Privacy Policy

The controller of personal data relating to your account and our operation of SparkPotato is WISIT, s.r.o., identification number 50374681, with its registered seat at Daxnerova 2727/3, 010 01 Žilina, Slovakia.

We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR) and applicable Slovak data protection law.

If you submit personal information about other people to a shared Field, you or your organisation may also have responsibilities as a controller of that information. You must have a lawful basis for sharing it.

• Account information: your name, email address, account identifier and authentication information needed to create and secure your account. You may optionally add a profile photograph.
• Workspace content: Fields, Ridges, Potatoes, descriptions, comments, ratings, uploaded images and attachments, memberships and invitations.
• Personal account activity: Favourites, notifications, profile changes and activity records needed to make collaboration work.
• Subscription information, where payments are available: billing identifiers, purchased capacity, transaction amounts, billing period and subscription status.
• Communications: information you provide when asking for help, reporting an issue or submitting feedback, including any screenshot you choose to attach.
• Technical information: IP addresses, browser and device information, request times and diagnostic information processed by the services that host and protect SparkPotato.

Please do not upload sensitive information, such as health records, biometric data, or information you are not entitled to share.

We receive information directly from you when you register, edit your profile, contribute to a Field, upload a file or contact us. Other Farmers may provide your email address when inviting you to a Field. Technical information is generated when the website and app are used.

We use this information to create and secure accounts, save and display your content, manage invitations and Field membership, provide notifications, process available subscriptions, respond to requests, investigate abuse and maintain the service.

We do not sell your personal information. Your workspace content is used to provide the collaboration service, not made public simply because you use SparkPotato.

• Performance of a contract — Article 6(1)(b) GDPR: providing the account, collaboration features and any subscription you request.
• Legitimate interests — Article 6(1)(f): maintaining service security, preventing misuse, diagnosing faults, handling ordinary enquiries and defending legal claims, subject to your rights and interests.
• Legal obligations — Article 6(1)(c): complying with accounting, tax and other applicable requirements.
• Consent — Article 6(1)(a): where a particular optional activity requires your permission. You may withdraw consent at any time without affecting earlier lawful processing.

Reading this notice or using the service does not, by itself, constitute consent to optional processing.

SparkPotato is a collaborative service. Farmers who belong to the same Field can see its shared Potatoes, discussions, ratings, membership information and files. They can also contribute to and edit shared content according to the service’s collaboration features.

Your name and profile image identify your contributions. Your email address is visible to fellow Farmers within your Field to help identify members; it is not part of a public profile directory. Favourites are personal, rather than shared Field activity.

Only share information that you intend your fellow Farmers to access. A person may keep a copy of information they were entitled to see, even after their membership ends.

We use Lovable Cloud to provide hosting, account authentication, data storage and file storage. These service providers process information needed to operate SparkPotato on our behalf.

Where you purchase a paid subscription, Stripe processes payment information. SparkPotato stores billing references and subscription information rather than full payment card details. See Stripe’s Privacy Policy.

Information may also be disclosed where required by law, to protect legal rights, investigate fraud or respond to a lawful authority request. If the business is reorganised, relevant information may be transferred subject to applicable data protection requirements.

Our service providers may process personal information in the European Economic Area and other countries. Where a transfer outside the EEA takes place, applicable data protection requirements must be met, including an adequacy decision or appropriate safeguards such as the European Commission’s standard contractual clauses.

You may contact WISIT to request information about the safeguards relevant to your personal data. We do not promise that every part of service processing takes place exclusively in Slovakia or the EU.

SparkPotato uses browser storage and related technologies to keep you signed in, maintain secure sessions and remember choices such as list sorting and filtering. Disabling necessary storage may prevent account features from working correctly.

Optional analytics or advertising technologies, if introduced, require the appropriate information and consent where applicable. This notice does not give permission for non-essential tracking.

We keep personal information for as long as it is needed to provide the service, meet legal obligations or resolve legitimate disputes. Retention depends on the type of information and the purpose for which it is held.

You can request account deletion through your account settings. Owned Fields must first be resolved using the available ownership or deletion options. Deletion removes your account access and personal account information; collaborative Potatoes and discussions may remain for other Farmers, with personal author identity removed. Information you included within shared content may need separate review.

Required accounting records, records necessary for legal claims and limited backup copies may remain for their applicable retention periods. Account deletion does not override your GDPR rights or our legal obligations.

Subject to the conditions in the GDPR, you may request:

• Access to your personal data and a copy of it.
• Correction of inaccurate or incomplete information.
• Erasure of personal data, where applicable.
• Restriction of processing.
• Portability of data processed on the basis of consent or a contract by automated means.
• An objection to processing based on legitimate interests.
• Withdrawal of consent for processing that relies on your consent.

You can update your profile within your account. For other requests, contact WISIT using the email address or postal address below. We may need to verify your identity before disclosing or changing personal information. We normally respond within one month; legally permitted extensions will be explained to you.

You may complain to your local data protection authority or the Office for Personal Data Protection of the Slovak Republic.

We use access controls, authenticated accounts and protected file access to help safeguard information. No online service can guarantee absolute security. Use a strong, unique password, keep it confidential and sign out on shared devices. If you suspect unauthorised access, change your password and contact WISIT.

Links to other websites are governed by those websites’ own policies. This notice covers SparkPotato, not the independent practices of external websites.

We may update this notice as SparkPotato or legal requirements change. The latest version and its update date will appear on this public page. Material changes will be communicated where required by law.

For questions, privacy requests or complaints, write to:

WISIT, s.r.o.
Daxnerova 2727/3
010 01 Žilina
Slovakia
Email: howdy@sparkpotato.com

Read also our Terms of Service.