Data Processing — Trial Analytics

To improve Spyral, we collect anonymised usage data during your trial. No document content is ever collected.

What we collect

• Anonymised feature interaction events (which pages visited, which actions taken)
• Session metadata: a randomly generated session identifier, session duration
• Document workflow events: upload initiated, classification triggered, classification accepted/rejected
• AI tool usage signals (which tool, prompt length, response accepted/dismissed)
• Error events and confusion signals (failed actions, retries)

What we do NOT collect

• Document content, filenames, or extracted text
• AI prompt or response content
• User-entered form data
• Any data that constitutes personal data under GDPR Article 4

Identity protection

Your team identifier is never stored in raw form. We compute an HMAC-SHA-256 hash of the team ID using a server-side secret before storage, so the analytics dataset cannot be reverse-mapped to your account even if exfiltrated.

Retention

Analytics events are automatically deleted 90 days after collection. Once your team transitions from trial to a paid subscription, no further analytics are collected.

Withdrawal

Contact privacy@spyral.nl to request deletion of any data associated with your team.