Privacy policy

Who we are

The data controller is Spark Books (Kiazen io). For privacy requests, including access, correction or erasure, email us at support@sparkbooks.co.uk.

Data we process

• Account data — name, email, authentication identifiers (via Clerk).
• Financial documents — invoices, receipts, supplier names, amounts, VAT, attachments from your inbox or uploads.
• Mailbox access — encrypted credentials to read supplier invoices (read-only where supported).
• Usage analytics — only if you consent to analytics cookies (PostHog, EU-hosted).
• Payment data — processed by Stripe; we do not store full card numbers.

Lawful bases

• Contract — to provide the service you signed up for.
• Consent — for non-essential analytics cookies and optional marketing (if any).
• Legitimate interests — security, fraud prevention, and improving core product features (balanced against your rights).

Processors and international transfers

We use specialist providers ("processors") to run Spark Books. They only process data on our instructions. Current categories include:

• Clerk — authentication and account identity.
• Stripe — subscription payments.
• PostHog (EU) — product analytics, only after cookie consent.
• Supabase — database and private file storage.
• Nylas / Google / Microsoft — mailbox connection when you choose to connect an inbox.
• AI providers — document extraction and categorisation needed to run the product.
• Inngest and hosting — background jobs and application hosting.

Some providers process data outside the UK (for example in the EEA or United States). Where that happens we rely on appropriate safeguards such as the UK International Data Transfer Agreement / Addendum, EU Standard Contractual Clauses, or an adequacy decision where available.

California (CCPA / CPRA)

We do not sell or share personal information as those terms are used under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA). If you still want to send an opt-out request, use our Do not sell or share page or email support@sparkbooks.co.uk.

Retention

We keep account and bookkeeping data while your account is active. You can disconnect integrations from Settings, export an accountant CSV where available, and permanently delete your account from Settings (that removes your Spark Books data; Stripe may keep payment records required by law). Voice or sensitive uploads follow our product retention rules (e.g. audio deleted after 30 days where applicable).

Your rights

You have the right to access, rectify, erase, restrict, object, and port your data, and to withdraw consent at any time. You may complain to the ICO (UK) or your local supervisory authority. Use Cookie settings to manage cookie consent, or delete your account in Settings.

Cookies

See our Cookie policy for details.