Template notice. This document is a standard-form template covering the disclosures commonly required under U.S. state privacy laws. Replace the [bracketed] items and have it reviewed by legal counsel before relying on it in production.

SparkCRA

Privacy Notice

Effective date: [DATE] · Last updated: [DATE]

SparkCRA is a business pricing and sales-enablement application operated by SparkCR LLC ("SparkCRA," "we," "us"). This notice explains what personal information we collect through the SparkCRA application at studio.sparkcra.com and related sites, how we use and share it, and the choices and rights you have. SparkCRA is a business-to-business tool and is not directed to children.

1. Information we collect

Account & identity

When you are invited to or sign in to SparkCRA, we process your name, email address, organizational role (admin, viewer, or provider viewer), and the organization or provider account you are associated with. Authentication is handled by Microsoft Entra; we do not receive or store your password.

Content you provide

Administrators enter business data such as provider names, product/pricing information, and comparison figures. This is business information used to operate the service for your organization.

Usage & device data

We and our infrastructure providers automatically log technical data such as IP address, browser/device type, timestamps, and actions taken in the application (for security, auditing, and reliability).

2. How we use information

To provide, secure, and operate the SparkCRA application and its features;
To authenticate users and enforce role-based access (only your own data is shown to you);
To maintain an audit trail of pricing, access, and account changes;
To detect, prevent, and investigate security incidents and misuse;
To comply with legal obligations and enforce our agreements.

3. How we share information

We share personal information only as needed to run the service:

Service providers / sub-processors — including Microsoft Azure and Microsoft Entra (hosting, database, identity) and, where configured, email delivery providers, all acting on our instructions.
Your organization — administrators of your organization or provider account may see account and activity information within their scope.
Legal & safety — where required by law or to protect rights, safety, and security.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Cookies & similar technologies

SparkCRA uses only the storage strictly necessary to keep you signed in and operate the application (for example, session and authentication tokens). We do not use third-party advertising or cross-site tracking cookies.

5. Data security

We use industry-standard safeguards, including encryption in transit, identity-based access control with multi-factor authentication, and database row-level security that isolates each provider's data. No method of transmission or storage is completely secure, but we work to protect your information.

6. Data retention

We retain personal information for as long as your account is active and as needed to provide the service, then for a reasonable period to meet legal, audit, and security obligations, after which it is deleted or de-identified.

7. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or obtain a copy of your personal information, and to appeal a decision. California residents have specific rights described in our Your Data Rights notice. To exercise any right, contact us at [privacy@sparkcra.com].

8. Children's privacy

SparkCRA is intended for business use and is not directed to individuals under 16. We do not knowingly collect personal information from children.

9. Changes to this notice

We may update this notice from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

10. Contact us

SparkCR LLC · [mailing address]
Email: [privacy@sparkcra.com]