Privacy Policy

Who we are

Sparked Labs Ltd operates Sparked Platform and is responsible for the personal information described here. Contact info@sparked-labs.com for privacy questions, access or deletion requests. This policy covers the Sparked Platform website and creator workspace, not the separate Spark Learn learning service.

Information we use

We use your email address and authentication records to provide an account, and your workspace name, confirmation that you are 18 or older and acceptance of our Terms to provide a creator workspace. Authentication is handled by Supabase; passwords are not available to our application in readable form.

When you connect TikTok, we receive account identifiers, display name, avatar, granted permissions, access and refresh tokens, their expiry dates and creator posting capabilities. We store tokens encrypted. We also store your uploaded videos, captions, posting options, consent records, publishing tickets, status responses and error messages. Technical logs may include IP addresses, request details and timestamps for security and troubleshooting.

Why we use it

We use account, workspace and publishing information to provide the service you request, including account verification, video storage, TikTok authorisation, posting and status checks. Our legal basis is performance of our contract with you. We use necessary security and diagnostic records for our legitimate interests in preventing abuse and maintaining the service, and information required by law to meet legal obligations. We do not use creator uploads to train AI models or sell personal information.

Connecting and posting to TikTok

Connecting gives Sparked access to the permissions shown on TikTok's authorisation screen. It does not publish a video. Each submission requires you to review the video, caption, destination account, privacy, interactions and disclosures, and affirm consent. We send that content and those choices to TikTok and check the publishing status. TikTok processes information under its own privacy policy and controls publication, moderation and availability.

Disconnect TikTok in your workspace to remove the saved connection and tokens. You can also revoke Sparked's access in TikTok's connected-app settings. Disconnecting does not delete videos already sent to TikTok or remove your Sparked uploads and publishing history. Manage published videos within TikTok and contact us to remove retained Sparked data.

Uploaded source videos are accessible by URL

Videos are stored at unlisted public URLs so TikTok can retrieve them. Anyone who has a source URL can access the video. A private workspace or an Only me TikTok post does not make that source URL private. We explain this before uploading and require your acknowledgement. Do not upload confidential material. Contact us to remove a source file; copies already obtained by TikTok or others are outside our control.

Service providers and transfers

We use Supabase for authentication, database and media storage, Vercel for hosting, and email delivery providers for account messages. TikTok receives content when you authorise a submission. Providers and their subprocessors may process data outside your country, including outside the UK. You can ask us for information about the relevant processing locations and transfer safeguards. We may disclose information when legally required or necessary to protect users and the service.

Retention and deletion

Account, workspace, upload and publishing records are retained while you use the service so that your drafts and publishing history remain available. Tokens are retained until disconnected or removed with your account. To close your account or remove uploads and history, email us from your registered address. We verify the request and remove data no longer needed to provide the service, investigate an unresolved security incident, resolve a dispute or meet a legal obligation. Backup copies may remain until the provider's backup cycle expires. We will explain any necessary retention when responding to your request.

Your choices and rights

You may ask to access, correct, delete or receive a portable copy of your personal information, restrict its use or object to processing based on legitimate interests, where applicable. Contact info@sparked-labs.com. You may complain to the UK Information Commissioner's Office or your local data protection authority.

Cookies, adults and changes

We use necessary session and authorisation cookies to keep you signed in and protect account connections. We store interface preferences locally. The creator service is for adults aged 18 or older; it is not a children's service. We update this page when our practices change and identify the effective date above.