Privacy Policy

Sparklist ("Sparklist", "we", "us") turns the ideas you save online into tasks you actually do. This Privacy Policy explains what we collect, how we use it, and your choices. Sparklist is operated by CoBuild Agency. Contact: mark@cobuild.agency.

Information we collect

• Account information: when you sign up or sign in (including with Google), we receive your name, email address, and profile image.
• Content you save: links/URLs you capture, page titles and metadata, images or screenshots you upload, and the notes, tasks, categories, and priorities you create.
• Google Calendar data (only if you connect it): with your permission we access your Google Calendar to create and update events for tasks you choose to schedule. We store a Google refresh token securely (server-side, restricted access) so we can perform these actions on your behalf.
• Usage data: basic technical logs needed to operate and secure the service.

How we use information

• To provide and operate Sparklist: store your captures, generate summaries and suggested next steps, and organize your tasks.
• AI features: content you capture may be processed by our AI provider to generate summaries, categories, and suggestions.
• Calendar sync: to create or update calendar events you explicitly schedule.
• Security, troubleshooting, and improving the service.

We do not sell your personal information, and we do not use it for advertising.

Google user data and Limited Use

Sparklist's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar access only to provide user-facing features (scheduling tasks as events) at your direction, and we do not transfer or use this data for advertising or for any purpose other than providing or improving these features, except as required by law or with your consent.

Sharing and subprocessors

We share data only with service providers that help us run Sparklist:

• Supabase (database, authentication, file storage, backend functions)
• Google (sign-in and, if connected, Calendar)
• Our AI model provider (to generate summaries and suggestions from content you capture)

These providers process data on our behalf under their own terms.

Data retention and your choices

• You can disconnect Google Calendar at any time from within the app, which revokes our stored access.
• You can request deletion of your account and associated data by emailing mark@cobuild.agency.
• Your captures and tasks are visible only to you; access is enforced by row-level security.

Security

Data is encrypted in transit. Access to your content is restricted to your account via row-level security, and calendar tokens are stored with service-role-only access.

Children

Sparklist is not directed to children under 16, and we do not knowingly collect their data.

Changes

We may update this policy; we will revise the "Last updated" date above.

Contact

Questions? Email mark@cobuild.agency.