Privacy Policy

1. Scope

This policy explains what Sparal Packaging (“Sparal”, “we”) collects on sparalpackaging.com — including the Sparal AI workspace and the Sparal AI Pro subscription — how it is used, and the choices you have. Contact for anything privacy-related: info@sparalpackaging.com.

2. What we collect

• Contact details you give us: name, email, company, and phone when you request a quote, send a brief for review, reserve or buy a subscription, or join a list.
• Brief content: the product notes, selections, and files you submit to the AI workspace or quote forms.
• Subscription status: whether a Pro subscription is active, managed through Stripe. Card numbers never touch our servers — payment details go directly to Stripe.
• Usage data: standard analytics (Google Analytics 4 with IP anonymization) covering pages visited and product events such as “brief started”.
• Cookies: an essential, signed subscription cookie (sparal_pro) that keeps Pro unlocked in your browser, and Google Analytics cookies. We run no advertising trackers and sell no data.

3. How we use it

• To run the AI workspace: the text of your note is sent to our AI provider to extract structured brief fields; the readiness grade itself is computed by our own rules.
• To prepare and deliver the human review, quote follow-up, or subscription you asked for, and to email you about that request (transactional email — no marketing without your consent).
• To operate and improve the services using aggregate, de-identified usage patterns.
• Not for AI training: your briefs and files are not used to train our or anyone's AI models unless you explicitly opt in via the workspace checkbox (off by default).

4. Service providers

We share data only with the processors needed to run the services, under their business terms: Stripe (payments and subscription management), OpenAI (brief-field extraction from the note you submit; API traffic, not used by OpenAI to train models), Resend (transactional email), Vercel (hosting), Google Analytics (usage analytics), and Cloudflare (asset delivery). We do not sell personal information, and we run no third-party advertising.

5. Retention

Quote requests and briefs are kept for as long as needed to handle your project and our legitimate business records; subscription and invoice records are kept as required for tax and accounting. Ask us to delete your data and we will, unless a legal duty requires keeping a record.

6. Your rights

Email info@sparalpackaging.com to access, correct, export, or delete your personal information. We honor applicable rights under laws such as the CCPA and GDPR for residents they cover, and we do not discriminate against you for exercising them.

7. Children

The services are for businesses and adults; they are not directed to children under 16, and we do not knowingly collect their data.

8. Security

Traffic is encrypted in transit (TLS), the subscription cookie is cryptographically signed and HttpOnly, access to customer data is restricted, and payment credentials are handled entirely by Stripe. No system is perfectly secure; if a breach affecting your data ever occurs, we will notify you as the law requires.

9. Changes

We will update this policy as the services evolve; the “Last updated” date reflects the current version. Material changes will be highlighted on this page.