations under applicable law, we will notify affected users and relevant authorities as required.
12. Analytics and Cookies
Our website
We use Fathom Analytics on our public website — a privacy-first tool that does not use cookies, does not track users across sites, and does not collect personally identifiable information.
Our website runs on Framer, which sets its own cookies for security, fraud detection, and core site function. One of these identifies returning visitors and lasts twelve months. We have not added advertising or marketing tracking to the website. If we add other analytics or marketing tooling later, we will update this section — and it will never draw on product data: the commitment in Section 4 is unaffected.
The Spool app
We run no advertising or analytics tooling inside the product. The app uses strictly necessary cookies for authentication, security, and session management. You can manage these through your browser settings, though doing so may affect functionality.
Error monitoring
We use Sentry to collect error reports when something fails. A report can include technical details about what you were doing at the time, which may contain personal information. We use these reports only to find and fix faults.
We do not use marketing cookies or engage in cross-site behavioral tracking.
13. Your Rights
Rights for all users
Regardless of where you live, you may:
View and edit your context layer
Delete individual conversations
Request access to the personal information we hold about you
Request a copy of the compliance records associated with your account
Request correction of inaccurate information
Withdraw consent where processing is based on consent
Close your account and request deletion of all data subject to legal retention requirements
Lodge a complaint with a relevant supervisory authority
California residents (CCPA / CPRA)
If you are a California resident, you have the:
Right to know — request disclosure of the categories and specific pieces of personal information we have collected, the sources, our business purposes, and the categories of third parties with whom we share it
Right to delete — request deletion of your personal information, subject to exceptions including our obligation to retain telephony compliance records
Right to correct inaccurate personal information
Right to opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising, so no opt-out action is required
Right to limit use of sensitive personal information — we use it only as necessary to provide our Services and comply with legal obligations
Right to non-discrimination for exercising any of these rights
We respond to California requests within 45 days as the CCPA requires, and we verify your identity before processing any request. California residents may designate an authorized agent to submit requests on their behalf.
California “Shine the Light” Law (Cal. Civ. Code § 1798.83): we do not share personal information with third parties for their direct marketing purposes.
Other US states
Where your state grants rights of access, correction, deletion, portability, or opt-out of targeted advertising or profiling, you may exercise them by contacting us at privacy@tryspool.com. We do not conduct targeted advertising or profiling.
If we begin serving the EEA, UK, or Switzerland
Spool operates in the United States. The Services are not offered or marketed in the European Economic Area, the United Kingdom, or Switzerland, and our telephony is configured so that the assistant places calls to United States numbers only — a call to a number outside the United States will not connect.
If we begin serving those regions, we will update this policy first to set out the GDPR and UK GDPR rights that apply — access, rectification, erasure, restriction, portability, objection, and rights related to automated decision-making — the legal bases we rely on, and the transfer mechanisms we use for personal data leaving those regions.
Spool is based in the United States. If you are located outside the United States, your information may be transferred to and processed in the U.S. and in other countries where our providers operate. Section 8 lists our providers, so you can see whose systems your data may reach.
14. Making a Request, and Contacting Us
To exercise any of these rights, email us at privacy@tryspool.com and tell us what you want. Please give us enough detail to find what you are asking about — we will come back to you if we need more.
Access or a copy — we send you what we hold, including your conversations, your context layer, your call records, and the consent records for your contacts, within 30 days
Correction — tell us what is wrong and we will fix it
Deletion — we delete what you ask us to delete, within 30 days, and tell you what we had to keep and why
Account closure — email us and we will close your account; see Section 10 for what is retained afterward
Your context layer — you can view and edit this yourself at any time, without asking us
Two practical limits we would rather state than hide. Deleting your information does not remove it from the record of a call made to someone else — their record of being contacted is not yours alone to erase. And we keep call, consent, and suppression records for the periods in Section 10 even after deletion, because telephony regulations require it.
Third-party links and integrations
Our Services may contain links to third-party websites or allow you to connect third-party services to your Spool account. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.
Privacy requests and account closure: privacy@tryspool.com
Compliance, opt-out, and call inquiries: compliance@tryspool.com
General support: support@tryspool.com
Legal notices: legal@tryspool.com
Mailing address: Spool, 9854 National Blvd. #1416, Los Angeles, CA 90034
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy with a new effective date and, where required by law, by providing direct notice via email or in-app notification. We will not apply new data practices to existing data retroactively.