Sparks ProviderBack to site

Privacy policy

Privacy Policy

How Sparks Provider collects, uses, stores and protects personal information, and the choices you have. This policy applies to our website and the Sparks Provider service.

Last updated 8 September 2026

Who we are

Sparks Provider is operated by Sparks Support Pty Ltd (ABN 93 669 152 103), located at T312, 1 Village Centre Way, Forest Glen QLD 4556.

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. In this policy, we, us and our mean Sparks Support Pty Ltd, and you means the account holder using Sparks Provider.

Information we collect

We collect the information needed to provide and support your provider workspace.

  • Account and business information, including names, contact details, business details and login information.
  • Participant information you enter, which may include contact details, NDIS numbers, plan information, goals, support needs, notes and uploaded documents.
  • Worker information you enter, including contact details, rosters, qualifications, checks, documents, timesheets and shift notes.
  • Operational records, including agreements, schedules, invoices, reports, NDIS claiming information and business settings.
  • Payment and subscription information. Card details are handled by our payment provider and are not stored by Sparks Provider.
  • Support messages and basic information about how the website and service are used.
  • The name, email address, question and replies you choose to provide through the public website assistant.
  • Questions you choose to ask Cody, our in-app help assistant, and Cody’s answers.

Sensitive information

Participant and worker records can contain sensitive information, including health information and compliance documents. We only handle this information because you choose to enter it to operate your service.

You are responsible for having the authority, consent or other lawful basis needed to enter another person’s information, and for telling them how their information will be handled.

How we use information

We use personal information only to operate and improve Sparks Provider, support your account, process subscriptions, send service messages, maintain security, and meet legal or record-keeping obligations.

  • We do not sell or rent personal information.
  • Cody is an optional help assistant. When you use it, Anthropic processes only your current typed question, first name, role and the relevant published Provider help articles.
  • The public website assistant is optional. Anthropic processes only the current question, first name and published public Provider information. Your email and earlier messages are not sent to Anthropic.
  • Participant and worker records, rosters, notes, documents, agreements, timesheets, invoices and reports are not sent to Cody.
  • We share information only with service providers needed to deliver the service, such as secure hosting, payments, email and website delivery, and require them to protect it.

AI help and human support

Cody cannot inspect or change your workspace and does not make automated decisions. If the published help articles do not support a confident answer, the question is placed in our support CRM and linked to your signed-in account so our team can reply by email.

The website assistant records the question and reply in the Provider CRM. If it cannot answer, or you choose to leave a message, the name and email you supplied let our team take over and reply by email.

Anthropic states that its commercial API inputs and outputs are not used to train its models by default and are normally deleted from its systems within 30 days, subject to its published safety, legal and contractual exceptions. More detail is in our AI Use Statement.

How we protect information

We use technical and organisational safeguards including encrypted connections, encryption of stored data, account-level access controls, restricted administrative access and monitored backups. No online service can promise absolute security, but we actively work to protect the information entrusted to us.

Retention and deletion

We keep personal information while your account is active and for as long as reasonably needed to provide the service, maintain business records and meet legal obligations. You can ask us to access, correct, export or delete personal information. Some backup copies may remain for a limited period before being securely removed.

Cookies and website data

Necessary cookies keep accounts signed in. Our first-party website analytics help us understand how public pages are used. Optional advertising measurement is a separate choice, available under Advertising preferences in the website footer. Declining it does not affect calculator results, report delivery or your trial.

If you allow advertising measurement, Meta Pixel on public marketing pages and our server-side Conversions API report calculator activity, trial button clicks, a new trial workspace, its first shift and the first recorded subscription payment. Browser and click identifiers help connect a website visit to these milestones across sparksprovider.app and app.sparksprovider.app. Matching event IDs prevent counting browser and server reports twice.

Meta receives technical advertising identifiers, event names and times, and public page information. Browser connections also expose an IP address and browser information to Meta. We do not send calculator answers, names, email addresses, phone numbers, participant or worker records, health information, notes, documents, or authenticated page URLs. Meta scripts do not run inside the signed-in app. Meta may process advertising information overseas under its privacy terms.

Advertising identifiers are retained for up to 90 days. Pending event payloads expire after seven days; content-free delivery records are retained for up to 180 days. You can withdraw advertising permission in the footer. Withdrawal stops future measurement; it cannot recall events already received by Meta. Global Privacy Control and Do Not Track signals are respected.

The calculator summary needs no email. If you request a detailed report, your supplied contact details and calculator inputs go to our Provider CRM with a calculator tag for delivery and support. The separate, initially unticked email-marketing option is not required to receive your report or use the service.

Your rights and complaints

You can contact us to access or correct personal information, request deletion or export, or raise a privacy concern. We may need to verify your identity before acting on a request. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.

Contact

For privacy questions or requests, contact hello@sparksprovider.app