Privacy policy

Last updated: 16 October 2026

This policy explains what personal data Spedito processes, why, and what your rights are. It covers visitors of this website and our customers. For the people on our customers’ mailing lists, Spedito acts as a processor on behalf of the customer (see the Data processing agreement).

Who is responsible

The controller is Nutrispace S.r.l., Via Giosuè Carducci, 9b. You can reach us at help@getspedito.com.

What we process

Account data: name of the business, your name, email address, password (stored only as a hash), language and time zone.
Billing data: company name, address, VAT number, invoices. Payments are handled by PayPal: we never see your card or bank details.
Usage data needed to run the service: sign-in times, the emails you send and their delivery statistics, technical logs kept for security for up to 30 days.
Messages you send to our support.

Why and on what legal basis

To provide the service you signed up for (contract, Art. 6(1)(b) GDPR).
To issue invoices and keep accounting records (legal obligation, Art. 6(1)(c)).
To keep the service secure, prevent spam and abuse, and protect the reputation of our sending infrastructure (legitimate interest, Art. 6(1)(f)).
To send you service emails, such as the report after a sending or the weekly summary, which you can switch off in Settings › Notifications.

Who we share data with

Only with the providers that help us run Spedito, bound by data processing agreements:
Amazon Web Services EMEA SARL (Luxembourg): sending emails, servers in Ireland (EU).
Supabase Inc.: database and sign-in, servers in Frankfurt (EU).
Vercel Inc.: website and application hosting, EU region.
PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg): payments, as an independent controller.
Anthropic PBC (USA): only the text you send to the AI writing and translation features, under the EU Standard Contractual Clauses; it is not used to train models.

How long we keep it

Account data for as long as you have an account. When you close the account, everything is erased after 30 days, except invoices, which the law requires us to keep for 10 years.

Your rights

You can ask to access, correct or delete your data, to restrict or object to its processing, and to receive it in a portable format. Most of this you can do yourself in Settings › Data and account. Write to help@getspedito.com for anything else. You also have the right to lodge a complaint with your data protection authority (in Italy, the Garante per la protezione dei dati personali).

Cookies

We only use the cookies needed to sign you in and to remember your language and theme. See the Cookie policy.