Privacy Policy

Your personal information is collected and processed by SPVRKD AG ("Sparkit," "we," "our," or "us"), registered in Switzerland under company number CHE-260.912.934, with its principal office at Baarerstrasse 78, 6300 Zug, Switzerland.

We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, how it is shared, and what rights you have when using our website or mobile application ("App").

If you have any questions, please contact us at support@sparkit.com.

Account data: name, email address, password (hashed), and profile information you provide when registering.

Usage data: pages visited, features used, session duration, device type, operating system, and IP address.

Design & project data: prompts, generated designs, tech packs, and sourcing requests created within the platform.

Payment data: billing address and transaction records. Card details are processed directly by our payment provider (Stripe) and are never stored on our servers.

Communications: messages you send to our support team or through the platform.

To provide, operate, and improve the Sparkit platform and App.

To process orders, sourcing requests, and payments.

To personalise your experience and recommend relevant factories, materials, and agents.

To send transactional communications (order confirmations, shipping updates).

To send marketing communications where you have opted in.

To comply with legal obligations and enforce our Terms & Conditions.

To detect and prevent fraud or abuse.

Contract performance: processing necessary to deliver services you have requested.

Legitimate interests: improving our platform, preventing fraud, and securing our systems.

Consent: where you have given explicit opt-in consent (e.g. marketing emails).

Legal obligation: where we are required to process data by applicable law.

We do not sell your personal data. We may share data with:

Factory and supplier partners, solely to fulfil your production requests.

Service providers (Supabase, AWS, Stripe, PostHog) under strict data processing agreements.

Legal authorities where required by law or to protect our rights.

Acquiring entities in the event of a merger or acquisition, subject to the same privacy commitments.

We use essential cookies to operate the platform, analytics cookies to understand usage, and marketing cookies where you consent. You may manage cookie preferences through your browser settings or our cookie banner.

We retain your data for as long as your account is active or as required by law. Account data is deleted within 30 days of account closure. Anonymised usage data may be retained indefinitely for platform improvement.

Depending on your location, you may have rights to: access, correct, delete, or port your personal data; restrict or object to processing; and withdraw consent at any time. To exercise these rights, contact privacy@sparkit.com.

Your data may be processed in countries outside your own, including Switzerland, the EU, and the USA. Where transfers occur, we rely on standard contractual clauses or other approved mechanisms to ensure adequate protection.

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

The platform is not intended for users under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with data, contact support@sparkit.com and we will delete it promptly.

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before taking effect. Continued use of the platform constitutes acceptance of the updated policy.

For privacy-related questions or to exercise your rights, contact: privacy@sparkit.com

SPVRKD AG, Baarerstrasse 78, 6300 Zug, Switzerland