Last updated: October 25, 2026
Sprout'n reads your business data so it can tell you things about your business. That means sending some of it to other companies, mostly to AI providers that read documents and text. This policy names every one of them, says exactly what each receives, and says what we refuse to collect.
Sprout'n operates the website at sproutn.ca and the applications Seed, Sprout, Develop, Roots and Harvest. We are the controller of the personal data described here. For anything in this policy, including requests about your data, contact chris@sproutn.ca.
Your name, email address, and a password handled by our authentication provider. We never see your password.
Handled entirely by Stripe. We store an identifier for your subscription and its status. We never receive or store your card number.
From Stripe: balance transactions, charges, refunds, fees and payouts. From Shopify: orders, refunds, products, inventory levels and locations. We store this so reports can be reproduced as of a past date without re-reading your account.
IP address, browser and device type, and pages viewed. Used for security, rate limiting and diagnosing faults.
This is a design decision rather than an omission, and it is the part of this policy we would most like you to check.
read_customers permission from Shopify, and we do not read customer names, email addresses, phone numbers or postal addresses from Shopify or Stripe. We read what was sold, for how much, when, and what it cost you in fees.Stripe grants write access or nothing. When you connect Stripe, its consent screen will say Roots can write to your account. Roots never writes to a connected Stripe account and has no feature that does. Stripe withdrew read-only permissions for applications of this kind in 2021, so write access is the narrowest permission available to us. We say this here rather than let you find it on the consent screen and wonder what else went unsaid.
Several features work by sending your content to AI providers. Each is listed below with what it receives and why. All of them process data in the United States.
Receives the text transcribed from receipts you upload, so it can identify the vendor, date, total and tax. Also receives the text of ideas you submit to Seed, across the analysers that score them. Nothing is posted to your books from a receipt until you have reviewed and confirmed it.
Receives the images of receipts and invoices you upload, and returns the text on them. This means a photograph of a document you upload leaves our systems and is processed by Cohere.
Receives the audio recording when you dictate an idea by voice, and returns a transcript. If you type instead of speaking, no audio is created or sent.
When you run a validation in Seed, we perform roughly twenty-five web searches through Serper and three through Reddit's public API, derived from the title and description of your idea. Those search terms therefore reach those services. If your idea is confidential, be aware that describing it in Seed causes searches based on it to be made.
Models misread documents. Ours are built to say so rather than to guess: every extracted receipt is confirmed by a person before it posts, arithmetic is checked against the printed total, and where Harvest cannot support a reorder date it prints none rather than an uncertain one. Treat anything the apps produce as a well-informed draft that you are responsible for checking. See our Terms of Service for what this means legally.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We will share information where the law requires it, and we will tell you when we are permitted to.
Sprout'n operates from Canada. Our hosting, database and AI providers process data in the United States. If you are in the United Kingdom, the European Economic Area, Switzerland or anywhere else with transfer restrictions, using Sprout'n means your data is transferred to the United States and processed there. We rely on Standard Contractual Clauses or the equivalent mechanism in our agreements with those providers. You may ask us for details of the safeguards that apply.
If you close your account and ask for deletion, we will delete your data except where we are legally required to keep it. Tell us and we will explain exactly what is being retained and why.
No system is perfectly secure, and anyone who tells you otherwise is selling something. If we discover a breach affecting your personal data we will notify you and the relevant regulator as the law requires.
We apply these to everyone rather than only to people whose local law compels it.
Email chris@sproutn.ca and we will respond within thirty days. If you are in the EEA or UK you may complain to your supervisory authority; in Canada, to the Office of the Privacy Commissioner or your provincial equivalent, including the Commission d'accès à l'information in Quebec.
Sprout'n is for businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe we have, tell us and we will delete it.
See our Cookie Policy. In short, we use what is needed to keep you logged in and to keep the service working.
We will update the date at the top when this changes. If a change materially affects how we handle your data, including adding a new AI provider or a new category of data sent to an existing one, we will email you before it takes effect rather than rely on you re-reading this page.