1. Information We Collect

A. Information You Provide Directly

When you create an account or use the Platform, you may provide us with:

• Full name

• Email address

• Phone number (including mobile number)

• Mailing address

• Business name and information

• Payment information (processed by our third-party payment processor; we do not store card numbers)

• Profile details, credentials, and preferences

• Communications you send us (support requests, feedback, etc.)

B. Information Collected Automatically

When you use the Platform, we automatically collect certain usage and technical information, including:

• Log data (IP address, browser type, pages visited, time and date of access)

• Device information (operating system, device identifiers)

• Usage patterns and feature interactions

• Cookies and similar tracking technologies

C. Transaction Information

If you subscribe to a paid account or conduct a transaction through the Platform, our third-party payment processor will collect your payment information. Spiro does not receive or retain your full credit card or bank account details.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account

• Deliver and improve the Platform and its features

• Process transactions and send related confirmations and receipts

• Send transactional and service-related communications (appointment confirmations, invoice notifications, delivery alerts, etc.)

• Send marketing and promotional communications, where you have provided consent

• Respond to your support requests and inquiries

• Troubleshoot technical issues and improve platform stability

• Comply with legal obligations

• Detect and prevent fraud or misuse of the Platform

3. SMS and Telephone Communications

A. Consent

By creating an account and providing your telephone number — or by checking the consent checkbox at registration or in your account settings — you expressly consent to receive telephone calls and text messages (SMS/MMS) from Spiro, LLC and its authorized service providers. These communications may include account notifications, service updates, transactional messages, and marketing or promotional content.

Your consent to receive marketing communications is not a condition of purchasing any goods or services from Spiro.

B. Mobile Data Sharing

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. Your mobile number and related communication data are shared only with our authorized SMS/telephone service providers solely to deliver communications you have consented to receive.

C. Message Frequency and Rates

Message frequency will vary based on your account activity and the communication preferences you select. Message and data rates may apply depending on your mobile carrier plan.

D. How to Opt Out

You may opt out of marketing SMS communications at any time by:

• Replying STOP to any SMS marketing message (you will receive a single confirmation; no further marketing messages will be sent)

• Following the unsubscribe instructions in any email communication

• Updating your communication preferences in your account settings

• Contacting us at hello@spiro.media

Opting out of marketing communications will not affect your receipt of transactional or service-related messages necessary to administer your account. For assistance, reply HELP to any SMS message or contact us at hello@spiro.media.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following limited circumstances:

A. Service Providers

We share information with trusted third-party vendors who assist us in operating the Platform. These providers may access personal information only as necessary to perform services on our behalf. Current integrations include:

• Stripe (payment processing)

• Google Calendar (scheduling integration)

• Dropbox (media storage and import)

• Slack (team communications)

• Vimeo (video hosting)

• Authorized third-party SMS and telephone communication service providers

B. Legal Requirements

We may disclose your information where required by law, court order, search warrant, subpoena, or other legal process, or where we believe in good faith that disclosure is necessary to protect the rights or property of Spiro, our users, or third parties.

C. Corporate Transactions

In the event of a merger, acquisition, or sale of all or a portion of our assets, we will provide notice to affected users before personal information is transferred or becomes subject to a different privacy policy. Such transfer will not occur without your express consent.

D. With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. We may also retain information as required to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer necessary for these purposes, we take reasonable steps to securely delete or anonymize it.

6. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect against unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You may request a copy of the personal information we hold about you.

• Correction: You may update or correct inaccurate information through your account settings or by contacting us.

• Deletion: You may request deletion of your account and associated personal information, subject to certain legal exceptions.

• Opt-Out: You may opt out of marketing communications at any time as described in Section 3D above.

To exercise any of these rights, contact us at hello@spiro.media. We will respond to verifiable requests within a reasonable timeframe.

8. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including:

• The right to know what personal information we collect, use, and disclose

• The right to request deletion of your personal information, subject to certain exceptions

• The right to opt out of the sale or sharing of your personal information. We do not sell personal information.

• The right to limit the use and disclosure of sensitive personal information

• The right to non-discrimination for exercising your privacy rights

We share your telephone number with our authorized third-party SMS and telephone service providers solely to deliver communications you have consented to receive. This does not constitute a "sale" under California law.

To exercise your California privacy rights, contact us at hello@spiro.media. We will respond to verifiable requests within 45 days as required by law. You may designate an authorized agent to submit requests on your behalf.

9. Florida Residents

If you are a Florida resident, the Florida Telephone Solicitation Act (FTSA) and related consumer protection laws apply to our telephone and SMS marketing communications directed to you. By providing your telephone number and consenting to communications as described in Section 3, you expressly consent to receive automated or pre-recorded telephone calls and text messages for marketing purposes. You may revoke this consent at any time using the opt-out methods described in Section 3D. Revocation will be effective within a reasonable time not to exceed 30 days from receipt of your request.

10. Canadian Users (CASL)

If you are located in Canada, Canada's Anti-Spam Legislation (CASL) applies to our commercial electronic messages. By creating an account and providing your contact information, you provide express consent to receive commercial electronic messages from Spiro, LLC. Our commercial electronic messages will always clearly identify Spiro, LLC as the sender, include our current mailing address (2100 Diller Road, Lima, OH 45807), and include a working unsubscribe mechanism at no cost to you.

You may withdraw consent at any time using the opt-out methods described in Section 3D. We will cease sending commercial electronic messages within 10 business days of your request.

11. Children's Privacy

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete that information promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will provide notice through the Platform interface or by email to the address associated with your account, at least 30 days before the change takes effect. Your continued use of the Platform after the effective date constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Spiro, LLC

2100 Diller Road

Lima, OH 45807

Email: hello@spiro.media

Website: spiro.media

This Privacy Policy is effective as of May 15, 2026.