Skip to content

Privacy Policy

Effective September 24, 2026

This policy explains what information Spiff Spark LLC (“SpiffSpark”, “we”, “us”) collects when you visit spiffspark.com, how we use it, and the choices you have. SpiffSpark is responsible for this information (the “controller” under European data protection law). You can reach us about privacy at[email protected].

This policy covers this website only. If your organization uses the SpiffSpark application at app.spiffspark.com, your organization’s agreement with us governs the data handled in the application.

Information we collect

Information you give us. When you request a demo, we collect your first and last name, work email, and company, and optionally your team size, the CRM you use, and any notes. We also record which industry page you came from, if any. If you email us, we keep the email and your contact details.

Information collected automatically. We use PostHog analytics to see how people use this site: the pages you visit, the path you take between pages, what you click, the page that referred you, your device and browser, and an approximate location derived from your IP address. PostHog links these to a randomly generated identifier stored on your device, so visits can be connected across pages and return visits. PostHog may also record sessions, which captures what appears on the page and how you interact with it (mouse movement, clicks, and scrolling), so we can find where the site is confusing. Anything you type into form fields is masked and not recorded. Analytics traffic is sent through spiffspark.com to PostHog.

Hosting and security data. The site is served by Cloudflare, which processes technical request data such as your IP address and browser details to deliver the site, protect it from abuse, and give us aggregate traffic statistics through Cloudflare Web Analytics, which does not use cookies.

We collect this information from you directly, from your browser and device, and from the service providers listed below.

When we don’t use analytics

We do not load PostHog analytics at all:

  • if your browser sends a Do Not Track or Global Privacy Control signal, or
  • if you are visiting from the European Economic Area, the United Kingdom, or Switzerland.

We do not allow third parties to collect information about your activity over time and across other websites through this site.

How we use information, and why

  • To respond to your demo request, schedule the demo, and follow up about SpiffSpark. We do this because you asked us to (steps taken at your request before any contract) and because we have a legitimate interest in responding to people who contact us.
  • To understand and improve the website. This includes analytics and session recordings, and recording the industry, CRM, and team size from a demo request (never your name, email, or notes) so we can see which visitors request demos. We rely on our legitimate interest in understanding how the site is used and making it better.
  • To run and secure the website, based on our legitimate interest in keeping it available and protected from abuse.

The demo form is voluntary. We need your name, work email, and company to respond; the other fields are optional. We do not make decisions about you based solely on automated processing.

Cookies and similar storage

PostHog stores its randomly generated identifier in a first-party cookie and your browser’s local storage. The site also remembers your light or dark theme choice in local storage. Cloudflare may set cookies needed for security. You can clear or block cookies and local storage in your browser settings; the site will still work.

How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only with service providers that process it on our behalf to run the site and respond to you:

  • Cloudflare: website hosting, content delivery, security, and web analytics.
  • Resend: delivering demo request emails to our team.
  • PostHog: website analytics and session recordings.

We may also disclose information if required by law, to protect our rights or the safety of others, or as part of a merger, acquisition, or sale of assets, in which case this policy would continue to apply.

How long we keep information

  • Demo requests and related emails: up to 24 months after our last contact with you.
  • Analytics events: up to 12 months.
  • Session recordings: up to 30 days.

You can ask us to delete your information sooner.

Your rights

You can ask us to tell you what personal information we hold about you, give you a copy, correct it, or delete it by emailing [email protected]. You can also object to our use of your information based on legitimate interests. Depending on where you live, you may have additional rights, such as restricting certain processing or receiving your data in a portable format. We will not discriminate against you for exercising these rights, and we may need to verify your identity before acting on a request.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to complain to your local data protection authority. In the UK, that is the Information Commissioner’s Office (ico.org.uk).

International transfers

SpiffSpark is based in the United States, and our service providers may process information in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the EU-U.S. Data Privacy Framework or Standard Contractual Clauses.

Security

We use reasonable safeguards to protect the information we collect, including encrypted connections (HTTPS) across the site. No method of transmission or storage is completely secure.

Children

This site is for businesses and is not directed to children under 16. We do not knowingly collect personal information from children.

Changes to this policy

When we change this policy, we update the effective date above. For material changes, we will also post a notice at the top of this page.

Contact us

Spiff Spark LLC. Questions or requests about this policy or your information:[email protected].