Privacy Policy

This Privacy Policy describes how Saevel (operated by Spark Digital Inc) collects, uses, and protects your information. We collect only what we need to run the Service and never sell your data.

Information We Collect

• Account data: email, password hash, name.
• Entity data: business / nonprofit profile, EIN, address.
• Financial data: bank transactions, account balances, invoices, bills, receipts, donor records, customer records, and other bookkeeping data you upload or that connected integrations send to us.
• Integration tokens: OAuth tokens or API keys for QuickBooks, Xero, Quiltt, Stripe, HighLevel. Stored encrypted at rest.
• Usage data: log records, IP, browser, page views -- minimal, used for security and product improvement.

How We Use It

• Provide the Service (categorize transactions, render reports, send acknowledgments).
• Send transactional emails (acknowledgments, deadline reminders, billing).
• Respond to your support requests.
• Improve the Service in aggregate (no individual records leave Saevel for analytics).

Sub-processors

We rely on the following service providers to operate Saevel. They process your data only as needed to deliver Saevel's features:

• Supabase -- database + auth + storage
• Vercel -- hosting + edge compute
• Anthropic -- AI categorization + OCR (zero data retention)
• Resend -- transactional email
• Inngest -- background job scheduling
• Quiltt / QuickBooks / Xero / Stripe / HighLevel -- only the integrations you explicitly connect

What We Don't Do

• Sell, rent, or share your data with third-party advertisers.
• Use your financial data to train AI models.
• Allow Saevel employees to access your data except for support requests you explicitly initiate.

Your Rights

You may request data export, correction, or deletion at any time by emailing sara@sparkdigitalinc.com. On account closure, your data is deleted within 90 days (per the data export window in our Terms).

California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act:

• Right to knowwhat personal information we collect, use, disclose, and share -- see “Information We Collect” and “How We Use It” above for the current snapshot.
• Right to delete the personal information we hold about you, subject to legal retention requirements. Email sara@sparkdigitalinc.com to request.
• Right to correct inaccurate personal information. You can correct most data yourself in Settings; we'll honor email requests for anything you can't edit directly.
• Right to limituse and disclosure of sensitive personal information (financial data, account numbers). We already limit this to providing the Service -- we don't use sensitive data for marketing, profiling, or any purpose beyond what you signed up for.
• Right to opt-out of sale or sharing. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. There is no opt-out to exercise because the activity does not happen at Saevel.
• Right to non-discrimination. Exercising these rights will not affect the price, level, or quality of the Service you receive.

To exercise any of these rights, email sara@sparkdigitalinc.com. We verify identity via the email on the account, then respond within 45 days as required by California law.

Do Not Sell or Share My Personal Information

Saevel does not sell your personal information. Saevel does not share your personal information for cross-context behavioral advertising (sometimes called “targeted advertising”). There is no opt-out link because there is no activity to opt out of.

Cookies

We use cookies strictly for authentication and session management. No analytics or advertising cookies.

Children

Saevel is not intended for users under 18. We do not knowingly collect information from children.

Contact

Privacy questions or data requests: sara@sparkdigitalinc.com