Privacy Policy

1. Our role

This policy explains how Tech Spark Events Inc. handles personal information when you visit our website, sign up, or use SparkDesk.

For account, billing and usage information about our customers and their users, we are the controller. For personal information our customers put into their workspaces (for example their contacts, clients and leads), the customer is the controller and we process it on their behalf as a processor. If you are a contact of one of our customers, please contact that customer about your information; we will help them respond.

2. Information we collect

Account information: name, email address, password (stored as a salted hash by our authentication provider), workspace name, role and preferences.
Customer Data: anything you or your users add to a workspace, such as contacts, companies, deals, cases, messages, documents, invoices, files and form responses.
Billing information: plan, billing contact and invoices. Card details are collected and stored by Stripe; we never see or store full card numbers.
Usage and device information: sign-in times, IP address, browser type, actions taken in the app, and error reports, used to run, secure and improve the service.
Email activity: when a workspace sends email through the service we record delivery, bounce and complaint events, and, if the workspace enables tracking, opens and link clicks.
Communications: messages you send us and responses to in-app surveys or feedback forms.

3. How we use information

Where the GDPR or similar laws apply, our legal bases are performance of our contract with you, our legitimate interests in running a secure and useful service, compliance with legal obligations, and consent where we ask for it.

We do not sell personal information and we do not use Customer Data for advertising.

To provide the service: create accounts, host workspaces, send email and notifications you trigger, process payments and provide support.
To keep the service secure: authenticate users, prevent fraud, spam and abuse, enforce limits and investigate incidents.
To improve the service: understand how features are used and fix problems.
To communicate with you: service, security, billing and account notices, and, where allowed, product updates you can opt out of.
To meet legal obligations, such as tax and accounting record keeping.

5. AI features

When a user runs an AI feature, the content needed for that request is sent to the configured AI provider (OpenAI, Anthropic or Google, or a provider key the workspace supplies) to return the result, under that provider's API terms. We do not use Customer Data to train AI models.

6. Cookies and similar technologies

The app uses your browser's local storage to keep you signed in and remember preferences; these are necessary for the service to work. Our marketing pages use privacy-friendly, cookieless analytics (Vercel Web Analytics) that do not track you across sites. If signup protection is enabled, Cloudflare Turnstile may process device signals to tell people from bots. We do not use advertising cookies.

7. Where data is stored

Our primary database and file storage are hosted in the United States. Some service providers may process data in other countries. Where required, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

8. How long we keep information

Workspace data is kept while the workspace exists. When a workspace is deleted, its data is permanently removed after a 14-day grace period.
Free workspaces with no member sign-in for 180 days may be deleted after notice to the owners and admins (30 and 7 days before).
Items moved to Trash inside a workspace are removed after the workspace's Trash retention period.
Billing and tax records are kept as long as the law requires.
Backups are retained by our infrastructure provider on a rolling schedule and are then overwritten.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have the right to know, delete and correct personal information and not to be discriminated against for exercising these rights; we do not sell or share personal information for cross-context behavioral advertising.

You can update your profile in the app, export workspace data from Settings, and delete your account or workspace from Settings. For any other request email hello@sparkdesk.io. We may need to verify your identity. You can also complain to your local data protection authority.

10. Security

We protect data with encryption in transit, encryption at rest provided by our hosting provider, tenant isolation enforced in the database, role-based access, optional two-factor authentication and audit logs. No system is perfectly secure; if we learn of a breach affecting your personal information we will notify you as required by law.

11. Children

SparkDesk is a business service and is not directed to children under 16. We do not knowingly collect their personal information.

12. Changes

We will post changes to this policy here and notify workspace owners of material changes before they take effect.

13. Contact

Privacy questions or requests: hello@sparkdesk.io.

Questions about this page? Email hello@sparkdesk.io.