Last Updated: November 8, 2026
Spiky.ai Inc. (“Spiky”, “we”, “us” or “our”) respects your privacy. This Privacy Policy (“Policy”) describes the processing of Personal Data that is provided, collected, or shared on our website (https://www.spiky.ai/), domain, Products (as defined below), or other online services provided by us (collectively, “Services”), and your choices about the collection, sharing, and use of your Personal Data.
“Products” means Spiky Pulse, Spiky Whisper, Spiky Signals, the Spiky desktop application, the Spiky mobile applications for iOS and Android, and any other product, application, feature or service that we offer now or in the future, including updates and new versions of any of them.
By accessing and using the Services, you (also referred to as “your” or “user”) agree to be bound by the terms of this Policy. If you do not agree with the terms of this Policy, you should immediately cease all use of the Services. After you read this Policy, please read our Terms of Service and, if you use the Products on behalf of an organization, our Data Processing Addendum (https://spiky.ai/data-processing-addendum).
See the content of the privacy policy:
“Personal Data” means information that uniquely identifies, relates to, describes, or is reasonably capable of being associated with or linked to you.
This Policy applies where Spiky decides how and why Personal Data is processed, for example when you visit our website, create or manage an account, contact our support team, or receive communications from us. In these cases, Spiky is the controller of your Personal Data.
When an organization (a “Customer”) uses the Products, Spiky processes the Personal Data contained in the content that the Customer and its users provide, record or connect through the Products, such as meeting recordings, transcripts, calendar and CRM data, and the analysis generated from them (“Customer Data”). We process Customer Data on behalf of the Customer and according to its instructions. For Customer Data, the Customer is the controller and Spiky is its processor or service provider. Our processing of Customer Data is governed by our agreement with the Customer, including our Data Processing Addendum, and the Customer’s own privacy notice describes how it uses that data. If you have questions about Customer Data or want to exercise your rights over it, please contact the relevant Customer. If you contact us instead, we will forward your request to the Customer where appropriate.
Where a Customer deploys a Product on its own infrastructure, Customer Data is processed in that Customer’s environment as described in our agreement with that Customer.
A. Personal Data that you provide to Spiky
To support your use of the Services, we may request you provide certain Personal Data, including, but not limited to:
If you choose not to provide certain Personal Data, we may not be able to provide the requested Services or aspects of the requested Services.
If you subscribe to an engagement plan through the Services, the Services will redirect you to a third-party payment processor to complete the transaction. The payment processor will collect your financial information (e.g. your name and payment information). You acknowledge that we are not responsible for the third party’s conduct related to your payment information.
B. Personal Data we collect from you automatically
Cookies are small data files that are transferred to your computer’s hard disk and are used to store Personal Data about website visits and preferences, and to enhance website functionality. To improve your experience with the Services, we may use cookies and similar technologies, such as device identifiers, pixels, and web beacons to collect Personal Data, including, but not limited to:
We process Personal Data collected through such technologies to operate certain features of the Services, enhance your experience through personalization, prevent fraudulent activity, understand how the Services are used, diagnose and fix errors, and improve the security of the Services. Most browsers provide you with the ability to block, delete, or disable cookies, and your mobile device may allow you to disable the transmission of unique identifiers. If you choose to reject cookies or block device identifiers, some features of the Services may not be available, or some functionality may be limited or unavailable. Please review the help pages of your browser or mobile device for assistance with changing your settings.
Some of our service providers may use cookies or other methods to gather information regarding your use of the Services and may combine the information in these cookies with any Personal Data about you that they may have. The use of such tracking information by a third party depends on the privacy policy of that third party. We do not respond to Do Not Track (“DNT”) signals sent to us by your browser at this time. To learn more about how DNT works, please visit http://allaboutdnt.com/.
Analytics and Session Replay
To assist us with analyzing the traffic to our website and Products through cookies and similar technologies, we use analytic services, including Google Analytics and PostHog. For more information on Google Analytics processing of your Personal Data, please see “How Google uses data when you use our partners' sites or apps.” We use PostHog to understand how the Products are used and to debug errors, including through session replays in which text and form inputs are masked. PostHog processes this data on our behalf as our service provider.
C. Customer Data processed through the Products
When a Customer uses the Products, we process Customer Data on the Customer’s behalf. Depending on the Products the Customer uses, Customer Data may include:
We use, or in the future may use, Personal Data for the following purposes:
We process Customer Data only to provide the Services to the relevant Customer and as otherwise permitted by our agreement with that Customer. We do not sell Personal Data, and we do not use Customer Data for advertising.
Some features of the Products use artificial intelligence to transcribe meeting audio, analyze transcripts and voice characteristics such as tone and energy, and generate insights, scores and reports. To provide these features, we send the relevant Customer Data to AI and speech-to-text service providers that process it on our behalf. These providers process Customer Data only to provide their services to us, under written agreements that include data protection obligations. We do not use Customer Data to train AI models, and our AI and speech-to-text service providers are not permitted to use Customer Data to train their own models.
We may share your Personal Data in the following circumstances:
Service Providers. We engage service providers to help operate the Services, market promotions, process payments, or perform administrative tasks. These include providers of cloud hosting and storage, AI and speech-to-text processing, meeting recording and calendar integration, product analytics, customer support, and email delivery. We may grant certain service providers access to Personal Data as necessary to perform the services for which we engaged them. Service providers that process Customer Data on our behalf (sub-processors) are listed in Exhibit C of our Data Processing Addendum at https://spiky.ai/data-processing-addendum.
Your Organization. If you use the Services through an account provided by your employer or another organization, that organization’s administrators may access, manage and export Personal Data associated with your account, including Customer Data.
Integrations You Connect. If you or your organization connects the Services to a third-party service, such as a calendar, video conferencing or CRM system, we exchange data with that service as needed to provide the integration.
Companies Involved in Mergers and Acquisitions Transactions. If we sell or otherwise transfer part or the whole of our business or assets to another organization (e.g., in the course of a transaction like a merger, acquisition, bankruptcy, dissolution, or liquidation), Personal Data may be transferred along with the business. When legally required we will give you prior notice and if you have a legal right to do so, an opportunity to object to this transfer.
Law Enforcement, Government Agencies, and Courts. When we have a good faith belief that access, use, preservation, or disclosure of Personal Data is reasonably necessary to (a) satisfy or comply with any requirement of law, regulation, legal process, or enforceable governmental request, (b) enforce or investigate a potential violation of the Terms of Service, (c) detect, prevent, or otherwise respond to fraud, security or technical concerns, (d) support auditing and compliance functions, or (e) protect our users, the public, or our rights, property, or safety against harm.
Spiky is based in the United States. We and our service providers may process Personal Data in the United States and in other countries, including countries in the European Union. These countries may have data protection laws that differ from those in your country. Where we transfer Personal Data from the European Economic Area, the United Kingdom or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, the EU-U.S. Data Privacy Framework where our service provider is certified under it, or other mechanisms permitted by applicable law. Where we have agreed with a Customer to host Customer Data in a particular region, we process it in accordance with that agreement.
We use commercially reasonable security measures within the Services to help secure and protect Personal Data from unauthorized access or acquisition, such as industry-standard encryption technology. Despite these efforts to store Personal Data in a secure environment, we cannot guarantee that our security measures will prevent third parties such as hackers from illegally obtaining access to Personal Data. We do not represent or warrant that Personal Data about you will be protected against, loss, misuse, or alteration by third parties.
We keep your Personal Data only as long as necessary to fulfill the purposes for which it was collected and processed, including for the purposes of satisfying any legal or regulatory requirements. In some circumstances, we may de-identify, aggregate, or otherwise anonymize your Personal Data consistent with applicable laws and industry standards so that it can no longer be associated with you, in which case it is then treated as non-personal data.
We retain Customer Data for as long as the relevant Customer instructs us or as set out in our agreement with that Customer. We delete Customer Data upon the Customer’s request or as specified in our agreement with that Customer, unless we are required by law to keep it.
If you take part in a meeting or call with a Customer that uses the Products, Spiky may record, transcribe and analyze that meeting or call on the Customer’s behalf, for example through a meeting assistant that joins the meeting. The Customer is responsible for providing any notices and obtaining any consents that applicable law requires for recording and analysis. Your Personal Data in that recording is Customer Data, and you should direct questions and requests about it to the Customer. If you contact us, we will forward your request to the Customer where appropriate.
In this section, we provide information relating to how we process the Personal Data of individuals in the European Union (“EU”) and/or the United Kingdom, in accordance with the European General Data Protection Regulation and/or the UK General Data Protection Regulation (collectively, the “GDPR”). If you need more information or would like to exercise your rights under the GDPR, please contact us by using the contact information listed in Section 17.
A. Basis for Processing
Our legal basis for collecting and using the Personal Data described in this Policy will depend on the Personal Data concerned and the context in which we collect it. Please see Sections 3 and 4 above to review the types of Personal Data we collect and the legal basis for our collection and use of such Personal Data. In general, we rely on: (a) performance of a contract with you, for example to provide the Services and manage your account; (b) our legitimate interests, for example to operate, secure, analyze and improve the Services, provide support, and communicate with business contacts; (c) your consent, where required, for example for certain cookies or marketing communications; and (d) compliance with our legal obligations. Where we process Customer Data as a processor, the Customer is responsible for determining the legal basis for that processing.
B. Your Privacy Rights
If you are an individual in the EU or the United Kingdom, you may have the following rights:
Request access
To access your Personal Data.
Request correction
To request correction of your Personal Data.
Request erasure
To request the erasure of your Personal Data. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
Object to processing
To object to the processing of your Personal Data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.
Request restriction of processing
To request the restriction of processing of your Personal Data.
Request a transfer
To request a transfer of Personal Data to you or to a third party.
Withdraw consent
To withdraw consent at any time where we are relying on consent to process Personal Data about you.
You may also have a right to lodge a complaint with a supervisory authority or other regulatory agency if you believe that we violated any of the above-referenced rights concerning Personal Data. We encourage you to first reach out to us, so we can address your concerns directly. For Customer Data, please direct your request to the relevant Customer, as described in Section 2.
If you would like to otherwise access, update, or delete Personal Data about you, you may submit a request to us by using the contact information below in Section 17. However, as discussed in Section 9, under certain circumstances, we may not be able to completely remove your Personal Data from our systems.
We do not knowingly collect or solicit any Personal Data from children under the age of 16. In the event that we learn that we have collected Personal Data from a child, we will promptly take steps to delete that information.
We are not responsible for the practices employed by any websites or services linked to or from the Services, including the information or content contained within them. We encourage you to investigate and ask questions before disclosing Personal Data to third parties since any Personal Data disclosed will be subject to the applicable third party’s privacy policy.
To provide you with information regarding the Services, we may send you promotional materials or other information via email (“Communications”). You may choose to stop receiving Communications by clicking on the conspicuous “Unsubscribe” link located at the bottom of any email we send to you. Please note that certain Communications are necessary for the proper functioning and use of the Services and you may not have the ability to opt out of those Communications, such as account invitations, password resets, verification emails, and reports that you or your organization have set up.
We may modify or update this Policy from time to time, so please review it periodically. If we make a change to this Policy that, in our sole discretion, is material, we will notify you as appropriate under the circumstances. Unless otherwise indicated, any changes to this Policy will apply immediately upon posting to the Services.
If you have any questions about our practices or this Policy, please contact us at:
info@spiky.ai