1. Scope and controller
DesignSpark LLC ("DesignSpark," "we," "us") provides websites, applications, software, cloud services, account services, and related offerings under the DesignSpark name and its current and future product brands (collectively, "Services"). This Privacy Policy applies to our websites, waitlists, support, licensing, and Services unless a specific product notice states otherwise. DesignSpark is generally the business responsible for the personal information described here. For customer-controlled workspace content, our role may depend on the applicable product and contract. Contact: support@designsparkllc.com.
2. Categories of information
Account and identity: name, email address, authentication identifiers, organization, preferences, and security records. Supabase supplies authentication and related account infrastructure; DesignSpark controls which purchased product entitlements are associated with the shared account.
Transaction and licensing: products purchased, license type, seats, subscription status, transaction and invoice references, tax/billing metadata, and entitlement history. Paddle may act as merchant of record for qualifying transactions and separately handle checkout, payment details, tax, and billing; we generally do not receive full payment card numbers.
Waitlists and communications: email address, app(s) of interest, signup time, consent status, confirmation status, email delivery events, and suppression/unsubscribe records.
Technical and support: IP address, device/browser and operating system data, app version, diagnostic events, authentication and security logs, support messages, and voluntarily provided attachments.
Customer content: drawings, project data, fixture libraries, schedules, generated work product, and other content users choose to store or transmit through a Service. Local-only files remain on the user device unless a user enables a feature that transmits them or submits them to support.
Website activity: cookies and similar identifiers, usage events, and analytics or marketing data only to the extent the relevant tools are actually enabled and disclosed in the cookie controls.
3. How information is collected
We receive information from users, their devices, Supabase authentication services, Paddle transaction events, support interactions, and optional integrations. A locally running AI model may process content entirely on-device without sending prompts or project files to DesignSpark or the internet. An optional user-enabled network lookup, such as a lighting-zone lookup by ZIP code, sends the information needed for that lookup to the configured endpoint. Users can disable that feature using its toggle. Specific product notices identify any additional AI or network transfers before activation.
4. Purposes and legal bases
We use information to authenticate users; manage a single account across products; verify paid entitlements for each licensed app; provide, secure, troubleshoot and improve Services; deliver transactional notices; respond to support; manage waitlists and consented marketing; prevent fraud; and satisfy accounting and legal obligations. Where applicable law requires a legal basis, we rely on contract performance, legitimate interests, consent, and legal obligations as appropriate. Consent can be withdrawn where it is the applicable basis.
5. Sharing and service providers
We disclose information as reasonably necessary to vendors providing authentication and databases (including Supabase), merchant-of-record checkout and billing (including Paddle), hosting and infrastructure (including providers used for deployed services), email delivery, security, analytics where enabled, and professional advisers. We may share information for legal compliance, protection of rights, or a business transaction subject to appropriate safeguards. We do not authorize service providers to use customer project files for their independent marketing. Any sale or sharing for cross-context behavioral advertising must be separately disclosed and supported by legally required opt-out controls before it occurs.
6. AI processing and external lookups
Some Services use local AI models. When an AI operation is described as local-only, prompts and project content are processed on the device unless the user separately enables a network-dependent feature. A ZIP-code-based lighting-zone lookup is optional and can be disabled. Network requests may reveal a ZIP code, IP address, and technical request metadata to the endpoint operator. AI outputs may be inaccurate and require human verification. We will provide a product-level disclosure before adding materially different cloud AI processing or third-party model providers.
7. Waitlists and marketing choices
DesignSpark may operate a central waitlist across present and future products. A user may select particular product interests; marketing messages are sent only where permitted by law and the applicable consent. A waitlist signup does not purchase a license, guarantee availability, or create a user account unless expressly indicated. Promotional email includes an unsubscribe method; we may retain minimal suppression records to honor opt-outs. Operational notices, receipts, security messages, and legally required communications are not marketing messages.
8. Cookies and tracking
Essential cookies or local storage may support sign-in, security, and preferences. Nonessential analytics or advertising technologies, if deployed, are identified in a cookie notice and controlled as required by applicable law. Browser-based privacy signals, including legally recognized opt-out preference signals, will be honored when applicable.
9. Storage, security, and retention
We apply reasonable administrative, technical, and organizational safeguards, including access controls and secure transport where appropriate. No service is completely secure. We keep account and entitlement records while needed for the relationship and legitimate audit/legal purposes; transactional records as required for tax, chargeback, and accounting needs; support records as reasonably necessary; and waitlist records until withdrawal, expiry of the campaign, or another documented retention limit. Deletion may be delayed for backups, security, and legal holds.
10. International transfers
Service providers may process information in countries other than the user’s own. Where required, we use appropriate contractual or other transfer safeguards. Product availability and regional processing details may vary.
11. Privacy rights
Depending on residence and applicable law, individuals may request access, correction, deletion, portability, or information about disclosures; object to or restrict certain processing; withdraw consent; and opt out of qualifying sale/sharing or targeted advertising. We do not discriminate for exercising applicable privacy rights. Requests may be sent to support@designsparkllc.com. We may verify identity and retain records needed to document fulfillment. Authorized agents may submit requests where permitted. We will respond within applicable statutory timeframes, including any lawful extensions. Appeals are available where local law requires them.
12. California privacy notice
California residents may have rights to know/access, correct, delete, obtain information about categories and specific pieces of personal information, and opt out of sale or sharing and certain uses of sensitive personal information, subject to statutory exceptions. The categories collected and disclosed are described in Sections 2 and 5; purposes appear in Section 4; retention criteria in Section 9. We do not knowingly sell personal information of individuals under 16. If DesignSpark later uses information in a way that constitutes a sale or sharing under California law, it will publish a conspicuous opt-out mechanism and honor applicable opt-out signals. California residents can contact us using Section 11.
13. Age eligibility and minors
The Services may be used by individuals aged 16 or 17 only with permission and supervision of a parent or legal guardian and only where permitted by law and the product’s specific terms. Users must be 18 or older to purchase paid licenses, enter a binding commercial agreement, or administer an organization account, unless a lawful parent/guardian arrangement is expressly offered. We do not knowingly direct marketing to children under 16. If we learn that an ineligible minor provided personal information, we will take appropriate steps to remove it.
14. Changes and contact
We may update this policy prospectively and will provide additional notice or obtain consent when required for material changes. The current version and effective date will be posted with archived versions available on request. Privacy questions and rights requests: support@designsparkllc.com. Mailing address: 10326 Larwin Ave, Chatsworth, CA 91311.