Sparkit Atelier

Privacy Policy

Last updated: 30 October 2026

中文

1. About this policy

Sparkit Atelier ("Atelier") is the production workspace of Sparkit, for the Sparkit team, production agents and factories. Your personal data is processed by SPVRKD AG ("Sparkit," "we," "our," or "us"), registered in Switzerland under company number CHE-260.912.934, with its principal office at Baarerstrasse 78, 6300 Zug, Switzerland.

This policy covers the Atelier apps and website. If you also use the Sparkit marketplace or design tools with the same email address, the Sparkit Privacy Policy covers those.

Questions: privacy@sparkit.world.

2. Data we collect

Account details: your email address, name, role, and what you add to your profile, such as your phone number, city, country, map location, time zone, languages, specialities, biography and photo.

Work you do in Atelier: chats and the files and photos you add to them; orders, production steps and dates; quotes and prices; tech packs and measurements; sample reviews.

Factory information: factory names, locations, products, contacts, certificates and other documents that you or your agent upload.

Agreements: the agreement you sign, with your typed name, the time, your IP address and your device’s user agent, kept as evidence of signature.

Device and technical data: a push notification token, your device platform and app version, and IP addresses and user agents recorded in our security and audit logs. We do not use advertising trackers or third-party analytics in Atelier, and we do not read your location from your device.

Your choices and reports: whether you allowed Noah, who you blocked, and any message you reported, with the reason you gave.

Conversations with Noah: what you ask Noah and what it answers.

3. How we use your data

To run Atelier: to sign you in with an emailed code, run orders from offer to delivery, show chats and files to the people working on an order, and send you notifications.

To keep Atelier safe: to review reported messages, act on blocks, prevent abuse and investigate problems.

To keep records: to show what was agreed and decided on each order.

We do not sell your personal data, and we do not use it for advertising.

4. Legal basis

Contract: most processing is needed to provide Atelier and to perform our agreements with you.

Legitimate interests: securing Atelier, moderating content and keeping order records.

Consent: Noah, which you can turn off at any time.

Legal obligation: where the law requires us to keep or disclose data.

5. Who can see your data in Atelier

The Sparkit team can read every chat, order and file in Atelier. An agent sees their own office and the orders it holds. A factory sees only what is shared with it, and reads the Sparkit team under the name "Sparkit". A person you block can still be on your orders and is not told you blocked them.

6. Third-party AI providers

Noah is Atelier’s AI assistant. Only if you allow it, Noah sends your questions, your name, role, city and time zone, and the Atelier data it needs to answer (orders, chat messages and who wrote them, quotes, factories, tech packs, file names), plus a daily summary for your morning brief, to third-party AI providers to produce its answers: DeepSeek models through OpenRouter first, then Google Gemini, Anthropic Claude and Moonshot AI Kimi as back-ups. Noah cannot see more than you can.

You choose this the first time you open Noah and can change it at any time in Settings. If you turn Noah off, nothing more is sent, and your morning brief is written without AI.

Fill with AI: when someone adds a factory and uses this feature, the factory documents they chose are sent to Google Gemini to read their details.

These providers receive the data to generate a response. Their handling of it is governed by their own terms. [To confirm before publishing: each provider’s data-retention and model-training terms for our account.]

7. Service providers

We use the following companies to run Atelier, and they process data on our behalf: Supabase (database, sign-in and file storage); Amazon Web Services (hosting of the servers behind Noah); Vercel (hosting of the Sparkit website); Expo (app updates, web hosting and delivery of push notifications, along with Apple and Google, whose push services carry them to your device); and Pydantic Logfire (monitoring of the service, which can include the text of Noah conversations).

A notification can show part of a message on your lock screen. You control this in your device’s settings.

We may also disclose data to legal authorities where required by law, or to a buyer in a merger or acquisition under the same commitments.

8. Retention and account deletion

We keep your data while your account is active and as long as the records below are needed. [To confirm before publishing: retention period for order records and logs.]

You can delete your account at any time in the app: Settings (or Your account, for a factory), then Delete account. It takes effect at once. Your profile details are erased and your push tokens are revoked. Your open work goes back to Sparkit, your Noah conversation and your Noah choice are deleted, and so are your blocks.

What stays: the messages, events, files and signatures you left on orders remain as the record of those orders, shown under "Former member". Reports you made remain for moderation records.

If the same email address is also a Sparkit marketplace account with history, that account stays and the Sparkit Privacy Policy applies to it.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or port your personal data, to restrict or object to processing, and to withdraw consent at any time. To exercise these rights, contact privacy@sparkit.world. You can also complain to your data protection authority.

10. International transfers

Your data may be processed in countries other than your own, including Switzerland, the EU, the UK and the USA, and by the AI providers named above, wherever they operate. Where transfers occur, we rely on standard contractual clauses or other approved mechanisms. [To confirm before publishing: transfer basis for each AI provider, including Moonshot AI and DeepSeek.]

11. Security

We use encryption in transit, private file storage with short-lived links, per-office access rules enforced in the database, and audit logs. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Children

Atelier is a work tool and is not intended for anyone under 18. If you believe a child has given us data, contact support@sparkit.world and we will delete it promptly.

13. Changes

We may update this policy. Material changes will be communicated by email or in the app at least 14 days before they take effect. If what Noah shares or who receives it changes, the app asks for your choice again.

14. Contact

For privacy questions or to exercise your rights: privacy@sparkit.world

SPVRKD AG, Baarerstrasse 78, 6300 Zug, Switzerland

SHOPPING BAG

(0 items)