Privacy Policy

Sparks Scribe is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

This policy applies to all users of the Sparks Scribe platform, website, and related services.

We collect personal information you provide directly, such as:

• Your name, email address, and business or sole trader details
• Information you enter in the platform (e.g. client names, shift notes, invoices)
• Billing and payment data (processed securely via Stripe)
• Metadata such as IP address, browser/device type, and site usage patterns
• Support requests and other communication with our team

Sensitive Information
While Sparks Scribe is not designed to store health or disability data, users may enter details (e.g. behaviour notes, medications, communication needs). By doing so, you consent to the handling of this information under this policy.

We collect your information when you:

• Register or log into the Sparks Scribe platform
• Use features within the app (e.g. shift notes, invoices, file uploads)
• Contact us via email or support
• Browse the website (via analytics tools and cookies)

We use your information to:

• Provide and maintain the Sparks Scribe platform

• Process payments and manage subscriptions

• Communicate service updates and respond to your support requests

• Improve our product and user experience

• Comply with legal, regulatory, or security obligations

We do not sell or rent your personal data to third parties.

All Sparks Scribe data is stored securely on Australian-based servers, managed by Supabase using Amazon Web Services (AWS) Sydney region infrastructure.

Data Protection Measures:

• ✅ Encryption in transit via TLS

• ✅ Encryption at rest using AES-256

• ✅ Row Level Security (RLS) enabled for per-user data protection

• ✅ Strict internal access controls and audit logs

Only authorised team members with a need-to-know basis can access your data.

We use trusted providers to help deliver Sparks Scribe:

• Stripe — Payment processing

• Supabase — Hosting and secure data storage

• SendGrid — Email communication (e.g. welcome emails, alerts)

• Google Analytics — Website traffic insights

Some providers may store or process data outside Australia. In those cases, we ensure compliance with APP 8 by working only with providers who maintain robust security and privacy safeguards.

We retain your personal data as long as needed to:

• Provide services to you

• Comply with legal obligations

• Maintain business records

You may request deletion of your account and data at any time. Backups may take up to 30 days to purge fully after deletion.

Under Australian privacy law, you have the right to:

• Access your personal information

• Correct errors or outdated data

• Request deletion or export of your data

• Withdraw consent (if applicable)

• Lodge a privacy complaint

To make a request, contact us at info@sparksacademy.com.au. We’ll verify your identity and respond within 30 days.

If we detect a data breach that is likely to cause serious harm, we will:

• Notify affected individuals promptly

• Notify the Office of the Australian Information Commissioner (OAIC)

• Take immediate steps to contain the breach and prevent recurrence

If you believe your privacy has been breached or handled improperly, please contact us first so we can address it.

If you’re not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au

• Phone: 1300 363 992

• Email: enquiries@oaic.gov.au

For privacy-related enquiries or to exercise your rights, contact:

Email: info@sparksacademy.com.au

Website: www.sparkscribe.ai