Privacy Policy

Last updated: February 27, 2026

1. Introduction

Sparkey Ltd. ("Sparkey", "we", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform and services.

2. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, company name, and role when you register
• Integration Data: Metadata from connected tools (e.g., commit history, issue tracking data, communication patterns) used to generate insights
• Usage Data: How you interact with the Sparkey platform, including feature usage and session data
• Technical Data: Browser type, IP address, and device information for security and performance

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Sparkey platform
• Generate team-level and organizational insights
• Communicate with you about your account and service updates
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Processing and Storage

All data is encrypted at rest (AES-256) and in transit (TLS 1.2+). Data is stored in SOC 2 compliant cloud infrastructure. We offer data residency options for customers with specific geographic requirements, including EU-based storage.

5. Data Sharing

We do not sell your data. We share data only with service providers who assist in operating the platform, under strict contractual obligations. We may disclose data when required by law or to protect our rights.

6. GDPR Compliance

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). This includes:

• Processing data with a lawful basis (contract performance, legitimate interest, or consent)
• Supporting Data Subject Access Requests (DSARs)
• Providing Data Processing Agreements (DPAs) to all customers
• Implementing data minimization and purpose limitation principles
• Maintaining records of processing activities

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing
• Data portability
• Withdraw consent at any time

8. Data Retention

We retain your data for the duration of your subscription and for 90 days following termination. After this period, data is permanently deleted unless a longer retention is required by law or requested by you in writing.

9. Cookies and Tracking

We use essential cookies to operate the platform and analytics cookies to understand usage patterns. You can manage cookie preferences through your browser settings. We do not use third-party advertising cookies.

10. Security

We implement industry-standard security measures including encryption, access controls, regular security audits, and employee training. We are currently undergoing SOC 2 Type II and ISO 27001 observation to formalize our security posture.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email at least 30 days before they take effect.

12. Contact

For privacy-related inquiries, contact us at admin@sparkey.ai.