Privacy Policy

Last updated: 13 July 2026

This Privacy Policy explains how SpecPop, operated by Yasmine El Omari ("we", "us", "our"), collects, uses and protects your personal data when you use our service at specpop.com.

We take your privacy seriously and are committed to handling your data responsibly and in accordance with the UK GDPR and the Data Protection Act 2018.

1. What Data We Collect

When you use SpecPop, we collect the following:

• Account data: your name and email address when you register
• Project data: project names, client names, deadlines and collaborator information you enter
• FF&E data: specification codes, product names, supplier contacts and sample records you create
• Usage data: basic information about how you use the app (e.g. pages visited, actions taken) to help us improve the service

We do not collect payment information directly — this is handled by our payment provider when subscriptions are introduced.

2. How We Use Your Data

We use your data to:

• Provide and operate the SpecPop service
• Send you account-related emails (e.g. password resets, confirmations)
• Improve and develop the service during the beta period
• Respond to your support requests
• Comply with legal obligations

We will never sell your data to third parties or use it for advertising purposes.

3. Data Storage

Your data is stored securely using Supabase, a trusted cloud database provider. Data may be stored on servers within the EU or UK. All data is encrypted in transit and at rest.

4. Third-Party Services

SpecPop uses the following third-party services to operate:

• Supabase — database and authentication
• Netlify — website hosting
• Railway — backend server hosting
• Resend — transactional email delivery
• Anthropic — AI-powered PDF extraction and label reading

Each of these providers has their own privacy policy and we encourage you to review them.

5. Your Rights

Under UK GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a portable format
• Object — object to how we process your data

To exercise any of these rights, contact us at hello@specpop.com. We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days, except where we are required to retain it by law.

7. Cookies

SpecPop uses essential cookies only — these are necessary to keep you logged in and maintain your session. We do not use advertising or tracking cookies.

8. Children

SpecPop is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you by email or in-app notice of any significant changes. The date at the top of this page reflects when it was last updated.

10. Contact and Complaints

For any privacy-related questions, contact us at hello@specpop.com.

If you are unhappy with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.