Sparks Simple
Get started

Legal

Privacy Policy

Last updated: March 8, 2026

Sparks Simple (“we,” “our,” or “us”) operates the Sparks Simple platform, which allows businesses to embed searchable document widgets on their websites. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

Account information

When you sign up, we collect your name, email address, and company name. If you subscribe to a paid plan, Stripe collects your payment card details on our behalf — we never see or store raw card numbers.

Content you upload

We store the PDF and document files you upload to power your search widgets. These files are stored securely in Supabase object storage and are accessible only to you and users of your embedded widget.

Usage data

We collect information about how you use the dashboard — pages visited, features used, search queries performed within your widget. This helps us improve the product.

Widget visitor data

When someone uses a search widget embedded on your website, we log the search query and the document they viewed. We do not collect personally identifiable information about your website's visitors unless they voluntarily submit it (e.g., a contact form).

Contact submissions

If you contact us via our contact form, we collect your name, email, company, and the content of your message.

2. How We Use Your Information

  • To provide, operate, and maintain the Sparks Simple service
  • To process payments and manage your subscription via Stripe
  • To send transactional emails (account confirmation, password reset, receipts)
  • To respond to support requests and contact form submissions
  • To send product updates and newsletters — you can unsubscribe at any time
  • To detect and prevent fraud, abuse, and security incidents
  • To improve and develop new features based on aggregated usage patterns
  • To comply with legal obligations

We do not sell your personal information to third parties. We do not use your data to train AI models or for advertising purposes.

3. Information Sharing

We share information only in the following limited circumstances:

Service providers

We use trusted sub-processors including Supabase (database and file storage), Stripe (payment processing), and Resend (transactional email). Each provider processes data only as necessary to provide their service to us.

Legal requirements

We may disclose information if required by law, court order, or governmental authority, or to protect the rights and safety of Sparks Simple, our users, or the public.

Business transfers

If Sparks Simple is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you via email and/or prominent notice on the site before this occurs.

4. Cookies & Tracking

We use a minimal set of cookies:

Authentication cookie

A single session cookie that keeps you logged in to the dashboard. This is strictly necessary for the service to function and cannot be opted out of while using the product.

Analytics

We use Google Analytics (GA4) with IP anonymisation enabled to understand aggregate usage of our marketing site. You can opt out via the Google Analytics opt-out browser add-on.

We do not use advertising cookies or sell cookie data to any third party.

5. Data Retention

We retain your account data and uploaded documents for as long as your account is active. If you delete your account, we will delete your personal information and uploaded files within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., payment records which may be retained for up to 7 years). Anonymised, aggregated analytics data may be retained indefinitely.

6. Security

We take reasonable measures to protect your information from unauthorised access, disclosure, alteration, and destruction. All data is encrypted in transit via TLS and at rest using AES-256 encryption. We use Row Level Security (RLS) in our database so that each customer can only access their own data. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access — request a copy of the personal data we hold about you
  • Correction — ask us to correct inaccurate or incomplete data
  • Deletion — request that we delete your personal data
  • Portability — receive your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interests
  • Restriction — request that we restrict processing in certain circumstances

To exercise any of these rights, email us at hello@sparkssimple.com. We will respond within 30 days.

8. Third-Party Services

Our service integrates with the following third-party providers:

SupabaseDatabase, authentication, and file storage — Privacy Policy
StripePayment processing and subscription management — Privacy Policy
ResendTransactional email delivery — Privacy Policy
Google AnalyticsAggregate website analytics — Privacy Policy

9. Children's Privacy

Sparks Simple is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email and update the “Last updated” date at the top of this page. Continued use of the service after changes become effective constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Sparks Simple

Email: hello@sparkssimple.com