Privacy Policy
Customer Spine, operated by BlockSurvey Inc
Draft — not yet legally reviewed. This is written in plain language to describe what the product actually does today. It has not been checked by a lawyer and is not a substitute for one. If you need a signed agreement before connecting data, get in touch and we will handle it directly rather than pointing you at this page.
There are two kinds of personal data here and they are governed differently. Keeping them apart is the whole point of this document.
1. Data about you, our customer
We decide how this is handled, so we are the controller of it. It is deliberately small:
- Your email address, and your name if you give us one.
- Which teamspaces you belong to and your role in each.
- Session records. These hold a hash of your session token, never the token, plus a truncated hash of your IP address and browser string used for rate-limiting. We do not store your IP address.
We use it to sign you in, to show you the right teamspace, and to stop automated abuse of the sign-in endpoint. Nothing else.
2. Data about your customers
Everything that arrives from a source you connect — Stripe, Intercom, PostHog, Firebase Auth, GA4 — is processed on your instructions. You are the controller; we are the processor. That includes identifiers such as email addresses and phone numbers, traits, events, and the raw payload each source sent.
We do not use it to build any profile outside your teamspace, we do not sell it, and we do not use it to train models. It is used to produce your profiles and to send them to the destinations you configure.
3. Cookies and tracking
The site sets two cookies, both strictly necessary and both host-locked with the __Host- prefix: one holds your session, one remembers which teamspace you were last looking at. There are no analytics cookies, no advertising cookies and no third-party trackers of any kind on this site.
4. Who else touches it
Cloudflare and Resend — and nobody else. The complete list, with what each is used for, is at /legal/subprocessors.
5. How long we keep it
Profiles, events and raw payloads are kept while your teamspace is active, because deleting them is deleting the product. When you cancel, you can export your data during your final billing period, after which it is deleted. Your account record is deleted with it.
6. Your rights
If you are in the UK, EU or California, you have rights of access, correction, deletion and portability over the data we hold about you as a controller. Email contact@customerspine.com and we will action it.
For requests from your customers about data you connected, you are the controller and the request is yours to answer. We will help you find, export or delete the records, and we will not respond to your customer directly without you.
7. Changes
If we change this in a way that affects how your data is handled, we will say so in the product rather than only editing this page.