Privacy Policy

Effective date: June 1, 2025

SparkPanel ("we," "us," or "our") operates the SparkPanel platform at sparkpanel.io and all associated subdomains. This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.

By creating an account or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use SparkPanel.

1. Information We Collect

1.1 Account Information

When you sign up, we collect your first and last name, email address, phone number, business name, city, state, and chosen subdomain slug.

1.2 Customer & Job Data

As you use SparkPanel, you create and store records including leads, customers, jobs, estimates, invoices, scheduling entries, documents, and communications. This data is owned by you (the tenant) and is stored in your isolated workspace.

1.3 End-Customer Data

Your customers may provide personal information through your SparkPanel-powered booking form or customer portal—such as name, email, phone number, address, and service descriptions. You are the data controller for this information; SparkPanel acts as a data processor on your behalf.

1.4 Payment Information

Subscription billing and invoice payments are processed by Stripe. We do not store full credit card numbers on our servers. Stripe's collection and use of your payment information is governed by their Privacy Policy.

1.5 Communication Data

SMS messages sent and received through SparkPanel are transmitted via Twilio. Message content, timestamps, and phone numbers are logged to provide conversation history and delivery status. Twilio's handling of this data is governed by their Privacy Policy.

1.6 Usage & Analytics Data

We automatically collect standard server logs (IP address, browser type, pages visited, timestamps) and may use analytics tools to understand how the platform is used so we can improve it.

1.7 Cookies & Authentication Tokens

We use HTTP-only authentication tokens (JWTs) to keep you signed in. We may use cookies for session management and basic analytics. We do not use third-party advertising cookies.

2. How We Use Your Information

To provide, operate, and maintain the SparkPanel platform.
To process subscription payments and enforce plan-based usage limits.
To send transactional emails and SMS (e.g., appointment reminders, invoice notifications) on your behalf.
To provide customer support and respond to your requests.
To detect and prevent fraud, abuse, or security incidents.
To analyze aggregate usage patterns and improve the platform.

3. Data Sharing & Third Parties

We do not sell, rent, or share your personal information or your customers' data with third parties for marketing purposes. We share data only with:

Stripe — for payment processing.
Twilio — for SMS delivery.
Infrastructure providers — hosting, database, and email delivery services that process data on our behalf under strict confidentiality agreements.
Legal compliance — if required by law, subpoena, or valid legal process.

4. Multi-Tenant Data Isolation

SparkPanel uses a multi-tenant architecture where each business workspace is logically isolated. Your data is not accessible to other tenants. Customer data belongs to you, not to SparkPanel.

5. Data Retention

Active accounts: Data is retained for as long as your account is active.
Cancelled accounts: After cancellation, your data is retained for 90 days to allow for reactivation, then permanently deleted.
Communication logs: SMS and email logs are retained for the lifetime of the account for your records.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you.
Correction: Update or correct inaccurate data via your account settings.
Deletion: Request deletion of your account and associated data.
Export: Request a machine-readable export of your data.
Opt-out of communications: You can unsubscribe from marketing emails at any time. Transactional emails related to your account cannot be opted out of while your account is active.

To exercise any of these rights, contact us at support@sparkpanel.io.

7. SMS & TCPA Consent

End-customers who submit a booking request through your SparkPanel-powered website may opt in to receive SMS appointment reminders and updates. Consent is recorded with a timestamp and can be withdrawn at any time by replying STOP. SparkPanel enforces quiet hours (no automated texts before 8 AM or after 9 PM local time) and restricts bulk SMS to opted-in recipients only.

8. Security

We take reasonable technical and organizational measures to protect your data, including encrypted connections (TLS), hashed passwords, role-based access controls, and audit logging. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's Privacy

SparkPanel is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

10. California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information. To make a request, email support@sparkpanel.io.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective date" at the top. For material changes, we will notify you by email or by a notice within the platform. Your continued use of SparkPanel after changes take effect constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or your data, please contact us:

Email: support@sparkpanel.io