Privacy Policy

Introduction

This Privacy Policy explains what personal information MySpark collects, how we use and share it, and the choices you have. It applies to the MySpark website and related services (the “Service”).

Information We Collect

• Account information: your name, email address, and password. Passwords are stored hashed by our authentication provider, never in plain text.
• Google Sign-In data: if you sign in with Google, we receive the name, email address, and profile photo Google shares. Signing in with Google does not by itself mean you agree to this Policy or our Terms; see “Agreement via Google Sign-In” in the Terms of Service.
• Consent records: when you accept our Terms, we store the date and the version you accepted, and whether you opted in to product emails.
• Your Content: the projects you create, including startup details, financial assumptions and results, business plans, and pitch decks.
• Device and usage data: IP address, browser and device type, and request logs, collected automatically by our hosting provider.

How We Use Information

We use this information to operate and provide the Service: to run your account, store your projects, calculate financial models, generate content you ask for, keep the Service secure, and contact you about your account. If you opt in, we also send product updates and tips, and you can unsubscribe anytime.

AI Features

When you use an AI feature, such as generating a business plan section or pitch deck, the relevant project content is sent to Google's Gemini API to produce the result. Google processes it under the Gemini API terms, which, depending on the service tier, may allow Google to use it to improve its products. Don't include information in a project that you aren't comfortable sending to an AI provider. Financial calculations run on our own systems and are not sent to an AI provider.

Google User Data

Google Sign-In is optional. If you use it, MySpark receives only your name, email address, and profile photo, which we use to create your account and sign you in. MySpark's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We don't sell it, use it for advertising, or use it to train AI models.

How We Share Information

We do not sell your personal information. We share it only:

• With service providers that operate the Service for us: Supabase (database and authentication, including account emails), Vercel (hosting), and Google (Sign-In and the Gemini API).
• In a business transfer, if MySpark is acquired, merges, or sells substantially all of its assets.
• For legal reasons, if required by law or legal process, or to protect the rights, property, or safety of MySpark, our users, or the public.

Your projects are private to your account.

Your Privacy Rights and Choices

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you. To make a request, or to delete your account, email support@myspark.dev. We will not discriminate against you for exercising these rights.

Data Retention and Security

We keep your information for as long as your account is active or as needed to provide the Service, comply with legal obligations, or resolve disputes. We use industry-standard safeguards, including encryption in transit, hashed passwords, and database access rules that keep each user's projects private to them. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If we learn we have, we will delete it.

International Users

The Service is operated from the United States. If you use it from elsewhere, your information will be transferred to and processed in the U.S., which may have different data protection laws than where you live.

Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of material changes through the Service or by email before they take effect, and you'll be asked to accept the updated Policy before continuing to use the Service.

Contact

Questions about this Privacy Policy or your privacy rights: support@myspark.dev.