Privacy

Spectrality Works LLC (“we,” “our,” or “us”) operates the Spectrality service, a private library for the documents you upload. This policy explains what we collect, why, and what we do with it. Spectrality is currently in alpha; this policy reflects how the alpha actually works today.

1. What we collect

The information we hold about you is limited to what the service needs to operate.

Category	Examples
Account data	Your email address and a salted hash of your password. We never store your password in plaintext.
Library content	The documents you upload (PDFs, photographs, scans), stored in our self-hosted object storage (MinIO), and the rendered output we produce from them.
Reading progress	Your position within each document, so the reader can resume where you left off.
Audit logs	Records of security-relevant events tied to your account — logins, password resets, and support requests — retained so we can investigate problems and abuse.

2. How we use it

• To run the service. Authenticating you, processing the documents you upload, and serving them back to you.
• To keep the service safe. Detecting abuse, debugging failures, and responding to support requests.
• To communicate with you. Account-related email such as password resets and replies to support requests. No marketing email during alpha.

3. What we don’t do

• We don’t sell your data.
• We don’t use your library to train machine-learning models, ours or anyone else’s.
• We don’t read your documents for any purpose other than rendering them and serving them back to you.

4. Third-party processors

We rely on a small number of vendors to operate the service. Each receives only the data it needs to do its job.

Processor	What they receive, and why
Modal (Modal Labs, Inc.)	Pages of your uploaded documents may be sent to Modal for transient model inference (OCR and layout analysis). Modal’s own privacy policy applies to that processing.
Resend	Your email address, when we need to send you a transactional email such as a password reset or a reply to a support request.
Hetzner Cloud	Hosting infrastructure for the service. All Spectrality servers and storage run in Hetzner data centers in Germany (EU).

5. Cookies

We use a single essential cookie to keep you signed in across requests. We don’t use analytics, advertising, or tracking cookies, so the service does not display a cookie consent banner during alpha.

6. Security

• In transit: All traffic is encrypted with TLS.
• At rest: Library content is stored in our self-hosted object storage on encrypted disks.
• Access control: Internal access to your data is limited to staff who need it for support, debugging, or required legal compliance.

No system on the open Internet is completely secure. We aim to apply current best practices and to disclose breaches promptly if they occur.

7. Your rights

• Account deletion. You can delete your account at any time from your account settings. Deletion is immediate and permanent: your account record, library content, and reading progress are hard-deleted from our live systems right away. See “Backup retention” below for the short tail in encrypted backups.
• Data export. A self-serve export of your library is not available during alpha. We’re building it; in the meantime, write to us and we’ll help.
• Correction and access. Write to us if information about your account is wrong or you want a copy of it.

To exercise any of these, write to privacy@spectrality.works.

8. Backup retention

We keep encrypted backups so we can recover from outages and accidents. After you delete your account, residual copies of your data may persist in those backups for up to 14 days, after which they are overwritten in the normal backup-rotation cycle. Backups are not used for any other purpose.

9. Sharing your information

We do not sell, trade, or rent your personal information. Beyond the third-party processors listed above, we may share information with legal authorities if we are required to by law or by valid legal process.

10. Children

Spectrality is not directed to children under 13, and we do not knowingly collect data from them. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be announced in the service or by email before they take effect. The effective date at the top of this page reflects the current version.

12. Contact

Spectrality Works LLC
New York, NY
privacy@spectrality.works