Privacy

Spexo is operated by Mohsin Khan, trading as Spexo ("we," "us"). This policy explains what personal data we collect, why, and what we do with it. If you have questions, write to m@spexo.co.

What we collect and why

When you create an account, we collect your email address, first name, and the name of your firm. We use this to create your account, send you your daily brief, and address emails to you by name.

During onboarding, we ask about your role and the services you sell. We use this to personalise which litigation matters we surface for you and how your outreach drafts are written. We do not share this with anyone.

When you use the dashboard, we record which matters you expand, save, or act on. We use this to improve which matters we surface for you over time. This data is stored in our database and never sold or shared.

For billing, we use Stripe. When you subscribe, Stripe collects and stores your card details. We never see or store your card number. We store your Stripe customer ID and subscription status so we know whether your account is active.

Legal basis

We process your data to perform the contract you have with us (providing the service you signed up for). We process your usage data on the basis of legitimate interest in improving the service.

Who we share data with

We use the following services to operate Spexo. Each processes your data only as necessary to provide the service:

Supabase: our database, hosted in the EU (London).
Anthropic: we send matter data and your profile preferences to Claude to generate your outreach drafts. No personally identifiable data beyond your first name and firm is sent.
Resend: sends your daily brief and follow-up emails. Hosted in the EU (Ireland).
Stripe: handles payment processing. Hosted in the US under standard contractual clauses.

We do not sell your data. We do not use it for advertising.

How long we keep your data

We keep your account data for as long as your account exists. If you delete your account, we delete your personal data within 30 days. Anonymised usage data may be retained for product improvement.

Your rights

Under UK GDPR you have the right to access the data we hold about you, correct it, delete it, or export it. To exercise any of these rights, email m@spexo.co and we will respond within 30 days. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

Cookies

We use only essential cookies required for authentication. We do not use tracking or advertising cookies.