Privacy Policy
Version 1.3
Last Updated: September 28, 2026
Welcome to SPAUL Hub, accessible via spaulhub.com and its subdomains (“we,” “our,” “us,” or “Website”). We are committed to protecting your privacy and ensuring the security of your personal data.
This Privacy Notice applies to all SPAUL Hub websites, subdomains, web applications, APIs, browser-based tools, future products, and related services unless a separate privacy notice is expressly provided for a specific service.
This document serves as our comprehensive Privacy Policy. It explains in plain, itemized language what personal data we collect, why we process it, how we secure it, and how you can exercise your legal rights regarding your personal information under applicable international data protection standards.
By accessing or using SPAUL Hub, you acknowledge that you have read and understood this Privacy Notice and consent to the processing of your personal data where required under applicable law.
1. Data Controller Identity
The entity responsible for determining the purpose and means of processing your data is:
- Platform: SPAUL Hub (spaulhub.com)
- Privacy & Grievance Officer: Shubham Paul
- Contact Email: paulshubham@outlook.in
- Language & Accessibility: If you require assistance accessing or understanding this policy in another language or accessible format, please contact our team at the email address above.
2. Information We Collect, Purpose, and Retention Table:
We strictly practice data minimization. We only collect the personal data necessary to provide our web utilities, secure our services, and prevent platform abuse.
| Data Category | Specific Elements Collected | Specific Lawful Purpose | Retention Period |
|---|---|---|---|
| Account Data | Email address and authentication credentials (managed securely via our third-party provider, Clerk). Timestamps of account creation and last login. | Consent / Performance of Service: To authenticate your account, manage user sessions, and grant access to advanced AI-powered tools. | Retained for as long as your account remains active. Automatically wiped upon account deletion. |
| Security & Rate Limit Data | Hashed Device Fingerprint, IP address, and approximate network location. | Legitimate Use / Abuse Prevention: To enforce global rate limits (number of tool uses per day) and protect our infrastructure from automated bot abuse across sessions. | 30 Days Retention. Permanently deleted after 30 days. |
| Browser-Based Tool Inputs | Mathematical parameters, conversion values, files, cryptographic keys, text strings, and code snippets entered into our client-side utilities. | Local Client-Side Execution: Processed entirely within your device's browser memory via native Web APIs and client JavaScript. | Zero Server Storage & Zero Transmission: Never transmitted across the network, received, or stored on SPAUL Hub servers. Discarded immediately when you close or refresh your browser tab. |
| AI-Powered Tool Inputs | Prompts, text queries, financial metrics, and contextual parameters submitted to our AI-assisted features. | Real-Time Inference: Securely transmitted via TLS-encrypted HTTPS to generate on-demand AI recommendations and tool responses. | Ephemeral In-Memory Processing: Processed strictly in volatile memory. No permanent prompt retention; user prompts are never used to train public or proprietary AI models. |
| LiveSnip Data | Live stream timestamps, clip metadata, and system logs. | Performance of Service: To organize, format, and share your stream highlights. | 60 Days Retention. Automatically and permanently purged from our servers after 60 days. |
| Communication Data | Name, email address, and message content sent through our contact forms. | Consent: To respond directly to your technical support inquiries, tool feedback, or business collaborations. | Retained only as long as necessary to fully resolve your inquiry. |
| Automatically Collected Data | Browser type and version, device information, screen resolution, pages visited, time spent, and referral sources. | Legitimate Interest: Anonymized technical statistics used to fix bugs and optimize layout. | Anonymized immediately; contains no personal identification signatures. |
3. Cookies and Tracking Technologies:
We use cookies to ensure basic platform performance and to analyze aggregate usage trends.
- Essential & Preference Cookies: Used to remember your local browser choices and save preferences directly to your device's browser storage. This data never leaves your device.
- Google AdSense & Advertising: This website utilizes Google AdSense to serve advertisements, which are displayed by default across supported pages. Google and third-party vendors use cookies to serve ads based on your prior visits to this website and other sites across the internet. Ad personalization is managed directly through your Google account and industry opt-out portals rather than on-site toggles. You can manage or opt out of personalized advertising at any time by visiting Google Ad Settings or www.aboutads.info.
- Google Analytics: We utilize Google Analytics to understand aggregate visitor trends. This data remains completely anonymous. You can opt out via the Google Analytics Opt-out Browser Add-on.
Users may disable cookies through their browser settings. Disabling certain cookies may impact some website features or functionality.
4. Data Storage and Security:
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure.
While SPAUL Hub implements appropriate technical and organizational safeguards to protect your information, users also remain responsible for maintaining the security of their own devices, browsers, passwords, authentication credentials, and account access.
Tool Architecture & Processing Models:
SPAUL Hub operates under two distinct, privacy-preserving architectural models across our utilities:
- Client-Side / Browser-Based Utilities: The majority of tools on our platform run 100% locally in your web browser utilizing client JavaScript, WebAssembly, and native Web APIs (such as the Web Crypto API for cryptography and hashing). All computations, file checks, key inspections, and numerical parameters execute strictly in your local device memory. Zero input bytes or user files are ever transmitted across the network to our servers or third parties.
- AI-Powered & Server-Assisted Tools: Utilities that require machine learning intelligence or external computational services communicate securely over encrypted HTTPS with our backend APIs. These queries are processed ephemerally in-memory, proxied to trusted AI model inference partners, returned to your browser in real time, and immediately discarded. Prompts are never used to train external AI models.
Local Browser Storage:
We utilize standard browser local storage solely to preserve your visual theme settings and local preferences. This data never leaves your device and contains no personal identity signatures.
Data Retention Policy:
We are committed to strict data minimization and limited retention periods:
- Client-Side Tool Inputs: Zero server storage. Processed locally in browser RAM.
- AI-Powered Tool Inputs: Ephemeral in-memory processing only; zero permanent prompt storage.
- Account Data: Stored securely by Clerk for as long as your account remains active; wiped automatically upon account deletion.
- Rate Limiting & Abuse Protection: Anonymous hashed IP/device signatures retained for a maximum of 30 days in Upstash Redis to prevent infrastructure denial-of-service abuse.
- LiveSnip Data: Clip metadata purged permanently after 60 days.
International Data Transfers:
Because our tools are accessible globally, your data may be processed on servers located outside your home country (including hosting infrastructure in the United States or India). Whenever reasonably possible, SPAUL Hub selects service providers that implement recognized security standards and contractual safeguards.
- International Safeguards: Whenever data is processed internationally, our hosting and infrastructure partners (such as Clerk and Cloudflare) apply standard contractual clauses, encryption, and technical safeguards to ensure a consistent, high level of data protection regardless of where you access our tools.
5. Third-Party Services & AI Infrastructure:
To provide robust authentication, edge security, and advanced computational capabilities, SPAUL Hub integrates trusted third-party service providers and API interfaces:
- Authentication Safeguard (Clerk): User accounts, sessions, and authentication security are managed via Clerk. Raw account passwords are encrypted and never transmitted to or stored on SPAUL Hub servers.
- Zero Model Training on User Prompts: Inputs submitted to our AI-powered features are transmitted ephemerally to enterprise inference providers (such as Groq, Google AI Studio, or OpenRouter) strictly to generate your real-time response. SPAUL Hub does not sell personal information, and your inputs are never used to train public or proprietary machine learning models.
- Ephemeral Processing & Model Output Variability: Requests to external AI APIs are processed in volatile memory only. Once the output is delivered to your browser, prompt data is discarded. Because AI models generate responses dynamically based on natural language inputs, outputs may vary over time.
- Edge Infrastructure & Security: Our application runs on modern, secure cloud infrastructure (including Cloudflare edge networks and Upstash Redis for abuse protection), ensuring low latency and DDoS defense.
6. Children’s Privacy:
Our services are not intended for or directed to individuals under 18 years of age. We do not knowingly collect or solicit personal data from minors, nor do we engage in behavioral tracking or targeted advertising for children. If we discover we have inadvertently collected personal data from a minor without verified parental or guardian consent, we will promptly delete that information from our records.
7. Your Rights:
Regardless of your geographic location, you hold legal rights regarding your personal data. You can exercise these rights through your account dashboard or by emailing paulshubham@outlook.in:
- Right to Access & Portability: Request confirmation of whether your data is being processed, and obtain a copy in a commonly used, machine-readable format.
- Right to Rectification & Erasure: Correct incomplete or inaccurate records, or request permanent deletion of your account and personal information.
- Right to Restrict or Object: Restrict processing or object to particular uses of your personal data where applicable.
- Global Data Protection Frameworks: We align our data rights practices with international standards (including GDPR, CCPA/CPRA, and comparable privacy principles), guaranteeing non-discrimination when you exercise your privacy rights.
We commit to acknowledging all data rights requests within 7 business days and resolving them within 30 days free of charge.
8. Automated Decision Making:
SPAUL Hub does not use personal data to make automated decisions or profiling that produce legal or similarly significant effects on individuals.
9. Data Accuracy:
Users are responsible for ensuring the accuracy of any personal information they submit. Providing inaccurate information may affect the operation of certain tools or services.
10. Open Source Software:
SPAUL Hub utilizes various open-source libraries and frameworks. All copyrights remain with their respective authors and are governed by their applicable open-source licenses.
11. Changes to This Policy:
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Last updated” date.
12. Privacy Inquiries & Grievance Redressal:
If you wish to escalate a privacy concern, submit a data deletion request, or report a suspected issue, please contact our designated officer:
Attn: Shubham Paul (Privacy & Grievance Officer)
Email: paulshubham@outlook.in
Response Timeline: We will acknowledge your request within 7 business days and aim for complete resolution or formal response within 30 days. You also retain the right to lodge a complaint with your national or local supervisory data protection authority.
13. Contact Us:
If you have any questions about this Privacy Policy, please contact us at our contact page or email us at paulshubham@outlook.in.
Data Protection & Privacy Requests:
If you have an unresolved privacy concern, wish to submit a data deletion or access request, or have questions about our global privacy practices, you may contact our designated coordinator:
- Attn: Shubham Paul (Privacy & Grievance Officer)
- Email: paulshubham@outlook.in
- Direct Inquiries: You can also submit an inquiry through our online contact form.