Privacy Policy

1. Data Collection and Storage

We collect and store the following types of information:

• Name and contact information
• Email addresses
• Phone numbers
• Conversation history

All data is stored securely using Supabase infrastructure with appropriate security measures.

2. Data Retention

Your data is retained for one year by default. Before this period expires, you will receive a notification with the option to extend the retention period. You may choose to extend this period indefinitely.

You have the right to request deletion of your data at any time before the retention period ends.

3. Data Security

We implement robust security measures including:

• End-to-end encryption for all data transmission (TLS 1.3)
• AES-256 encryption for data at rest
• Regular security audits and penetration testing
• Multi-factor authentication for user accounts

4. Data Sharing and Third Parties

We do not share your data with any third parties. Your uploaded content and knowledge base materials are strictly confidential and accessible only to you.

5. HIPAA and GDPR Compliance

We maintain compliance with both HIPAA and GDPR requirements. In the event of a data breach:

• We will notify affected users within 72 hours
• Provide a detailed incident report including the nature of the breach, types of data affected, and mitigation steps
• Engage our dedicated security team for immediate response

6. Your Rights

You have the right to:

• Request access to your personal data
• Request correction of your personal data
• Request deletion of your data
• Withdraw consent at any time
• Request data portability

7. Contact Information

For any privacy-related questions or requests, please contact us at patrick@sparkco.ai or call (401) 749-6976. For more information about using our services, please refer to our Terms of Service.

8. Updates to Privacy Policy

We may update this privacy policy from time to time. We will notify you of any significant changes.