Privacy Policy

This Privacy Policy explains how Sparux collects, uses, and protects your personal data when you visit sparux.ai and submit your email address to our waitlist.

1. What we collect

We collect your email address when you voluntarily submit it through our waitlist form. If you use our contact form, we also collect your name and message content.

When you submit either form, we also store your IP address for security purposes (spam prevention and rate limiting). We do not collect payment information or any other personal data at this stage.

2. Why we collect it

Your email address is collected solely to notify you when Sparux launches and to send you early access information. We will not use your email for any other purpose without your explicit consent.

3. Legal basis (GDPR)

We process your data on the following legal bases:

Waitlist: Your consent (Article 6(1)(a) GDPR), which you provide by checking the consent box on our waitlist form. You may withdraw this consent at any time.

Contact form: Our legitimate interest (Article 6(1)(f) GDPR) in responding to your inquiry. You provide your name, email, and message voluntarily so we can respond to you.

4. How we store your data

Your data is stored securely in Supabase (database hosting, EU region — Frankfurt). Supabase acts as a data processor on our behalf. We do not sell, rent, or otherwise disclose your personal data to third parties for their own purposes. Your data is never used for AI training.

5. Your rights

Under GDPR, you have the right to access, correct, or delete your personal data at any time. You also have the right to withdraw consent, object to processing, and request data portability.

You also have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). The competent authority in Germany depends on your state (Bundesland). A list is available at bfdi.bund.de.

To exercise any of these rights, contact us using our contact form.

6. Data retention

Waitlist emails: We retain your email address until you request deletion or until one year after the Sparux launch, whichever comes first.

Contact messages: We retain your name, email, and message until we have responded to your inquiry, and no longer than six months from the date of submission.

IP addresses: Stored for up to 30 days for security purposes, then automatically deleted.

7. Third-party services

We use the following services to operate this website:

Supabase (Supabase Inc.) — database hosting for storing waitlist and contact data. Data is stored in the EU (Frankfurt). Supabase Privacy Policy.

Zoho Mail (Zoho Corporation) — used to send internal notification emails when someone submits a form. Your email address is transmitted via Zoho's SMTP servers. Zoho Privacy Policy.

Vercel (Vercel Inc.) — website hosting and serverless functions. Vercel Privacy Policy.

All fonts used on this website are self-hosted. No external font services are used.

8. Cookies

We do not use cookies, tracking pixels, or any analytics tools. No tracking of any kind occurs on this website.

9. Contact

For any privacy-related questions, use our contact form.