Privacy Policy

Last updated: June 4, 2026

This Privacy Policy describes how JWP, LLC ("we," "us," or "our") collects, uses, and protects your personal information when you use the Sparkbooth AI platform and services ("Service"). By using the Service, you consent to the practices described in this policy.

1. What Information Do We Collect?

Information You Provide

  • Account information — When you sign in through a social login provider (Google, Facebook, or LinkedIn), we receive your name, email address, and profile picture.
  • Payment information — When you purchase a subscription or credits, payment details are collected and processed by Stripe. We do not store your full credit card number.
  • Photos — When you use the transformation service, you upload photos for processing. See Section 4 for how we handle photo data.

Information We Collect Automatically

  • Usage data — API calls, transformation requests, credit transactions, and subscription activity.
  • Device and browser information — IP address, browser type, operating system, and referring URLs.
  • Cookies — Essential cookies for authentication and session management. See our Cookies Policy for details.

2. How Do We Use Your Information?

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process payments and manage your subscription
  • Authenticate your identity and secure your account
  • Respond to your requests and provide customer support
  • Monitor usage patterns to improve the Service
  • Detect and prevent fraud, abuse, or security incidents
  • Comply with legal obligations

3. Do We Share Your Information?

We do not sell, rent, or trade your personal information. We share data only in the following circumstances:

  • Service providers — We share data with third-party providers that help us operate the Service, including Stripe (payments), AWS (infrastructure), and AI transformation providers (Google Gemini, Replicate). These providers are contractually obligated to protect your data.
  • Legal requirements — We may disclose information when required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
  • Business transfers — In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

4. How Do We Handle Photos?

When you upload a photo for transformation, it is:

  • Transmitted securely to our servers via encrypted connections
  • Stored temporarily in a secure S3 bucket for processing
  • Sent to a third-party AI provider for transformation
  • Automatically deleted within 7 days per our S3 lifecycle policy

We do not use your photos for training AI models, marketing, or any purpose other than fulfilling your transformation request.

5. Where Is Your Data Stored?

Your data is stored on Amazon Web Services (AWS) infrastructure in the United States (us-east-2 region). Database backups are encrypted at rest. We implement industry-standard security measures including encryption in transit, VPC network isolation, and least-privilege access controls.

6. How Long Do We Retain Your Data?

  • Account data — Retained for the duration of your account. Deleted upon request (see our Data Deletion page).
  • Photos — Automatically deleted within 7 days of upload per our S3 lifecycle policy.
  • Transaction records — Retained for up to 7 years as required for tax and accounting compliance.
  • Server logs — Retained for 30 days for security and debugging purposes.

7. What Are Your Rights?

Depending on your jurisdiction, you may have the right to:

  • Access your personal data and receive a copy of it
  • Correct inaccurate or incomplete personal data
  • Delete your personal data (see our Data Deletion page)
  • Object to or restrict certain processing of your data
  • Port your data to another service where technically feasible

To exercise any of these rights, contact us using the information in Section 10 below. If you are based in the EEA, UK, or Switzerland, see our GDPR and Data Hosting page for additional information specific to those jurisdictions, including lawful bases for processing, our sub-processors, and your right to lodge a complaint with a supervisory authority.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at sparkbooth.com/contact-us or email us at hello@sparkbooth.com.

JWP, LLC · 400 Spear Street, San Francisco, California