At Sparky ("we," "us," or "our"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy describes how we collect, use, store, share, and protect information when you use the Sparky platform, including our website at heysparky.ai, mobile applications, and related services (collectively, the "Service").
By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, phone number, company name, and job title when you create an account or register your organization.
- Employee & Crew Data: Names, roles, hourly rates, overtime policies, and crew assignments entered by account administrators for project and time-tracking purposes.
- Project Data: Project details, estimates, assemblies, products, orders, expenses, customer information, and related business records you create within the platform.
- Time-Tracking Data: Clock-in/clock-out timestamps, time entry notes, break durations, and overtime calculations.
- Payment Information: Sparky does not currently process payments or collect billing information directly through the platform.
- Communications: Messages, support requests, and feedback you send to us.
1.2 Information Collected Automatically
- Device & Usage Data: Device type, operating system, browser type, app version, screen resolution, and general usage patterns (pages visited, features used, session duration).
- Location Data: With your explicit permission, we collect geolocation data during clock-in/clock-out events to verify on-site presence for time-tracking purposes. You may disable location services at any time through your device settings, though this may limit certain time-tracking features.
- Log Data: IP addresses, access timestamps, error logs, and API request metadata for security monitoring and service reliability.
1.3 Information from Third-Party Integrations
When you connect third-party services to Sparky, we may receive information from those services as described below:
- Gusto: If you enable the Gusto integration, we access employee names, job/department assignments, and company information via the Gusto API to map employees and sync verified time entries as timesheets. We access only the data scopes you authorize (companies, employees, jobs, and time sheets).
2. How We Use Your Information
We use the information we collect to:
- Provide and Operate the Service: Manage your account, process time entries, generate estimates, track projects, manage inventory, and deliver core platform functionality.
- Sync Payroll Data: When the Gusto integration is enabled, transmit verified time entries as timesheets to Gusto for payroll processing on your behalf.
- Improve the Service: Analyze usage patterns, diagnose technical issues, and develop new features.
- Communicate with You: Send service-related notifications, respond to support requests, and provide product updates. You may opt out of non-essential communications at any time.
- Ensure Security: Monitor for unauthorized access, fraud, and abuse; enforce our Terms of Service.
- Comply with Legal Obligations: Respond to lawful requests from regulatory or law enforcement authorities.
3. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
3.1 With Your Organization
If you use Sparky as part of an organization (e.g., an electrical contracting company), your account administrator(s) may access your time entries, project assignments, and related work data in accordance with the organization's account permissions.
3.2 With Third-Party Service Providers
We use trusted third-party providers to operate and improve the Service. These providers process data on our behalf under contractual obligations to protect your information:
| Provider |
Purpose |
Data Accessed |
| Supabase (on AWS) |
Database, authentication, file storage |
All platform data (encrypted at rest and in transit) |
| Gusto |
Payroll integration (when enabled) |
Employee names, jobs, time entries |
| DigitalOcean / Cloudways |
Web hosting |
Web traffic and application data |
| Codemagic |
CI/CD and app deployment |
Build artifacts and environment configuration |
3.3 For Legal Reasons
We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Sparky, our users, or others.
3.4 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
4. Data Storage and Security
4.1 Where We Store Data
Your data is stored on Supabase-managed PostgreSQL databases hosted on Amazon Web Services (AWS) in the United States (us-east-1 region). Backups are stored within the same AWS infrastructure.
4.2 Security Measures
We implement industry-standard security measures to protect your information:
- Encryption at Rest: AES-256 encryption via AWS KMS for all database and storage data.
- Encryption in Transit: All data transmitted between your device, our servers, and third-party integrations is protected with TLS 1.2 or higher.
- Access Controls: Row-Level Security (RLS) policies enforce tenant-level data isolation. Administrative access follows the principle of least privilege.
- Authentication: Industry-standard JWT-based authentication via Supabase Auth with bcrypt password hashing and rotating refresh tokens.
- Monitoring: Continuous logging and monitoring of authentication events, API access, and system health.
While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
5. Data Retention
- Active Accounts: We retain your data for as long as your account or your organization's account is active.
- After Termination: Upon account termination, data is retained for 30 days for dispute resolution, then purged from production databases within 30 days and from encrypted backups within the next backup retention cycle (maximum 90 days).
- Gusto Data: Data received from or sent to Gusto follows the same retention schedule, with additional provisions per Gusto's Developer Terms of Service.
- Legal Holds: We may retain data longer if required by law or to resolve disputes.
6. Your Rights and Choices
6.1 General Rights
Depending on your jurisdiction, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Rectification: Request correction of inaccurate or incomplete information.
- Erasure / Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Portability: Request a machine-readable copy of your data.
- Objection: Object to certain processing activities.
- Restriction: Request that we limit how we process your data.
- Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
6.2 CCPA Rights (California Residents)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected, the sources, the business purposes, and the third parties with whom we share it.
- Right to Delete: You may request deletion of your personal information.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- We Do Not Sell Personal Information. Sparky does not sell, rent, or trade your personal information to third parties.
6.3 GDPR Rights (European Economic Area Residents)
If you are in the EEA, our lawful bases for processing are: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), and consent (where applicable, such as location tracking). International data transfers are safeguarded by our providers' Standard Contractual Clauses (SCCs) and equivalent mechanisms.
6.4 How to Exercise Your Rights
To exercise any of these rights, contact us at privacy@heysparky.ai. We will respond within 30 days (or sooner if required by applicable law). We may need to verify your identity before processing your request.
7. Location Data
Sparky collects precise geolocation data only during clock-in and clock-out events, and only with your explicit device-level permission. This data is used to verify on-site presence at job sites for time-tracking accuracy. Location data is associated with the relevant time entry and stored with the same security protections as all other platform data. You may revoke location permissions at any time through your device settings.
8. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 16, we will promptly delete it. If you believe a child has provided us with personal information, please contact us at privacy@heysparky.ai.
9. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any personal information.
10. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours of confirmation and notify relevant regulatory authorities where legally required.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top and notify you through the Service or via email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.
12. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Sparky
Email: privacy@heysparky.ai
Website: heysparky.ai