Privacy Policy

1. Introduction

Sparkora (“we,” “our,” or “us”) is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services. Sparkora is operated from Luxembourg and complies with all applicable EU data protection regulations.

2. Information We Collect

2.1 Information You Provide

• Account registration data (name, email address, company name)
• Employee records you enter into the platform (names, contact details, contract information)
• Client and customer data you manage through Sparkora
• Financial information (invoicing details, payroll data)
• Communications with our support team
• Scheduling and time-tracking entries

2.2 Automatically Collected Information

• Device and browser information
• IP address and approximate location
• Usage patterns and feature interactions
• Log data (access times, pages viewed, errors)

3. How We Use Your Information

We use the collected information to:

• Provide, maintain, and improve our platform and services
• Process payroll, scheduling, and invoicing operations
• Generate AI-powered business insights and reports
• Send service-related notifications (email, SMS, WhatsApp)
• Respond to your inquiries and provide customer support
• Detect, prevent, and address technical issues or security threats
• Comply with legal obligations

4. Data Storage and Security

All data is stored on servers located within the European Union. We employ bank-grade encryption (AES-256) for data at rest and TLS 1.3 for data in transit. Access to production systems is restricted through role-based access controls, multi-factor authentication, and regular security audits.

5. Data Sharing

We do not sell, rent, or trade your personal data to third parties. We may share data with:

• Service providers: Trusted third-party vendors who assist in operating our platform (hosting, email delivery, payment processing), bound by strict data processing agreements
• Legal authorities: When required by law, court order, or governmental regulation
• Business transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to affected users

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. Upon account deletion, we remove your personal data within 30 days, except where retention is required by law (e.g., financial records for tax compliance). You may request data export at any time via the platform's built-in Excel export feature.

7. Your Rights

Under EU data protection law, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Erase your data (“right to be forgotten”)
• Restrict or object to data processing
• Data portability (export your data in a structured format)
• Withdraw consent at any time

To exercise any of these rights, contact us at privacy@sparkora.lu.

8. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: