Effective Date: October 4, 2026
This Privacy Policy describes how Inkbit Labs Inc. ("Spectacle," "we," "us," or "our") collects, uses, and protects information when you use Spectacle Cloud (the "Service") and the Spectacle Desktop application. By using our Service, you agree to the practices described in this Privacy Policy.
This Privacy Policy applies in addition to our Terms of Service.
1. Our Core Principle: Local-First by Design
Spectacle is engineered around the principle that your thinking is deeply personal. Spectacle Desktop is a local-first application:
- Zero Unsolicited Telemetry: Spectacle Desktop does not track your typing, canvas clicks, document names, or usage patterns.
- Local Storage, Encrypted by Default: Your canvases, notes, and spatial graphs are stored on your own computer. The local database is encrypted at rest by default, and you can switch to a standard unencrypted SQLite file in Settings.
- Opt-In Cloud: Cloud features are strictly opt-in. You can use Spectacle Desktop completely offline with zero network connectivity forever.
2. Information We Collect on Spectacle Cloud
When you choose to create a Spectacle Cloud account or use our companion services, we collect only the minimum data required:
2.1 Account and Authentication Data
- Account email address and authentication credentials
- Browser-authorized device sessions for desktop sign-in, established through the OAuth authorization-code flow with PKCE at
/desktop/authorize - Subscription status and billing identifiers
2.2 Published Web Canvas Snapshots (/s/:id)
- When you explicitly publish a canvas snapshot from Spectacle Desktop, the export bundle is stored in encrypted cloud object storage (Google Cloud Storage).
- If you configure password protection, the password hash is computed using Argon2id and stored to verify access.
- You can delete published snapshots at any time from your account dashboard, which immediately removes them from storage.
2.3 Ephemeral Live Jam Sessions (/jam/:roomId)
- Live Jam coordinates peer-to-peer WebRTC connections between participants.
- Zero Server Storage: Room encryption keys reside in the URL fragment (
#key=...) and are never transmitted to or stored on our servers. - Canvas strokes stream directly peer-to-peer over WebRTC data channels. When the last participant leaves the room, the ephemeral signaling state is permanently destroyed.
2.4 Spectacle Cloud AI
- Spectacle Cloud AI routes requests between your Spectacle Desktop client and managed AI models.
- Stateless Forwarding: Prompts, canvas contexts, and model completions pass through the router statelessly. We do not persist or log your prompt contents.
- We record only aggregate token usage counts and timestamps to meter sliding 30-day subscription quotas.
- Neither Spectacle nor our model providers use your queries to train models.
2.5 Billing and Payment Information
Payment transactions are securely processed by Stripe. We never store your credit card numbers or payment credentials on our servers.
3. How We Use Information
We use collected information solely to:
- Authenticate users and validate desktop API keys
- Serve published web canvas snapshots and coordinate Live Jam peers
- Proxy AI completions and meter subscription quotas
- Process payments and maintain billing accounts
- Provide security logging and rate-limiting against abusive attacks
4. Data Sharing and Third Parties
We do not sell, rent, or monetize your personal data. We share data only with the essential infrastructure providers required to operate the Service:
- Google Cloud Platform: Cloud Run hosting and GCS snapshot storage
- Managed AI providers: Stateless model inference for Spectacle Cloud AI
- Supabase: Database and authentication services with Row-Level Security
- Stripe: Payment processing and billing portal
5. Data Retention and Deletion
- Account Data: Retained while your account remains active.
- Web Snapshots: Retained until you delete them from your dashboard or close your account.
- Live Jam Data: Ephemeral; zero persistence after session ends.
- AI Usage Logs: Token counts and timestamps retained for quota metering; zero prompt or completion retention.
You can request complete account deletion at any time by contacting privacy@spectacle.so.
6. Security
We employ TLS encryption for all data in transit, AES-256 encryption for stored snapshots, strict database Row-Level Security (RLS), and Cloud Armor DDoS/rate-limiting defenses.
7. Contact Us
If you have questions about this Privacy Policy or your data, please reach out to us at privacy@spectacle.so.