Privacy Policy

SparkVerse AI Ltd (“SparkVerse”, “we”, “us”, or “our”) respects your privacy and is committed to protecting personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (EU GDPR), and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you access or use our website https://www.sparkverse.ai/, our software platforms, APIs, applications, and related services (collectively, the “Services”).

This Policy applies primarily to business users, enterprise customers, partners, and visitors (“you”). Where we act as a data processor on behalf of our customers, our processing is governed by our Data Processing Agreement (DPA).

1. Who We Are (Data Controller)

SparkVerse AI Ltd is a private limited company registered in the United Kingdom (Company Number 16076654), headquartered in Bradford, United Kingdom.

For the purposes of applicable data protection laws, SparkVerse AI Ltd acts as a data controller when processing personal data for its own business purposes, and as a data processor when processing personal data on behalf of customers using our B2B AI solutions.

Registered Office: Bradford, United Kingdom
General Contact: nisar.ahmed@sparkverse.ai

2. Scope of This Privacy Policy

This Privacy Policy covers:

• Visitors to our website
• Representatives of our customers and partners
• Users of our platforms, dashboards, and APIs
• Prospective customers and leads
• Individuals who communicate with us

This Policy does not apply to personal data processed solely on behalf of customers within customer-controlled content, except as required to provide the Services.

3. Personal Data We Collect

3.1 Information You Provide Directly

We may collect:

• Name, job title, company name
• Business email address and phone number
• Account credentials and authentication information
• Billing and payment contact information
• Communications with us (emails, support tickets, feedback)

3.2 Information Collected Automatically

When you use our website or Services, we may collect:

• IP address and device identifiers
• Browser type, operating system, and settings
• Usage logs, access times, and interaction data
• Referring URLs and pages viewed

3.3 Customer Content (Processed Data)

Our Services may process data uploaded, submitted, or generated by customers (“Customer Content”), which may include personal data. SparkVerse AI processes such data strictly under customer instructions.

Where explicitly agreed with the customer, SparkVerse AI may fine-tune or configure AI models using customer-provided data for the sole purpose of delivering customer-specific AI capabilities. Models trained or fine-tuned on one customer’s data are not shared, transferred, or reused for any other customer.

SparkVerse AI does not use Customer Content to train generalized or cross-customer models without explicit written consent.

3.4 Cookies and Tracking Technologies

We use cookies and similar technologies to enable website functionality, improve user experience, perform analytics, and enhance security. Cookie usage is subject to user consent where required by law.

We maintain a separate Cookie Policy that provides detailed information about the types of cookies we use and how you can manage your preferences.

4. How We Use Personal Data

We use personal data for the following purposes:

• Providing, operating, and maintaining the Services
• Account management and authentication
• Customer support and technical assistance
• Improving and developing our products and features
• Business operations, analytics, and reporting
• Sales, marketing, and relationship management
• Legal compliance, fraud prevention, and security

We do not sell personal data.

5. Legal Bases for Processing (GDPR)

We process personal data under the following legal bases:

• Contractual necessity – to provide Services and fulfill agreements
• Legitimate interests – to operate, improve, and secure our business
• Legal obligation – to comply with applicable laws
• Consent – where required (e.g., marketing communications)

6. Data Sharing and Disclosure

We may share personal data with:

• Authorized employees and contractors
• Cloud hosting and infrastructure providers
• Analytics, monitoring, and security vendors
• Payment processors and professional advisers
• Regulators or authorities where legally required

All third parties are subject to contractual confidentiality and data protection obligations.

7. International Data Transfers

SparkVerse AI Ltd is headquartered in the United Kingdom and primarily provides Services within the UK and European Economic Area (EEA), with plans to expand globally.

Depending on the customer’s chosen deployment model (on-premises, hybrid, cloud, or SaaS), personal data may be processed in different geographic locations.

For cloud-based Services, SparkVerse AI relies on major cloud service providers selected based on customer preference. Where personal data is transferred outside the UK or EEA, SparkVerse AI implements appropriate safeguards, including:

• Adequacy decisions
• Standard Contractual Clauses (SCCs)
• The UK International Data Transfer Addendum

8. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption in transit and at rest
• Access controls and authentication mechanisms
• Monitoring and logging
• Secure development practices

Despite these measures, no system is completely secure.

9. Data Retention

We retain personal data only for as long as necessary to:

• Fulfill the purposes described in this Policy
• Comply with legal and contractual obligations
• Resolve disputes and enforce agreements

Customer Content retention is governed by customer agreements.

10. Your Data Protection Rights

Under applicable data protection laws, you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request erasure of personal data
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

Requests can be submitted by contacting nisar.ahmed@sparkverse.ai.

11. Marketing Communications

You may opt out of marketing communications at any time by:

• Using the unsubscribe link in emails
• Contacting us directly

We do not send unsolicited marketing where prohibited by law.

12. Children’s Data

Our Services are intended for business users and are not directed at children under 16. We do not knowingly collect children’s personal data.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on our website with an updated effective date. Material changes will be notified where required by law.

14. Data Protection Officer and Contact Details

SparkVerse AI Ltd has appointed its Chief Technology Officer as its Data Protection Officer (DPO).

Data Protection Officer: Dr. Nisar Ahmed
Email: nisar.ahmed@sparkverse.ai

For general privacy inquiries, you may also contact:

Email: info@sparkverse.ai

15. Data Processing Agreement

Where SparkVerse AI Ltd acts as a data processor, our Data Processing Agreement (DPA) forms part of the applicable customer contract and governs the processing of personal data on behalf of customers.