SPARQxp respects your privacy. We collect only the information necessary to provide our services and communicate with you. This includes your name, email, and any details you submit through our contact or booking forms.
We do not sell or share your data with third parties except where necessary to provide our services (e.g., using a scheduling tool or email provider). You can request access, correction, or deletion of your data at any time.
If you have any questions, contact us at privacy@sparqxp.com.
SMS and mobile information
If you give us your mobile number and agree to receive text messages from SPARQxp, we use that number only to send the messages you asked for and to respond when you reply.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing with the subcontractors who support our services, such as our messaging provider, is limited to what is needed to deliver those messages. Text messaging opt-in data and consent are never shared with any third party for any other purpose.
You can stop receiving messages at any time by replying STOP. Reply HELP for help. Our full messaging terms are in our Terms of Service.
Google user data
When you connect your Google Calendar to SPARQxp, you give us permission to read your calendar’s busy times and to create, update, and cancel appointment events on your behalf. We use this access for one purpose only: to book, move, and cancel appointments for your business.
What we access. Free and busy time windows, and the appointment events that SPARQxp itself creates or manages. We do not read the contents of your personal events, and we do not use your calendar data to build profiles, train models, or generate advertising.
What we store. We store the minimum needed to keep your bookings in sync: event identifiers, appointment times, and the connection tokens that let us talk to your calendar. Tokens are stored encrypted.
How long we keep it. Booking records are kept while your account is active. If you disconnect your calendar, we stop accessing it immediately and delete the stored connection tokens. If you cancel, we keep your booking data so you can reactivate, and you can ask us to delete it at any time by emailing privacy@sparqxp.com; we act on that request within 30 days. We keep records longer only where the law requires it.
Who we share it with. Nobody. We do not sell, rent, or transfer your Google data, and we do not share it with third parties for their own purposes. It is used only to run the booking features you asked for.
Limited Use. SPARQxp’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How to revoke access. You can disconnect your calendar at any time from your SPARQxp settings, or revoke access directly in your Google account security settings. You can request deletion of your data at any time by contacting us at privacy@sparqxp.com.
How we protect your data
These are the specific measures we apply to sensitive data, including the data we receive from Google APIs.
Encryption in transit. Every connection to SPARQxp, and every request we make to Google on your behalf, uses HTTPS with TLS. Your calendar data is never carried over an unencrypted channel.
Encryption at rest. The credentials that authorize your calendar connection, including the access and refresh tokens Google issues to us, are not stored in readable form. Each one is encrypted on its own with AES-256-GCM before it is written, with a separate random initialization vector and authentication tag per credential. The encryption key is held outside the database and is never written to it, so a copy of the database on its own does not reveal them.
Least-privilege access. We request only the narrowest Google Calendar permissions the booking feature needs: free and busy availability, the list of your calendars so that you can choose one, and the ability to manage the appointment events that SPARQxp itself creates. We do not request permission to read the contents of your calendar events.
Data minimization. The only calendar information that reaches our servers is busy time windows, expressed as a start time and an end time, and the appointment events SPARQxp itself created. The titles, descriptions, attendees and locations of your own events are never requested and never stored.
Separation between customers. Every calendar connection is bound to the account that created it, and one customer’s credentials and booking data are not readable by another.
Deletion. When you disconnect a calendar we delete the stored connection credentials at the same time, and we stop accessing your calendar immediately.
AI and automated processing
SPARQxp uses third-party artificial intelligence services to run the voice agent that speaks with your callers, and to summarize those conversations afterwards.
Google user data is never sent to an AI service. This is a property of how the product is built, not only a promise. When the voice agent needs to offer an appointment time, our own servers work out which times are free and hand the agent a list of candidate times. The underlying calendar data never leaves our servers, and it is never placed in a prompt, a transcript, or any other payload sent to an AI provider.
No training on your data. We do not use data received from Google APIs to develop, improve or train generalized or foundational artificial intelligence or machine learning models, and we do not permit our AI providers to do so.
No automated decisions with legal effect. The AI in SPARQxp books appointments and answers questions about your business. It does not make decisions that produce legal effects or similarly significant effects for anyone.