Privacy Policy

This policy explains what CalSpark collects, who helps us run it, and what you can ask us to do. CalSpark is operated by Modern Code Consulting (“we”), based in Tampa, Florida, USA.

1. What we collect

From you and your team

• Account details: name, email address, role and a hashed password. If you sign in with Google, we receive your name, email address and profile picture from Google.
• Company details: business name, contact information and billing status.
• Data you enter about your own customers and work: customer names, emails, phone numbers, addresses, notes, jobs, schedules, photos if you add them, and invoices.

If you sign up for our emails

• Your email address and what you asked for: calculator results, a guide checklist or the footer signup. If you asked for calculator results, the numbers you typed into that calculator are used to build the email.
• When you signed up, and the page you were on.

Automatically

• Session cookies and sign-in tokens that keep you logged in.
• Where you came from, saved in a cookie on our website: the campaign tags in the link you clicked (utm_source, utm_medium, utm_campaign, utm_term, utm_content), an ad click ID (gclid or fbclid), the website that referred you, and the first page you opened. See the Cookies and similar technologies section below.
• Basic device, browser and IP address data in server logs.
• Error reports from the app, which may include the page you were on and technical details.
• Session replay, described in the Cookies and similar technologies section below.
• Page views and a few named events (such as clicking a sign-up button or using a calculator) on our public website, through Vercel Analytics, plus page speed measurements through Vercel Speed Insights. These do not use cookies and do not track you across other websites.

You are in charge of the customer data you enter. For that data we act as your service provider and handle it only to run CalSpark for you.

2. How we use it

• To run the service: sign-in, scheduling, invoicing and team roles.
• To bill your subscription and, if you connect Stripe, to let your customers pay invoices.
• To send transactional email such as invites, password resets and invoices you choose to send.
• To find and fix errors, keep the service secure and prevent abuse.
• To send CalSpark marketing email you asked for, such as calculator results and a short series about the product, and getting-started emails during your free trial. Every one has an unsubscribe link. Messages about your account, such as a failed payment or a password reset, are not marketing and can still be sent after you unsubscribe.
• To see which channels bring people to the site, using the first-visit cookie below.
• To answer your support emails and meet legal duties.

We do not sell personal information. We do not use customer data you enter to advertise to anyone.

3. Who processes data for us

These companies handle data on our behalf to provide the service:

• Vercel: hosts the website and application.
• Neon: hosts the database where account and business data is stored.
• Stripe: processes subscription billing and, when you connect your account, card payments on your invoices. Stripe collects card details directly. We do not store full card numbers.
• Resend: sends email such as invites, password resets and invoices, and our own marketing and getting-started email.
• Sentry: collects error and performance reports, and records session replays of a sample of visits, so we can fix problems.
• Vercel Analytics and Speed Insights: count page views, custom events and page speed on our website. Vercel describes them as cookieless.

We host the application on Vercel and the database on Neon, both in the United States. We may disclose information if the law requires it, or to protect rights and safety. If we are part of a merger or sale, data may move to the new owner under this policy.

4. Cookies and similar technologies

We use cookies needed to sign you in and keep your session. We do not run advertising cookies on this website.

First visit. The first time you open a page on our website we set one first-party cookie, cs_ft, that lasts 90 days. It records the campaign tags in the link, any ad click ID, the website that referred you (the host name only) and the first page you opened. It holds no name or email address. When you create an account or ask for an email, we save the channel it points to (for example search, AI assistant, paid or direct) with your account or request, so we know what is working. It is not shared with advertising networks. You can delete it in your browser settings.

Analytics. We use Vercel Analytics and Vercel Speed Insights to see which pages are visited and how fast they load. They record page URLs, referrer, country, browser and device type, and the custom events listed above. They do not set cookies and do not build a profile that follows you across sites. We do not send names, emails or any text you type to them.

Session replay. Sentry session replay records a replay of how the page was used, in order to debug errors. We sample about 1 in 10 sessions, and we record every session in which an error occurs. Replay is set to mask all text and all form inputs and to block images and other media, so what you type and what is on the screen is not captured as readable content. Replays can still show clicks, scrolling and page layout. We do not use replays for advertising.

5. How long we keep data

We keep account and business data while your account is open. After you cancel or ask us to delete, we delete or anonymize it within 30 days of a verified request or of account closure, except records we must keep for tax, legal or dispute reasons. Copies in backups are overwritten within 90 days. Error reports in Sentry are kept for up to 90 days.

6. Security

We use encrypted connections, hashed passwords, role-based access and limits on who can see each company’s data. No system is perfectly secure. Tell us at privacy@calspark.app if you think your account was accessed without permission.

7. Your choices

You can ask us to access, correct, export or delete your personal information. Email privacy@calspark.app. If you are an employee or customer of a business that uses CalSpark, contact that business first, since it controls the data it entered. Depending on where you live, you may have more rights, such as under California law, and you may complain to your local regulator.

8. Children

CalSpark is for businesses. It is not for people under 18, and we do not knowingly collect their data.

9. Changes

If we change this policy in a way that matters, we will update the effective date and email account owners.

10. Contact

privacy@calspark.app
Mailing address: 601 Channelside Walk Way, Apt 1239, Tampa, FL 33602, USA