Privacy Policy

Spark Tech — MSME-Registered · Fixed-Term Contingency Infrastructure

Last Updated: July 9, 2026

1. Who We Are

This Privacy Policy governs how Spark Tech ("we," "us," "Platform") collects, uses, stores, and protects your data. This policy complies with the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. What We Collect

We collect only:

Personal Information: Full name, email address.
Technical Data: IP address, browser type, Platform activity logs.
Transaction Data: Payment IDs, invoice numbers (we do not store your card details — payments are processed by a PCI-DSS compliant third-party gateway).

We collect no sensitive personal data beyond what is necessary to operate your account.

3. Why We Collect It

Purpose	Legal Basis
Account creation and management	Contractual necessity
Project evaluation and documentation delivery	Service provision
GST invoice generation and tax compliance	CGST Act, 2017 — mandatory
Platform security and abuse prevention	Legitimate interest
Grievance redressal	IT Rules, 2021 — statutory obligation

We do not use your data for marketing unless you separately opt in.

4. Who We Share It With

We do not sell, rent, or trade your data. We share data only with:

Payment Gateway Provider: For transaction processing.
Cloud/Hosting Provider: For Platform operation.
Government Authorities: If required by valid legal process.

5. How Long We Keep It

Purpose	Legal Basis
Account data	Until account deletion or Platform Closure
GST invoices and payment records	6 years (CGST Act, 2017)
Server logs	1 year (security and debugging)

After Platform Closure and expiry of statutory retention periods, all personal data is permanently deleted.

6. Your Rights

You have the right to:

Access your data — email [email protected].
Correct inaccurate data.
Export your project records and data before Platform Closure.
Delete your account (subject to GST invoice retention requirements).

We respond to all data requests within 15 days.

7. Security

We implement reasonable security practices under Section 43A of the IT Act, 2000, including:

Encryption in transit (TLS 1.3) and at rest (AES-256).
Access controls and authentication for administrative systems.
Regular vulnerability assessments.

8. Cookies

We use only essential cookies for session management and security. No tracking cookies. No third-party advertising cookies.

9. Grievance Officer

Appointed under Rule 3(2)(b) of the IT (Intermediary Guidelines) Rules, 2021:

Email: [email protected]
Address: RK Studio, Apt, Gorantla, Guntur, Andhra Pradesh 522034, India

Acknowledgment within 24 hours, resolution within 15 days.

10. Policy Updates

Any changes to this Policy will be posted here with an updated date. Major changes will be notified by email.