Privacy Policy

This policy explains what information Spark (“Spark,” “we,” “us”) collects when you visit our website, use the Spark dashboard, or use a mobile app that a retailer has built with Spark, and how we use it.

Who this covers

• Website visitors who browse our site or send us a message.
• Customers — the businesses that subscribe to Spark — and their team members who sign in to the dashboard.
• App users — shoppers who use a retailer's branded app. For app users, the retailer decides what the app collects and how it's used, and Spark processes that information on the retailer's behalf. The retailer's own privacy policy, linked in their app, also applies.

Information we collect

• Contact form submissions: your name, email address, business name, and message.
• Account information: name, email address, password (stored securely by our authentication provider, never in plain text), role, and the business you belong to.
• Content you add: store locations, hours, deals, links, images, menus, and notification messages.
• Billing information: plan and subscription status. If you pay by card, payment details are collected and stored by our payment processor, not by Spark.
• App users: a device push-notification token so the app can receive notifications, and the store location the app is set to.
• Technical information: standard server logs such as IP address, browser type, and pages requested, used for security and troubleshooting.

How we use information

• To provide, maintain, and secure the dashboard and the apps built on it.
• To deliver push notifications that retailers send to their app users.
• To respond to inquiries and provide customer support.
• To manage subscriptions and billing.
• To comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use app users' information for our own advertising.

Cookies and browser storage

The public website does not use advertising or analytics cookies. The dashboard uses only what it needs to work:

• Session cookie: when you sign in, we set a secure, HttpOnly cookie that keeps you signed in for up to 7 days. Signing out deletes it, and it stops working sooner if your password is reset or your access is removed.
• Support cookie: when Spark staff open a customer's dashboard to help with support, a cookie records which business they are viewing. It is cleared when they switch back or close the browser.
• Browser storage: our sign-in provider keeps your sign-in state in your browser, and the dashboard remembers display preferences such as whether the sidebar is collapsed.

Service providers

We rely on trusted providers to run Spark, who process information only to provide their services to us:

• Google Firebase — hosting of the database, file storage, sign-in, and push notification delivery.
• Resend — delivery of emails, such as contact form messages.
• Stripe — payment processing, when card billing is enabled.
• Our hosting provider — serving the website and dashboard.

Retention

We keep account and content information for as long as the customer's subscription is active and for a reasonable period afterward so service can be restored, unless the account owner asks us to delete it sooner. Contact form messages are kept as long as needed to respond and follow up.

Your choices

• Team members can delete their own sign-in and profile at any time from Settings in the dashboard. Content they added, such as deals or notifications, belongs to the business and stays in its account.
• Account owners can close the business's account, or transfer ownership to someone else, by emailing us. We confirm the request with the owner before deleting the business's account and content.
• Anyone can ask us to access, correct, or delete their personal information by emailing us.
• App users can turn off push notifications at any time in their device settings.
• App users with questions about a retailer's app should contact that retailer first; we will help them respond.

Security

We use access controls, encrypted connections, and industry-standard providers to protect information. No system is perfectly secure, but we work to protect your information and will notify affected customers of a breach as required by law.

Children

Spark is not directed to children, and we do not knowingly collect information from anyone under 13.

Changes

We may update this policy. If we make significant changes, we will update the date above and notify customers by email or in the dashboard.

Contact

Questions about this policy? Email [email protected].