Privacy Policy

This Privacy Policy explains how Gegham Hakobyan, IE ("Spint", "we", "us") collects, uses, discloses, and protects your information when you use our AI-powered skill-check and skill-development platform (the "Service"). Spint adaptively asks questions, estimates correctness, provides instant feedback and scoring, generates topic-level growth plans, and shows analytics of your skill check history.

• Account & Identity: email, name/handle, password hash (or federated ID), workspace/team association.
• Usage & Device: IP address, approximate location (from IP), device/OS/browser, language, crash and performance logs, cookie/SDK identifiers.
• Assessment Content: your answers, code snippets, reasoning notes, and session metadata.
• Session Integrity Signals: for each answer we record the time you spent on it, the number of times you switched away from the tab, and the number of pastes into the answer field. We collect these to discourage automated or externally-assisted answering, and to let your feedback mention it when the pattern suggests you leaned on outside help.
• Model Outputs: AI-generated questions, scores, rubrics, feedback text, "better answer" examples, and growth plans.
• Payments: transaction/receipt metadata from our payment processor (e.g., Stripe). We do not store full card numbers.
• Support & Comms: emails, chat messages, bug reports, and survey responses.
• Cookies & Similar Tech: strictly-necessary cookies; with consent, analytics/functional cookies (see Cookies section).

• Provide, secure, and maintain the Service (auth, sessions, uptime, incident response).
• Run skill checks: adapt question difficulty, score answers, generate feedback and growth plans, and show your analytics/history.
• Prevent misuse (account sharing, automated answering, fraud), enforce our Terms, and protect Spint and users.
• Note session integrity signals in your written feedback where relevant — see the limit on how they may be used, below.
• Improve quality and features (debugging, product analytics, A/B tests, prompt/parameter tuning).
• Process payments, taxes/invoices, and comply with legal obligations.
• Communicate with you (service updates, feature notices, billing, support).

When GDPR/UK GDPR applies, we process your data on these bases:

• Contract: to provide the Service you requested (run skill checks, scoring, feedback, growth plans).
• Legitimate interests: secure the Service, prevent abuse, improve features, and measure performance (balanced against your rights).
• Consent: for non-essential cookies/analytics and certain marketing communications.
• Legal obligation: tax, accounting, compliance, and responding to lawful requests.

We share data with trusted service providers who help us operate the Service (hosting, databases, logging, analytics, model APIs, payments, email). They act as processors under contracts that require confidentiality and security.

• Payments: processor (e.g., Stripe) receives billing information to complete transactions.
• AI/Model Providers: receive the minimum necessary content to generate questions, scoring, and feedback.
• Analytics: Google Analytics (Google LLC / Google Ireland Ltd.) receives usage data, only if you consent to analytics cookies, to help us understand how the Service is used.

We may disclose data if required by law, to protect rights/safety, or during a merger/acquisition.

We operate from the Republic of Armenia and use providers in multiple countries. If you are in the EEA/UK, your data may be transferred outside your region. Where required, we rely on appropriate transfer mechanisms (e.g., EU Standard Contractual Clauses and Transfer Impact Assessments) with our processors and, where applicable, within our group.

• Account & billing: for your account lifetime and up to 6 years after closure for tax/legal compliance.
• Assessment content & model outputs: typically 24 months from last activity, then deletion or anonymization.
• Logs & analytics: typically 12–18 months, shorter where feasible.
• Aggregated/irreversible statistics: may be kept indefinitely.

We use industry-standard safeguards: encryption in transit, encryption at rest (where supported), access controls, least privilege, and monitoring. No system is 100% secure; if we learn of a breach affecting you, we will notify you where required by law.

We use essential cookies to run the Service. With your consent (where required), we use Google Analytics 4 cookies to understand how the Service is used and improve features. Google Analytics is not loaded until you opt in, and its advertising features are turned off. You can manage preferences via our cookie banner or your browser settings. See how Google uses data from sites that use its services.

Depending on your location, you may have rights to access, correct, delete, or port your data; to object or restrict certain processing; and to withdraw consent where we rely on consent. To exercise rights, contact support@spint.tech. We may ask for verification. You can also complain to your local data protection authority.

Spint is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided personal data to us, contact us and we will take appropriate steps. For EEA/UK, we apply the local digital consent age where required.

We may send you service and feature messages. Where marketing rules apply, we will obtain your consent first. You can unsubscribe using the link in emails or by contacting us.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. If changes are material, we will notify you (e.g., email or in-app). Your continued use after the effective date means you accept the updated Policy.

Questions or requests? Email support@spint.tech.

This Policy and any disputes related to privacy are governed by the laws of the Republic of Armenia. Where consumer or data protection laws in your country grant you mandatory rights, those rights remain unaffected.