Privacy Policy

This privacy policy describes how ContentSpark ("we," "us," or "our") collects, uses, and protects your personal information when you use our website and services.

Information We Collect

We collect the following types of information when you use ContentSpark:

• Account information: Your email address, first name, and password when you create an account.
• Business information: Your business name and industry, which you provide when generating content.
• Generated content: The marketing content our AI creates for your business.
• Usage data: Information about how you interact with our service, including pages visited and features used.
• Payment information: Billing details processed securely through our payment provider (we do not store credit card numbers directly).

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the ContentSpark service (including personalizing your dashboard experience with your first name).
• Generate personalized marketing content for your business.
• Process payments and manage your subscription.
• Send important service-related communications, including optional weekly content calendar emails if you opt in.
• Improve our AI content generation quality.
• Protect against fraud and abuse.

Service Tiers

ContentSpark offers a free tier that allows one content calendar generation without an account. Additional generations require a Pro subscription ($20/month), which unlocks unlimited generations, brand voice settings, content history, recurring events, and additional tone options.

Third-Party Services

We use the following third-party services to operate ContentSpark:

• Supabase: For user authentication and data storage. Your account information and generated content are stored securely in Supabase.
• Lemon Squeezy: For payment processing and subscription management. Your payment information is handled directly by Lemon Squeezy and is subject to their privacy policy.
• AI providers: We use AI services to generate content. Your business name, industry, business description, tone preference, and any events or promotions you enter are sent to these providers to create your content. No other personal information is shared.
• tinystat: For privacy-first website analytics. tinystat uses no cookies, does not collect personal data, and does not store IP addresses. Visitor counts are estimated using a daily-rotating hash that cannot be reversed. No data is stored on your device.

Data Retention

Your account information is stored for as long as your account is active. Generated content calendars are automatically deleted after 90 days and cannot be recovered. If you have enabled expiry notifications, we will email you 7 days before your content is deleted so you can save anything you need.

If your account is deleted (either by you or at your request), all personal information and generated content is permanently removed immediately.

Your Rights

You have the right to:

• Access your data: Request a copy of the personal information we hold about you.
• Export your data: Use the "Request My Data" button in your Account settings to receive a complete copy of your profile and generated content via email.
• Delete your data: Request deletion of your account and all associated data. You will receive a confirmation email when your account has been deleted.
• Correct your data: Update or correct any inaccurate information through your dashboard settings.

For any data requests that cannot be completed through your account settings, contact us at support@contentspark.pro.

Cookies & Analytics

ContentSpark uses minimal cookies. We only use essential authentication session cookies required to keep you signed in. We do not use advertising cookies or tracking cookies.

We use tinystat, a privacy-first analytics service, to understand general usage patterns such as page views, referral sources, and device types. tinystat does not use cookies, localStorage, or any form of persistent storage on your device. It does not track you across websites or sessions, does not fingerprint your browser, and does not collect any personally identifiable information. IP addresses are used only for country-level geolocation and daily unique visitor estimation via a one-way hash, then immediately discarded.

Data Security

We implement appropriate technical and organizational measures to protect your personal information. All data is transmitted over encrypted connections (HTTPS), and we use industry-standard security practices for data storage.

Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you via email or through a notice on our website. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at support@contentspark.pro.