SparkAE is designed so that your assessment data stays inside your
deployment boundary. In the default deterministic mode
(LLM_PROVIDER=none) the engine makes zero outbound network
calls — no telemetry, no auto-update, no calls home. Authorization
packages, SSPs, evidence, and findings are processed entirely within the
container you run. We never see them.
The marketing site is static and loads no third-party CDNs, fonts, analytics, or trackers. We do not set advertising or analytics cookies. The only personal data we receive is what you choose to send us by email or through the homepage fit-call form (for example, when you click “Talk to the founder” or “Request a fit call”).
When you email us about a fit call, a partnership, or an integration we receive:
We use this solely to respond to you and to administer a conversation or commercial relationship. We do not sell it or share it with advertisers.
When you run the SparkAE software, the data you assess lives in your database within your infrastructure under multi-tenant isolation. Optional integrations — cloud LLM, SSO, webhooks, email, SIEM, and cloud storage — are off by default and only transmit data once you explicitly configure them. Choosing the cloud LLM mode sends content you submit to the configured provider; the default and local-LLM modes do not.
We retain inquiry correspondence for as long as needed to support the relationship and to meet legal obligations, then delete it. Data inside your SparkAE deployment is retained according to your own configuration and policies, not ours.
You can ask us to access or delete the correspondence you’ve sent by emailing info@sparkae.ai.
Questions about this policy? Email info@sparkae.ai.