Privacy Policy

Introduction

Sparko ("Sparko," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Services.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email, company name, job title
• Employee Data: Data you input about your employees (as a controller)
• Payment Information: Billing details processed by our payment provider
• Communications: Messages you send to us

1.2 Information Collected Automatically

• Usage Data: Features used, pages visited, actions taken
• Device Information: Browser type, IP address, device identifiers
• Cookies: Session cookies and analytics cookies

2. How We Use Your Information

We use collected information to:

• Provide and maintain the Services
• Process transactions and send related information
• Send administrative communications
• Respond to inquiries and provide support
• Improve and personalize the Services
• Monitor usage and analyze trends
• Detect and prevent fraud or abuse
• Comply with legal obligations

3. AI and Your Data

Our Services include AI-powered features. Here's how we handle your data in relation to AI:

• No Cross-Customer Training: We do not use your data to train AI models that benefit other customers
• Data Isolation: Your data is logically separated from other customers' data
• Transparency: AI features are clearly identified in the product
• Human Oversight: AI suggestions can always be reviewed and overridden by users
• AI Infrastructure: AI features are powered by third-party AI infrastructure providers bound by data-protection obligations — see the sub-processor list in our Data Processing Agreement. Your data is not used to train their models

4. Information Sharing

We may share your information with:

• Service Providers: Third parties who help us operate the Services (hosting, AI processing, payment processing, email delivery, analytics)
• Legal Requirements: When required by law or to protect rights
• Business Transfers: In connection with a merger or acquisition
• With Your Consent: When you direct us to share information

We do not sell your personal information to third parties.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide Services. After account termination:

• You have 30 days to export your data
• We delete Customer Data within 90 days of termination
• Some data may be retained for legal compliance
• Backup copies are deleted within 180 days

6. Data Security

We implement industry-standard security measures including:

• AES-256 encryption at rest
• TLS 1.3 encryption in transit
• Regular security assessments using industry-standard tools
• Access controls and audit logging
• AWS infrastructure with enterprise-grade security

For more details, see our Security page.

7. Your Rights

Depending on your location, you may have rights to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing

To exercise these rights, contact us at [email protected].

8. GDPR Compliance

For users in the European Economic Area (EEA), we comply with GDPR requirements:

• We process data under legitimate interest or contract performance
• We offer Data Processing Agreements (DPA) for customers
• We support data subject access requests
• We maintain records of processing activities

See our Data Processing Agreement for more details.

9. CCPA Compliance

For California residents, we comply with CCPA requirements:

• We disclose categories of personal information collected
• We do not sell personal information
• We honor requests to know, delete, and opt-out
• We do not discriminate against users who exercise their rights

10. Cookies

We use cookies for:

• Essential: Required for the Services to function
• Analytics: To understand how users interact with our Services
• Preferences: To remember your settings

You can control cookies through your browser settings. Disabling essential cookies may affect functionality.

11. Children's Privacy

Our Services are not intended for children under 16. We do not knowingly collect personal information from children. If we learn we have collected such information, we will delete it promptly.

12. International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses where required.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Services. Your continued use after changes constitutes acceptance.

14. Contact Us

For privacy-related questions or to exercise your rights:

Email: [email protected]