Privacy Policy

SparkBot is operated by Hello Spark LLC ("we", "us"). This policy covers the SparkBot website, the SparkBot web app, and the SparkBot Chrome extension (together, "SparkBot"). Questions or requests go to malcolm.felt@hellospark.ai.

The short version

• We read the pages you run a SparkBot on to answer your questions, and keep a record of each answer for 90 days.
• We don't keep the pages you train a SparkBot on. A SparkBot keeps its questions, the right answers you confirmed, and the addresses of its training pages.
• We don't use your pages or data to train AI models, and we don't let the AI providers that process them for us do so.
• We don't sell your personal information, show you ads, or use tracking or analytics cookies.

What we collect

Your account

Your name, email address and password, or, if you sign in with Google, your name, email address and profile picture from Google. Passwords are held by our sign-in provider; we never see them.

Pages you run a SparkBot on

When you run a SparkBot, or a SparkBot runs by itself on a site you've allowed, the extension sends the page's address, title and text to our servers so the SparkBot can answer. For a PDF, the extension downloads the file in your browser, using your existing session with the site that hosts it, so documents you're signed in to work too.

We keep a record of each run: the page's address and title, the answers and score, and the lines of the page each answer quotes as evidence. We don't keep the rest of the page, only a one-way fingerprint of it, so the same page isn't processed twice in a day. Your runs appear in your History.

When you open the SparkBot panel on a page none of your SparkBots know, the extension sends only that page's title and address, to suggest a SparkBot that fits. The extension sends nothing else as you browse.

SparkBots you train

Training a SparkBot means telling it what you want to know on a page. The page's text is used while you train and test it, then discarded. The SparkBot keeps what it's made of: its questions, the details it reads, how it scores, the sites it applies to, the right answers you confirmed, and the address and title of each page you trained it on. We keep earlier versions of a SparkBot so you can see how it changed. If you give us a page's address instead of opening it, our servers fetch that page to train on it.

Messages you send us

When you use our contact form or email us, we receive your name, email address and message, and keep them in our email so we can reply and follow up.

Sharing

The email addresses of people you share a SparkBot with, and the role you gave each one.

Billing

Payments are processed by Stripe. We receive and keep your Stripe customer and subscription identifiers, your plan, and its status and renewal date, along with a cancellation reason if you choose to give one. We never see or store your card number.

Technical information

Our hosting provider receives your IP address with each request. We use it to limit how often requests can be made when you're signed out, and keep those records for about an hour. When something goes wrong, we log the error without page content or your email address.

In your browser

The extension stores your sign-in token and your installed SparkBots in Chrome's local storage, and the latest results for each open tab in Chrome's session storage, which clears when you close the browser.

How we use it

• To run SparkBot: answering questions about pages, training and testing SparkBots, suggesting SparkBots, and syncing them to the extension.
• To manage your account, plan and payments.
• To send the emails you need to sign in: verification codes, sign-in links and password resets. We don't send marketing email.
• To keep SparkBot secure, prevent abuse and enforce our Terms.
• To answer you when you contact us.

Your pages and data are never used to train AI models, whether for you, for other customers, or by us. A SparkBot is a set of instructions, not a model built from your content.

Who we share it with

We share information only as described here.

• Service providers that run parts of SparkBot for us, under contracts that limit them to doing so: hosting and databases, sign-in and account management, AI model providers that read page text to answer questions and help you train SparkBots, Stripe for payments, and email delivery for sign-in emails and contact form messages. AI providers may keep data briefly for security and abuse monitoring, as their terms require, and may not use it to train their models.
• Google, if you choose to sign in with Google.
• People you share with. Sharing a SparkBot shares its instructions: its questions, details, score and sites. Your pages and runs never go with it. People you make editors can change the SparkBot.
• Everyone, if you publish. A SparkBot published to the Gallery is public, shown with your name. Making it private again removes it from the Gallery.
• When the law requires it, or to protect the rights, safety or property of our users, the public or us.
• In a business transfer, such as a merger or sale of assets, in which case this policy continues to apply to your information.

We don't sell your personal information, or share it for advertising.

Cookies

The web app sets one cookie, which keeps you signed in. We don't use analytics, advertising or tracking cookies, and the SparkBot website sets no cookies at all.

How long we keep it

• Runs: 90 days, then deleted.
• SparkBots and their versions: until you delete the SparkBot or your account.
• Extension sign-ins: 30 days, or until you sign out.
• Account information: while you have an account.
• Billing records: as long as tax and accounting law requires.

Your choices and rights

You can see your SparkBots and runs in the web app, delete SparkBots, stop sharing them, and remove sites a SparkBot has learned. To get a copy of your information, correct it, or delete your account and everything in it, email malcolm.felt@hellospark.ai. We'll confirm the request comes from you and respond within 30 days.

Depending on where you live, you may have further rights, such as to object to or restrict how we use your information, or to complain to a data protection authority. We'll honor them as the law requires, and we won't treat you differently for using them.

Chrome extension

The extension asks for access to a site only when you turn a SparkBot on for it, and you can remove that access in Chrome at any time. The use of information received from the extension adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements.

Security

All traffic is encrypted with HTTPS. Extension sign-in tokens are stored only in hashed form, and a strict content security policy keeps other sites' code out of our pages. No system is perfectly secure, but we work to protect your information and will tell you if a breach affects it.

Where it's processed

SparkBot runs in the United States. If you use it from elsewhere, your information is transferred to and processed in the United States.

Children

SparkBot is for adults and isn't directed at children. We don't knowingly collect information from children under 13. If you believe a child has given us information, email us and we'll delete it.

Changes to this policy

When we change this policy, we'll update the date at the top. If a change is significant, we'll tell you by email or in the app before it takes effect.

Contact

Hello Spark LLC
malcolm.felt@hellospark.ai