Privacy Policy

1. Introduction

Relentless Systems (“Company,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Spravek platform (“Service”), including our website, applications, and AI-powered features.

2. Information We Collect

Information you provide:

Account information (name, email, phone, company name, role). Business data (projects, contacts, quotes, invoices, schedules). Communications (messages, emails, call recordings, transcriptions). AI interactions (conversations with the Brain assistant, voice inputs, uploaded documents). Payment information processed securely through Stripe — we do not store full payment card numbers.

Information collected automatically:

Usage data (pages visited, features used, timestamps, session duration). Device information (browser type, operating system, device identifiers). Log data (IP addresses, access times, referring URLs). Location data (approximate from IP, or precise if you grant permission for field features).

3. How We Use Your Information

We use the information we collect to:

Provide, operate, and maintain the Service. Process transactions and send related information. Power AI features including the Brain assistant, automated scheduling, and document analysis. Improve, personalize, and expand the Service. Train and improve our AI models using anonymized and aggregated interaction data. Communicate with you about updates, security alerts, and support. Detect, prevent, and address technical issues and security threats. Comply with legal obligations.

4. AI Data Processing

Our AI features process your data to provide intelligent assistance. Important details about how we handle AI data:

PII protection: We employ automated PII masking pipelines to redact sensitive personal information before processing through AI models.

Tenant isolation: AI model fine-tuning is scoped per organization. Your data is never used to train models for other organizations.

Review: AI conversations may be reviewed by authorized personnel for safety, quality assurance, and model improvement purposes.

Consent: Our agent consent system ensures AI actions respect your explicit permissions.

Sovereign processing: Where possible, AI processing occurs on our own infrastructure. When cloud AI providers are used as fallback, PII masking is applied before transmission.

5. Data Security and Isolation

We implement industry-standard security measures to protect your data, including:

Encryption in transit (TLS 1.2+) and at rest. Row-level security ensuring strict multi-tenant data isolation. Regular security audits and vulnerability assessments. Rate limiting and CSRF protection on all endpoints. Security headers via Helmet. PII masking in application logs. Each organization's data is stored in isolated environments with no cross-organization data access.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

6. Data Sharing & Disclosure

We do not sell your personal information. We may share data with:

Service providers: Third-party vendors who assist in operating the Service (hosting, payments, email delivery, analytics) under strict contractual obligations.

Legal compliance: When required by law, subpoena, court order, or governmental regulation.

Safety: To protect the rights, property, or safety of the Company, our users, or others.

Business transfers: In connection with a merger, acquisition, or sale of assets, where your data may be transferred to the successor entity.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Upon account termination, we retain your data for 30 days to allow for export, after which it is permanently deleted. Certain data may be retained longer to comply with legal obligations, resolve disputes, or enforce agreements.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access: Request a copy of the personal data we hold about you. Correction: Request correction of inaccurate or incomplete data. Deletion: Request deletion of your personal data, subject to legal obligations. Portability: Receive your data in a structured, machine-readable format. Opt-out: Opt out of AI model training using your data by contacting us. Withdraw consent: Withdraw previously granted consent for specific processing activities.

To exercise these rights, contact us at privacy@spravek.com.

9. Cookies and Tracking

We use essential cookies required for authentication and session management. We use analytics tools to understand Service usage. You can control cookie preferences through your browser settings. Disabling essential cookies may impact Service functionality.

10. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information.

11. International Transfers

Your data may be transferred to and processed in locations outside your country of residence, including the United States, where our servers are located. We implement appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.

12. California Privacy Rights (CCPA)

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to deletion, and the right to opt out of the sale of personal information. We do not sell personal information as defined under the CCPA.

13. Third-Party Services

Our platform may integrate with third-party services. These services have their own privacy policies, and we encourage you to review them.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice in the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the revised policy.

15. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@spravek.com.