Privacy Policy

This policy describes information processing by Market Spaghetti during its private beta. An anonymous Free Check does not require an account, but it still involves processing and temporary server storage.

Anonymous Free Marketing Checks

We receive the answers you submit across six adaptive stages, including business details, audience, goals, marketing activity, challenges, any baseline you enter and an optional website address. Those answers are used to generate your result, marketing asset and measurement guidance.

The server stores a generation record containing submitted answers, generated output, request identifiers, status, timestamps and any generation error. This supports duplicate-request prevention, recovery and saving a server-generated result to an account when you choose to sign in.

For usage controls, the server reads the connection's IP address and creates hashed IP and browser-token identifiers. The usage records store hashes rather than raw IP addresses; hosting services also receive connection information while serving requests. Anonymous answers can still contain identifying information if you type it into a field.

Public website retrieval

Both Free Checks and Full Diagnoses may retrieve a publicly accessible page at the website address you supply, following a limited number of validated redirects. The server checks that the address is suitable for public access and extracts a limited HTML text excerpt for the AI request. It does not log in to your website or connect to your analytics, advertising or sales accounts.

The website host receives a retrieval request. Cloudflare's DNS-over-HTTPS service receives the hostname for public-address checks. Retrieved content is treated as untrusted source material. If retrieval is blocked, fails or is unavailable, analysis can continue using questionnaire answers alone, and the result identifies that limitation.

AI processing and service providers

Your questionnaire inputs and any retrieved website excerpt are sent through Lovable AI Gateway to an OpenAI model to generate the analysis and marketing materials. The current application selects GPT-6 Astra. The request is configured with the model's response-storage option disabled; that setting alone is not a guarantee that no provider logs or other records exist.

Lovable Cloud supports account authentication and storage of private profiles, checks, diagnoses and operational records. Managed email services process your address to send verification, password-recovery and other account-security emails. Do not enter confidential records, passwords, card details or identifying patient, client or child information into questionnaire fields.

Registered accounts and saved reports

Registration collects your full name, email and password for authentication. Your full name is also stored in your private profile to personalize the workspace. The account service handles passwords; account-data exports do not include them. Optional business-profile information includes your business name and business type.

When you save a Free Check, its answers and AI result are copied from the server-generated record into your account. Full Diagnoses store the assessment, generated report, creation time and related generation or delivery references. Reports remain snapshots of their original assessment, rather than changing automatically when you edit your profile.

We also store account permissions, complimentary allowances, permission-change history and deletion-request status. Beta diagnosis processing records access and delivery state, attempt status and errors so interrupted delivery can be recovered without another charge. Account-based access controls restrict customer reads; authorized administrators have access for account and delivery operations.

Live commercial payments are not active. Restricted sandbox testing uses Paddle; test checkout information is processed by Paddle and linked to a stored test transaction, product, assessment and delivery record. Complimentary beta allowances do not open checkout. Market Spaghetti does not store payment-card numbers.

Browser storage, cookies and external requests

Answers and results are held in memory during the current assessment. Limited tab storage is also used for a pending save or claim and continuity through account registration; this is not the same as your saved account history. Signing out clears assessment state and associated pending-save data. Sign-in session information is stored in your browser to keep you signed in.

The application uses its own first-party, privacy-conscious usage measurement: page views and product actions (such as starting or completing a check) are recorded with a random browser-stored visitor identifier and a per-tab session identifier. It does not use third-party analytics or advertising trackers, tracking pixels, cross-site cookies or device fingerprinting, and administrator and internal pages are excluded. It loads typefaces from Google Fonts, so Google receives the requests needed to serve those files. Hosting, authentication and any test checkout services may process technical request information or use their own necessary storage. This statement is not a claim that no cookies or technical logs exist anywhere in the service.

Retention

The current cleanup removes usage records older than two days and unowned generation records older than 30 days. Cleanup runs when a generation request enters the service, not on a guaranteed daily schedule, so records may remain longer until the next cleanup runs.

That cleanup does not remove account-owned generation records, saved checks, diagnoses, profiles, access history or test transaction records. Those records remain stored unless removed through an applicable reviewed procedure; there is no automatic fixed expiration for all account data.

Account export and deletion requests

In your workspace, open Account Settings to export account data or request account deletion. A deletion request is recorded and acknowledged for review; submitting it does not immediately erase data or close your sign-in account.

The export includes your profile, email, saved checks, diagnoses, transaction records, account-owned generation records, assigned permissions and deletion-request information. It excludes passwords, sessions, security tokens, internal abuse-prevention identifiers and provider-held card data.

The administrator-reviewed application-data procedure can remove owned generation records and reports, clear profile fields and assessment content in transaction records, and retain operational or review records. Removing the authentication identity is a separate step. Financial-record review can prevent application-data erasure until that review is resolved. This is not a promise of complete or immediate removal from every service provider, log or backup.

Anonymous submission limitations

Anonymous generation records are identified internally by a job reference and a hashed claim token, not an account email. There is no customer-facing deletion tool for a specific anonymous submission. An email address alone may not identify it, and losing the temporary claim information can prevent a reliable link to the record. Anonymous records remain subject to the cleanup described above.

Your choices

Contact inquiries collect your name, email address, selected support category, message, submission time and support reference. They are stored with email-delivery and retry status, with access restricted to authorized administrators, and used to respond to your inquiry. Managed email services process the notification and acknowledgment; the support notification goes to our existing Google Workspace mailbox. A keyed hash of the connection identifier supports submission limits. Contact inquiries do not have a configured automatic expiration.

• Use the Free Check without registering or saving a report to an account.
• Leave the website address blank to receive questionnaire-only analysis.
• Limit your answers to the business context needed for guidance; do not submit sensitive personal information.
• Use Account Settings for the available account export and reviewed deletion-request procedures.

Contact and privacy requests

For support or a privacy or data request, contact us or email admin@marketspaghetti.com. We typically respond within 24–48 hours. Do not include passwords, payment card details, patient information or other sensitive personal data.