Privacy Policy
Last updated: December 2025
At SparkOS by Chase & Marshal, we are committed to protecting your privacy and ensuring the security of your personal information. This policy explains how we collect, use, and safeguard your data when you use our creativity intelligence platform.
Information We Collect
- Account information: email address, name, and password hash when you create an account
- Assessment data: responses to the Brick Test and other creativity assessments
- Ideas and content: ideas you submit, validate, and store within SparkOS
- Usage data: how you interact with our features, including page views and feature usage
- Device information: browser type, operating system, and device identifiers
- Payment information: processed securely through Stripe (we do not store card details)
How We Use Your Information
- To provide and improve SparkOS services and features
- To analyse your creativity patterns and generate personalised insights
- To process your subscription payments securely
- To send important service updates and notifications
- To respond to your support requests and enquiries
- To develop new features based on aggregated usage patterns
Data Security
- All data is encrypted in transit using TLS/SSL protocols
- Passwords are hashed using industry-standard bcrypt algorithms
- Two-factor authentication (2FA) is mandatory for all accounts
- Regular security audits and vulnerability assessments
- Access controls limit employee access to personal data
- Data is stored on secure, SOC 2 compliant infrastructure
Your Rights
- Access: Request a copy of your personal data at any time
- Correction: Update or correct inaccurate information
- Deletion: Request deletion of your account and associated data
- Portability: Export your ideas and assessment data
- Objection: Opt out of certain data processing activities
- Withdrawal: Revoke consent for optional data processing
Data Sharing
- We do not sell your personal information to third parties
- Data may be shared with service providers who assist our operations (e.g., Stripe for payments)
- Aggregated, anonymised data may be used for research and product improvement
- We may disclose data if required by law or to protect our legal rights
- Enterprise team administrators can view team member activity within their organisation
Communications
- Essential service emails cannot be opted out (security alerts, account changes)
- Marketing communications require your consent and can be unsubscribed
- We may send product update emails which can be managed in your account settings
- Weekly FuseHead exercise notifications (Creativity Lab users only)
International Transfers
- SparkOS is operated by Chase & Marshal, based in New Zealand
- Your data may be processed in countries with different privacy laws
- We implement appropriate safeguards for international data transfers
- EU/UK users: transfers comply with applicable data protection requirements
Contact Us
If you have questions about this privacy policy or wish to exercise your data rights, please contact our privacy team:
Email: privacy@chasemarshal.com
Chase & Marshal Limited
Auckland, New Zealand
