Spectrum Connect, Inc. is the “controller” of your personal data for the purposes of GDPR, UK GDPR, and similar laws. We're based at 340 Pine Street, Suite 800, San Francisco, CA 94104, USA. If you'd rather talk to someone specifically about data protection, our Data Protection contact is privacy@spectrumconnect.co.
Three buckets, roughly:
If you're in the EU, UK, or EEA, here's the legal basis we rely on for each kind of processing:
You can withdraw any consent at any time. See section 8 for how.
To match creators with projects (Smart Connect uses your skills, history, and ETF level as ranking inputs). To process payments and hold funds in escrow. To surface trust signals other users see when deciding to work with you. To answer your support questions. To investigate complaints and disputes. To build better features (we look at what people actually use and where they get stuck). To meet our own legal obligations.
We do not sell your personal data, full stop. We don't use your messages or project content to train large language models. If we ever wanted to do either of those things, we'd ask for separate, explicit consent and we'd let you say no without breaking your account.
We share data with the following kinds of recipients, only for the purposes described:
Spectrum Connect is a US company with infrastructure in India (ap-south-1). If you upload data from the EU, UK, or anywhere else, that data may travel to the US or India for processing. We rely on the European Commission's Standard Contractual Clauses and similar mechanisms to make those transfers lawful, and we apply the protections in this policy regardless of where the data ends up sitting.
While your account is open, we keep your data so the Platform works. When you close your account:
If you want everything gone faster than this schedule allows, ask us and we'll tell you exactly what we can and can't delete, and why.
Depending on where you live, you have some or all of the following rights. EU/UK/EEA users have all of them. California users have most of them under the CCPA/CPRA.
To exercise any of these rights, email privacy@spectrumconnect.co from the address linked to your account, or use the in-product Data Rights tools (see our GDPR & Data Rights page). We respond within 30 days, faster when we can.
TLS for all traffic between your browser and our servers. AES-256 at rest for sensitive data. Access to production systems is on a need-to-know basis with logging. Passwords are hashed with bcrypt. We run regular dependency scans, security reviews, and we publish a responsible-disclosure address at security@spectrumconnect.co for researchers.
No system is bulletproof. If we have a breach affecting your data we'll notify you and (where required) the regulator within the timeframes the law sets, including the 72 hours required by GDPR.
We use a small set of cookies. Essential ones keep you logged in and keep the site working. Optional ones help us understand how people use the product. There's a consent banner at the bottom of the screen the first time you visit, and you can change your choices any time at /cookies.
Spectrum Connect is for adults (18+). We don't knowingly collect data from children under 18. If you're a parent or guardian who's found an account that you think belongs to a minor, please email us and we'll close it and delete the data.
We'll post any material change here at least 14 days before it takes effect, and we'll email you if the change affects your rights or our use of your data. Small clarifications might land without notice, but we date this page so you can see when it moved.
For privacy questions: privacy@spectrumconnect.co.
For everything else: support@spectrumconnect.co.
By post: Spectrum Connect, Inc., Data Privacy Officer, 340 Pine Street, Suite 800, San Francisco, CA 94104, USA.