Privacy Policy

SyncSpark Technologies Inc. ("SyncSpark", "we", "us", "our") operates the SyncSpark platform — an AI-powered business management tool for Canadian service businesses. We are the "organization" responsible for personal information under PIPEDA.

Our Privacy Officer can be reached at: privacy@syncspark.app

This Privacy Policy applies to personal information we collect about:

• Account holders — tradespeople and business owners who subscribe to SyncSpark;
• End customers — the customers of our account holders whose information is processed through the Service;
• Website visitors — people who visit https://www.syncspark.app.

SyncSpark acts as a data processor for personal information about your customers — you (the account holder) remain the data controller for that information and are responsible for your own compliance obligations.

3.1 Information you provide directly

• Account registration: name, business name, email address, phone number
• Business profile: industry type, address, logo, tax settings, invoice preferences
• Customer records: names, phone numbers, email addresses you enter or import
• Payment information: processed by Stripe — we do not store raw card numbers
• Communications content: messages you send and receive through the Service

3.2 Information collected automatically

• Device information: device type, operating system, app version
• Usage data: features used, screens visited, session duration
• Log data: IP address, timestamps, error reports
• Analytics: aggregate, anonymized usage statistics via Vercel Analytics

3.3 Information from third parties

• Authentication data from Clerk (phone number, session tokens)
• Google Business Profile data (reviews, business listing info) when you connect your account
• Accounting data from QuickBooks or Xero when you authorize a connection
• Payment and subscription data from Stripe

We use your personal information for the following purposes, based on your consent and/or our legitimate interests in operating the Service:

• Providing the Service: operating your inbox, generating AI suggestions, creating invoices and quotes, sending SMS messages via Twilio on your behalf
• Account management: authenticating your identity, managing your subscription and billing
• Communications: sending you service-related notifications, support responses, and product updates (you may opt out of marketing communications)
• Improving the Service: analyzing usage patterns to fix bugs and improve features (using aggregated, de-identified data where possible)
• AI model operations: processing message content through Groq AI to generate reply suggestions — message content is sent to Groq for inference but is not used to train third-party models under our agreement
• Legal compliance: meeting our obligations under applicable Canadian law

Under PIPEDA, we rely on the following bases to collect, use, and disclose personal information:

• Consent: you consent when you create an account and agree to these terms. You may withdraw consent at any time (subject to legal or contractual restrictions).
• Contractual necessity: processing necessary to deliver the Service you subscribed to.
• Legitimate interests: operating and improving the Service, preventing fraud and abuse, enforcing our Terms of Service.
• Legal obligation: complying with applicable laws and responding to lawful requests from authorities.

We do not sell, rent, or trade your personal information. We may share it only in these circumstances:

6.1 Service providers (data processors)

We share information with trusted vendors who process it on our behalf under confidentiality obligations:

Some of these providers are located outside Canada. By using the Service, you consent to the transfer of your information to these countries, which may have different data protection laws than Canada.

6.2 Legal requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights, property, or safety of SyncSpark, our users, or the public.

6.3 Business transfers

If SyncSpark is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:

• Account data: retained for the duration of your subscription plus 90 days after termination (to allow data export), then deleted
• Financial records: retained for 7 years to comply with Canadian tax and accounting requirements
• Message content: retained for the duration of your account; you may delete individual threads at any time
• Log data: retained for 90 days for security and debugging purposes

We implement industry-standard technical and organizational measures to protect your personal information, including:

• TLS encryption for data in transit
• Encryption at rest for database storage
• Organization-level data isolation (your data is logically separated from other tenants)
• Access controls and authentication via Clerk
• Automated error monitoring via Sentry

No method of transmission or storage is 100% secure. In the event of a data breach that poses a real risk of significant harm, we will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

As a Canadian resident, you have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete information
• Withdrawal of consent: withdraw your consent to our collection or use of your personal information (subject to legal or contractual restrictions that may limit our ability to continue providing the Service)
• Deletion: request deletion of your personal information, subject to our retention obligations
• Complaint: file a complaint with the Office of the Privacy Commissioner of Canada at www.priv.gc.ca

To exercise any of these rights, contact our Privacy Officer at privacy@syncspark.app. We will respond within 30 days.

Our website uses minimal tracking. We use Vercel Analytics for aggregate, privacy-preserving analytics (no cookies, no cross-site tracking, no personal identifiers). We do not use advertising cookies or third-party tracking pixels.

The mobile application does not use advertising identifiers. We use Sentry for crash reporting, which may collect device identifiers.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete it.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or in-app notification at least 14 days before the changes take effect. The "Effective date" at the top of this page indicates when the current version was last revised.

For privacy-related questions, requests, or complaints, contact our Privacy Officer:

If you are not satisfied with our response, you may escalate your complaint to the Office of the Privacy Commissioner of Canada at www.priv.gc.ca or 1-800-282-1376.