Privacy Policy

SparkleManager — Last updated: September 1, 2026

SparkleManager (“we”, “us”, “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our software and services (the “Service”).

Our Service is a business management tool for cleaning businesses. This policy applies to information we process.

1. The Roles: Data Controller vs. Data Processor

We operate as both a Data Controller and a Data Processor under UK data protection law (including the UK GDPR and the Data Protection Act 2018).

We are the Data Controller for the information you provide to create and manage your account (e.g., your name, email, company name). We decide how and why this “Account Data” is processed.

You are the Data Controller for the information you upload into our Service about your own customers (e.g., client names, addresses, schedules). We call this “Customer Data.”

We are the Data Processor for this “Customer Data.” We only process it on your behalf and according to your instructions (as set out in our Terms and Conditions and Data Processing Agreement).

This Privacy Policy primarily concerns the “Account Data” for which we are the Data Controller.

2. Information We Collect

A. Account Data You Provide

When you register for an account, we collect personal information, including:

  • First and Last Name
  • Company Name
  • Email Address
  • Password (which is hashed and not visible to us)

B. Payment Information

We use Stripe to process your subscription payments. We do not collect or store your full credit card details. Stripe handles all payment information securely and independently.

C. Information We Collect Automatically

When you use our Service, we use PostHog (hosted on EU servers) to automatically collect:

  • Usage Data: Information about how you interact with our Service (e.g., features used, pages viewed, workflows completed, and navigation paths).
  • Session Replays: Visual reproductions of user interactions within the application interface to help us troubleshoot errors, identify confusing UI elements, and improve user experience. Sensitive fields (such as passwords) are masked and never recorded.
  • Device and Technical Information: Basic information about your device, browser type, operating system, and approximate geographic location.

D. Customer Data You Provide (as a Processor)

We process the records of your customers and their schedules that you input into the Service. We do not own, control, or use this data for any purpose other than providing the Service to you.

3. How We Use Your Information

We use your Account Data for the following legitimate business purposes:

  • To Provide and Manage the Service: To create your account, provide our core scheduling and invoicing features, and manage your subscription.
  • To Process Payments: To bill you for your subscription through Stripe.
  • To Provide Customer Support: To respond to your enquiries and requests.
  • To Communicate with You: To send essential service-related updates (e.g., maintenance, security alerts) and occasional product updates or marketing communications, which you can opt-out of at any time.

4. How We Share Your Information

We do not sell your personal information. We only share it with trusted third-party service providers (sub-processors) who help us operate our Service:

  • Clerk: Identity verification, user authentication, and session security.
  • Vercel: Application hosting, edge network, and serverless compute infrastructure.
  • Supabase: Managed PostgreSQL database and secure cloud storage.
  • Stripe: Payment processing and subscription billing.
  • Brevo (Sendinblue): Transactional email delivery for invoices, quotes, and payment receipts.
  • Upstash Redis: API rate limiting, caching, and abuse prevention.
  • PostHog: Product analytics, user experience measurement, and session replay (hosted in the EU).
  • Google Analytics: Aggregated website traffic analysis and acquisition metrics.
  • Sentry: Application performance monitoring and crash/error reporting.

We may also disclose your information if required to do so by law or in response to a valid legal request.

5. Cookies and Tracking Technologies

We use strictly necessary cookies to ensure the website functions securely. With your consent, we also use aggregated analytics cookies provided by Google Analytics and PostHog to understand how visitors find and interact with our Service.

You can choose to accept or decline non-essential cookies via our on-site cookie banner, and you may modify or withdraw your preferences at any time by clicking the “Cookie Preferences” link in our website footer.

6. International Data Transfers

Some of our sub-processors (listed above) are based outside the United Kingdom. When we transfer your personal data outside the UK, we ensure it is protected by appropriate safeguards as required by UK law (such as adequacy agreements or Standard Contractual Clauses).

7. Data Security and Retention

We implement reasonable technical and organisational measures to protect your data.

We retain your Account Data for as long as your account is active. If you terminate your account, we will permanently delete your Account Data and all associated Customer Data within 30 days.

8. Your Data Protection Rights

Under UK data protection law, you have rights regarding your Account Data:

  • Right to Access: You can request a copy of the data we hold about you.
  • Right to Rectification: You can request that we correct any inaccurate or incomplete data.
  • Right to Erasure (Deletion): You can request that we delete your account and personal data. To do so, please email hello@sparklemanager.co.uk.
  • Right to Object: You can object to our processing of your data for marketing purposes.

To exercise any of these rights, please contact us at hello@sparklemanager.co.uk.

As you are the Data Controller for your Customer Data, you are responsible for handling any data rights requests from your own clients.

9. Children's Privacy

Our Service is not intended for or targeted at individuals under the age of 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through the Service.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: hello@sparklemanager.co.uk

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection issues.