Data security and privacy

Your content stays yours.

Plain-English answers to every question you should ask before you hand a SaaS tool your calls, transcripts, and voice.

Things that matter

Official LinkedIn API only

SparkVox only uses LinkedIn's official APIs via OAuth. We never scrape or automate your browser, so there is NO risk to your account.

Does NOT Train AI Models

SparkVox uses Anthropic's commercial API. Under those terms, your transcripts and content are never used to train AI models.

GDPR-ready data rights

Access, export, correct, or delete your data on request. Standard Contractual Clauses govern data transfers for all users.

SOC 2 Type II infrastructure

Core stack on SOC 2 Type II providers: Supabase (database and auth), Stripe (billing), Cloudflare R2 (media), and Railway (background jobs).

SOC 2-aligned controls

Security practices mapped to SOC 2 Trust Services Criteria, with annual policy review and vendor risk management.

Encrypted integrations

LinkedIn and cloud storage OAuth tokens are encrypted with AES-256-GCM before they reach the database.

Row-level isolation

Supabase Row Level Security ensures your account only accesses your own projects, posts, and integrations.

PCI via Stripe

Card details never touch our servers. Stripe handles payments and PCI scope. Server-side secrets never ship to the browser.

Who handles your data

These are the parties that process content on your behalf. None of them train AI models on your inputs under commercial API terms. Commenter data on SparkVox-published posts is covered in our privacy policy.

PartyRoleWhat they seeRetentionTrains AI?
SparkVox / SupabaseApp database and authenticationTranscript text, voice profile, approved posts, account settingsUntil you delete the project or your accountNo
GladiaAudio transcriptionAudio URL (YouTube link, uploaded file, or direct URL) - not the audio file itselfNot stored by Gladia after transcription is returnedNo
Anthropic (Claude)AI post generation (Sonnet 5.5 drafting), voice learning, Haiku photo briefs for AI images, in-app Sparky chatTranscript excerpt, voice profile, onboarding context, post text for image scene briefs, passed per API callStateless - Claude has no memory between callsNo
LinkedInPost publishing and comment sync via LinkedIn's official APIPost content, media URLs, and commenter display data on posts you published through SparkVoxOAuth tokens encrypted at rest; synced comments until account deletionNo
Meta (Conversions API)Server-side ad measurement for every app signup and purchaseA SHA-256 hash of your email, your IP address, and browser user agent - not your name, transcripts, posts, or other account contentNot stored by SparkVox beyond a delivery-success log; retained by Meta under its own policyNo
AttioCRM export from Engage → People (Accelerate and Scale, if connected)LinkedIn name, headline, and profile URL for the People rows you choose to export - no email or company dataOAuth tokens encrypted at rest; exported people records live in your own Attio workspaceNo
HubSpotCRM export from Engage → People (Accelerate and Scale, if connected)LinkedIn name, headline, and profile URL for the People rows you choose to export - no email or company dataOAuth tokens encrypted at rest; exported contacts live in your own HubSpot accountNo
PipedriveCRM export from Engage → People (Accelerate and Scale, if connected)LinkedIn name, headline, profile URL, job title, and engagement custom fields (comments, reactions, funnel mix, etc.) for the People rows you choose to export - no email addressesOAuth tokens encrypted at rest; exported Persons and Organizations live in your own Pipedrive accountNo
fal.ai (image models)AI photo image generation (optional, on demand; chart images do not use fal.ai)Visual prompt from a Claude Haiku hook-anchored photo brief (or heuristic fallback)Not stored by fal.ai after the image is returnedNo
Cloudflare R2Media and image storagePost images you generate or uploadUntil you delete the post or your accountNo
StripePaymentsBilling details - card data never touches SparkVox serversPer Stripe's PCI-compliant retention policyNo

Full subprocessor list in our privacy policy.

Common questions

Questions not answered here? Email [email protected] or read our full Privacy Policy.

You've seen how your data is handled. Now see what SparkVox does with it.

Upload a recording. Sparky extracts the posts. You approve what goes live. Nothing else.
Start 14-day Pro trial →

Free to sign up. Card required for full access.
No charge until day 15.