Privacy Policy

Introduction

Spark ("Spark," "we," "us," or "our") operates the Spark platform at runspark.ai and app.runspark.ai. This Privacy Policy explains how we collect, use, disclose, and protect your information when you visit our website, use our platform, or receive communications sent through our platform on behalf of businesses that use Spark.

By using our services or receiving messages sent through Spark, you agree to the practices described in this policy. Spark acts as a service provider for businesses that use the platform and as a direct controller for Spark-owned website, account, billing, support, and sales communications.

Information We Collect

Information You Provide Directly:

• Account registration information (name, email address, password)
• Business and workspace information (company name, industry, team members)
• Payment and billing information (processed securely through Stripe; we do not store full credit card numbers)
• API keys you provide for third-party integrations (encrypted at rest using AES-256-GCM)
• Content you upload to the platform (documents, knowledge base files, prompts, workflows, agent configurations)
• Consent records, form submissions, source URLs, timestamps, and communication preferences

Information Collected Through Businesses Using Spark:

• Contact information submitted by leads and customers through business websites (name, email, phone number)
• SMS message content sent and received through the platform
• Call recordings and transcriptions made through the platform's dialer feature
• Conversation history between contacts and AI agents or human team members
• Workflow data, CRM records, lead notes, tags, status changes, and integration activity configured by the business workspace

Information Collected Automatically:

• Device and browser information (IP address, browser type, operating system)
• Usage data (pages visited, features used, timestamps)
• Cookies and similar tracking technologies for authentication and analytics
• Mobile app data: device model and OS version, and — if you enable notifications — a push notification device token used solely to deliver alerts about your workspace (new leads, messages, missed calls)

Mobile Application

The Spark iOS app accesses the same workspace data as the web platform (contacts, conversations, call activity) under the same protections described in this policy. In addition:

• Push notifications are optional. If enabled, we store an Apple-issued device token linked to your account to deliver workspace alerts. Disabling notifications in iOS Settings stops delivery; tokens for inactive devices are pruned.
• Microphone access is requested only to place in-app calls; audio is processed by our telephony provider (Twilio) and, where call transcription or recording is enabled by your workspace, handled as described in the calling sections of this policy.
• AI features (drafted message replies and live call coaching) send message content and call transcripts to a third-party AI service, Google's Gemini AI. In the app these features are off until you review the in-app disclosure and grant permission, and you can turn them off anytime in Settings → AI & Privacy. See AI Features and Third-Party AI Processing below.
• No tracking: the app does not track you across other companies' apps or websites and contains no third-party advertising or analytics SDKs.
• Account deletion can be initiated in the app (Settings → Delete account) or by emailing support@runspark.ai; we process deletion requests as described under Your Rights and Data Retention.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Spark platform
• Send and receive SMS messages on behalf of businesses using our platform
• Facilitate AI-powered conversations between businesses and their leads or customers
• Process transactions and manage billing
• Provide customer support
• Improve reliability, safety, performance, and product features using operational, aggregated, anonymized, or de-identified data where appropriate
• Comply with legal obligations
• Protect against fraud, abuse, and unauthorized access

SMS/Text Messaging

If you provide your mobile phone number through a form on our website and actively check the SMS consent box, you agree to receive SMS/text messages from Spark OS LLC related to your Spark inquiry. These messages may include follow-ups, demo or strategy call scheduling, appointment reminders, onboarding, and support communications.

• Opt-In: SMS consent requires a separate affirmative checkbox action. Providing a phone number alone does not create SMS consent. You may submit the form without checking the SMS consent box, even if you provide a phone number.
• Message Frequency: Message frequency varies based on your inquiry and engagement.
• Message and Data Rates: Message and data rates may apply.
• Opt-Out: You can opt out at any time by replying STOP to any message. No further messages will be sent unless you opt in again.
• Help: Reply HELP for help or contact admin@runspark.ai.
• Consent Not Required: Consent to receive SMS/text messages is not a condition of purchase or use of Spark services.
• No Promotional Marketing Under Spark Direct SMS: The Spark-owned website SMS opt-in is for conversational customer-care messages about your Spark inquiry, demo or strategy call, appointment reminders, onboarding, account setup, and support. It is not an opt-in to promotional marketing texts.

Mobile Information Sharing: Mobile phone numbers, SMS consent, and related opt-in data will not be shared, sold, rented, or disclosed to third parties or affiliates for their own marketing or promotional purposes.

We use third-party technology platforms to facilitate SMS communications on behalf of Spark OS LLC. Your phone number and consent preferences are securely transmitted to these platforms solely to deliver the text messages you have opted into, maintain consent records, support opt-out handling, prevent fraud or abuse, or comply with law.

How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

• With Businesses Using Spark: Contact information and conversation data are accessible to the business workspace that manages your relationship. Spark acts as a service provider on behalf of these businesses.
• Service Providers: We use third-party services to operate the platform. These providers may process information only as needed to provide infrastructure, security, support, payments, communications, analytics, databases, transcription, automation, and AI-powered features. They are not authorized to use your personal information, Customer Data, mobile numbers, SMS opt-in data, or SMS consent records for their own promotional or marketing purposes. Providers may include:
  • Supabase (database and authentication)
  • Stripe (payment processing)
  • Telnyx or Twilio (SMS messaging and voice calls)
  • Deepgram (call transcription)
  • AI model providers (Anthropic, OpenAI, Google) for AI-powered features
• AI Model Processing: Unless separately agreed in writing or enabled by the workspace owner, we do not permit third-party AI model providers to use Customer Data submitted through Spark to train their public foundation models.
• Aggregated or De-Identified Data: We may use aggregated, anonymized, or de-identified information that does not identify a person, contact, business, or workspace to analyze performance, improve reliability, and develop platform features.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or government request.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Data Security

We implement industry-standard security measures to protect your information:

• All data transmitted to and from our platform is encrypted in transit (TLS/HTTPS)
• Sensitive credentials and API keys are encrypted at rest using AES-256-GCM
• Agent containers run with restricted permissions and resource limits
• Workspace data is logically separated by account and workspace controls
• Access to platform infrastructure and customer data is restricted to authorized personnel and service providers with a business need
• We conduct regular security reviews of our systems

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

• Account and workspace data is retained for as long as your account is active.
• SMS messages and conversation history are retained for as long as the business workspace exists on our platform.
• Call recordings are retained according to the business's workspace settings.
• If you request deletion of your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.
• Contacts can request data deletion by contacting the business that manages their information or by emailing us at admin@runspark.ai.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your personal information
• Opt out of SMS communications (reply STOP)
• Withdraw consent for data processing

To exercise these rights, contact us at admin@runspark.ai.

Children's Privacy

Spark is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised "Last Updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.