Privacy Policy

This Privacy Policy explains how Online Marketing Group, LLC (“SparkPage,” “we,” “us”) handles information collected through sparkpage.us and our application at app.sparkpage.us (collectively, the “Service”), as well as information collected by landing pages our customers publish through the Service on *.pages.sparkpage.us and on customer-owned domains (collectively, “Published Pages”).

1. Who we are

SparkPage is operated by Online Marketing Group, LLC, 530 Technology Drive, Irvine, CA 92618. For questions about this policy or to exercise your rights, contact us at support@sparkpage.us.

2. Information we collect

Account information

When you create a SparkPage account, we collect your email address and authentication state through our identity provider (Supabase). We also store your role (e.g., admin, member) and the projects you create or are invited to collaborate on.

Content you provide

When you build a landing page, we store the business information you provide — business name, services, locations, contact details, testimonials, images, and any URLs you ask us to analyze. This content is used to generate and render your Published Page.

Information collected automatically on sparkpage.us

When you use the Service, we receive standard request metadata (IP address, user-agent, referrer, timestamps) and store a session cookie used to keep you signed in.

Information collected on your Published Pages

Published Pages may include the following measurement tools, each of which collects data only after a visitor accepts the matching category in the on-page cookie banner:

• SparkPage heatmap (first-party, identifiable): click coordinates, rage-clicks, dead-clicks, and per-session maximum scroll depth. Click coordinates are normalized to the document so a single server-side snapshot can render heatmaps at any viewport. The script captures short text labels (≤ 60 characters) only from buttons, links, and headings; it never reads the contents of form inputs, textareas, labels, or select elements. Bundled with the identifiable category because the recorded session can be correlated with a specific identified visitor when the AudienceLab pixel is also enabled.
• CallRail (analytics): when configured by the page owner, swaps phone numbers and records phone calls for attribution. CallRail's own privacy practices apply to recorded calls.
• Microsoft Clarity (analytics): when configured by the page owner, records anonymized session replays and aggregate interaction metrics.
• Google Ads / Google Analytics (marketing): when configured by the page owner, used for conversion tracking and remarketing.
• AudienceLab pixel (identifiable): when configured by the page owner, may match visit data against third-party records to build audience profiles. This is the only category that can associate a visit with an identifiable person, and it is off until the visitor opts in.

3. How we use information

• To provide, secure, and improve the Service.
• To generate landing-page content from the business details you supply, using OpenAI as a processor.
• To enrich your business profile with publicly available data through DataForSEO when you choose the “Look up my business” flow.
• To surface analytics, leads, calls, and heatmaps to the page owner inside the dashboard.
• To communicate with you about your account, security, and material changes to the Service.

4. Service providers we share with

We share the minimum data needed to operate the Service with the following processors:

• Supabase — authentication and primary database.
• Vercel — hosting and edge delivery of the Service and Published Pages.
• OpenAI — text generation and competitor research.
• DataForSEO — business enrichment and local search data.
• Unsplash — stock-image search and licensing.
• CallRail, Microsoft Clarity, AudienceLab, Google — only when the page owner has explicitly configured them on a Published Page, and only after visitor consent through the on-page banner.

5. Cookies

On sparkpage.us and app.sparkpage.us, we use a single first-party session cookie issued by Supabase to keep you signed in. No marketing or analytics cookies are set on these domains.

On Published Pages, cookies are categorized as Marketing, Analytics, or Identifiable. Visitors choose which categories to allow through the on-page banner; the choice is stored locally in their browser. Declining or dismissing the banner keeps all trackers inert.

6. Retention

Account and project data is retained for as long as your account is active and for a reasonable period afterward to comply with legal obligations. Cookie-derived analytics data on Published Pages is retained for up to 90 days. Third-party processor retention is governed by their own policies.

7. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete personal information we hold about you, to object to certain processing, or to withdraw consent. California residents have rights under the CCPA/CPRA, including the right to know, the right to delete, the right to correct, the right to limit use of sensitive information, and the right not to be discriminated against for exercising these rights. To make a request, email support@sparkpage.us from the address on your account.

If you are a visitor of a Published Page, the page owner is the controller of the information collected on that page. Direct requests to the business listed on the page; we will assist as a processor.

8. Security

We use industry-standard safeguards, including encryption in transit, scoped database access, and per-tenant authorization. No system is perfectly secure; we encourage you to use a strong, unique password and to keep your email account secure.

9. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

10. International transfers

We operate in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States, which may have different data-protection laws than your jurisdiction.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the effective date above and, for material changes, take reasonable steps to notify you.

12. Contact

Online Marketing Group, LLC
530 Technology Drive, Irvine, CA 92618
support@sparkpage.us