Privacy

This Privacy Policy describes how SPARKIT ("we," "us") handles personal information collected through the SPARKIT Odyssey API and the sparkit.science website.

1. Information we collect

Account information. When you sign up, we collect your email address and a hashed password.

API credentials. We mint API keys on request and store only their hashes; the plaintext key is shown to you exactly once.

Billing data. When you start a paid plan, we collect your Stripe customer ID, subscription state, and invoice history. Stripe — not SPARKIT — handles your card details directly.

Research queries and results. We store the questions you submit, the structured Markdown reports we return, and metadata about each job (model, tools used, runtime, token count) for billing and quality purposes.

Usage logs. We retain request logs (request ID, endpoint, status code, timestamps, IP address, User-Agent) for security, abuse prevention, and debugging.

Cookies. The dashboard at app.sparkit.science uses one essential session cookie (sparkit_session) for authentication. Marketing pages at sparkit.science use Vercel's privacy-mode analytics, which does not set tracking cookies.

2. How we use it

• Provide and operate the API and dashboard
• Bill you and prevent fraud
• Detect abuse and enforce rate limits
• Improve the service and debug issues
• Communicate service-affecting changes
• Comply with legal obligations

We do not sell your data. We do not use your research queries or returned reports to train any model.

3. Subprocessors

We rely on the following providers to operate the service:

Each provider operates under its own privacy policy and contractual obligations.

4. Data retention

• Account data is kept while your account is active and deleted within 30 days of account closure on request.
• Research queries and results are retained for one year unless you request earlier deletion.
• Billing data is retained for 7 years for tax and audit compliance.
• Server logs are retained for 90 days.

5. Your rights

You may at any time:

• Request a copy of your data
• Request deletion of your account and data, subject to legal retention
• Update your account email or password
• Cancel a subscription (cancellation takes effect at end of billing period)

Email info@sparkit.science to make a request.

6. Children

The service is not directed to anyone under 13 (or 16 in jurisdictions that require it). We do not knowingly collect data from children.

7. International transfers

We operate primarily in the United States. By using SPARKIT, you consent to processing in the U.S. and other jurisdictions where our subprocessors operate.

8. Changes

We may update this policy. Material changes will be announced on sparkit.science/blog or by email. The effective date above always reflects the current version.

9. Contact

Questions, requests, or concerns: info@sparkit.science.