Privacy Policy

Last updated: 18 August 2026

The short version. Your business data is yours. We don't sell it, we don't mine it, and we don't share it with anyone except the handful of services listed below that we need to actually run the product. We use Google Analytics on our website and inside the app, which sets cookies. You can ask us to delete everything at any time and we'll do it within 30 days.

Spro HQ is operated by Noah Tiner, a sole proprietor based in Arkansas, United States ("we", "us", "our"). This policy covers sprohq.com and the Spro HQ application. It's written in plain language on purpose — if something is unclear, email hello@sprohq.com and we'll fix the wording.

What we collect

When you create an account and use Spro HQ, we collect:

Account information — your email address, business name, and password (stored as a secure hash by Supabase; we never see the password itself).
Business data you enter — inventory items, recipes, purchase orders, day recaps, waste logs, staff members, and wholesale contacts. This data belongs to you.
Staff access PINs — if you add staff members, their names and a short access PIN, which is stored hashed rather than in readable form.
Payment information — billing is handled by Stripe. We store your Stripe customer ID and subscription status. We never see or store your full card number.
Square connection — if you connect Square POS, we store OAuth tokens so we can pull your daily sales. We request read access to sales data only. We cannot initiate payments, issue refunds, or move money on your behalf.
Usage and error data — see the two sections below.

Analytics and cookies

We use Google Analytics 4 on both the marketing site and inside the application to understand how many people visit, which pages they land on, and where they came from. Google Analytics sets cookies in your browser and processes data on Google's infrastructure. It records things like pages viewed, approximate location derived from IP address, device type, and referring site.

We do not use advertising cookies, we do not run retargeting pixels, and we do not sell or share analytics data with advertisers. Aside from Google Analytics, the only cookies and local storage we use are the ones required to keep you signed in and remember your session.

You can opt out of Google Analytics entirely with Google's browser add-on, or by using your browser's own cookie controls. Nothing in Spro HQ breaks if you do.

Error monitoring

We use Sentry to catch crashes and bugs. When something goes wrong, Sentry records the technical context of the failure — the error, the page, browser and device details, and the account identifier of the signed-in user so we can tell whether a bug affects one account or everyone. Error reports can incidentally include data that was on screen when the failure happened. We use these reports only to fix the problem.

How we use your data

To run Spro HQ and keep it working for you.
To send transactional email — welcome messages, trial reminders, billing receipts, and the staff alerts you've switched on. We don't send marketing email unless you ask for it.
To pull your daily Square sales into the dashboard overnight, if you've connected Square.
To make the product better. Any usage analysis is aggregated — we're not watching what you do individually.

Who we share it with

We use the following services to run Spro HQ. Each processes some of your data on our behalf, and each has its own privacy policy.

Service	What it handles
Supabase	Database and authentication — where your business data lives
Vercel	Hosting and serverless functions
Stripe	Payment processing and subscription billing
Square	POS sales import — only if you connect it
Resend	Transactional email delivery
Sentry	Error and crash monitoring
Google Analytics	Website and in-app usage analytics

That's the complete list. We do not sell your personal information, and we do not share it with anyone for their own marketing purposes. If we ever add a service that handles your data, we'll update this table and note it in the change log below.

Where your data is stored

Spro HQ's database is hosted in the United States. If you use the product from outside the US, your data is transferred to and processed in the US.

Data retention

Your data is retained for as long as your account is active. If you cancel and request deletion, we'll delete your account and associated business data within 30 days. Stripe retains billing records under its own retention policy because it's legally required to. Backups may hold residual copies for a short period after deletion before they age out.

Data security

All data is transmitted over HTTPS. Database access is controlled by row-level security policies, so one account cannot read another's data — we test this by impersonation rather than by assuming the policies are right. Passwords are hashed by Supabase and staff PINs are hashed with scrypt. No system is perfect, and we'd rather say that plainly than claim otherwise.

Your rights

You can request a copy of your data, correction of anything inaccurate, or deletion of your account at any time by emailing hello@sprohq.com. We'll respond within 14 days. We won't charge you for it and we won't make you jump through hoops.

California residents

If you're a California resident, the CCPA and CPRA give you the right to know what personal information we collect, to request its deletion, to request correction, and not to be discriminated against for exercising any of those rights. The rights described above apply to you by default — email us and we'll handle it. We do not sell or share personal information as those terms are defined under California law.

Children

Spro HQ is a business tool intended for adults. We do not knowingly collect data from anyone under 13, and accounts require you to be 18 or older.

Changes to this policy

We may update this policy occasionally. If we make material changes — adding a service that handles your data, or changing what we collect — we'll email active users before the changes take effect.

Contact

Questions, requests, or corrections: hello@sprohq.com. We're a small team and we actually read them.