Privacy Policy

Effective Date: February 1, 2026 · Last Updated: February 2026

Eagle Eyes Ventures LLC, doing business as HeySpark ("HeySpark," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website creation and management services ("Services") or visit our website at heyspark.co.

By using our Services or website, you consent to the practices described in this Privacy Policy.

1. Information We Collect

1.1 Information You Provide

When you sign up for our Services or communicate with us, we may collect:

• Business information: Business name, address, phone number, business hours, services offered, business description, and business category
• Contact information: Owner/contact name, email address, and phone number
• Online presence data: Google Business Profile URL, existing website URL, social media links (Facebook, Instagram, Yelp)
• Branding materials: Business logo, preferred color schemes, and design preferences
• Payment information: Credit card and billing information (processed and stored by Stripe; we do not store your full payment card details)
• Communications: Emails, messages, and any other correspondence between you and HeySpark

1.2 Information We Collect Automatically

When you visit our website or your HeySpark-built website, we may automatically collect:

• Usage data: Pages visited, time spent on pages, click patterns, and referral sources
• Device information: Browser type, operating system, device type, and screen resolution
• Network information: IP address, approximate geographic location, and internet service provider

1.3 Information from Third Parties

We may collect publicly available information about your business from:

• Google Business Profile: Business reviews, photos, ratings, and operating hours
• Google Analytics & Search Console: Website traffic data, search performance, and visitor demographics
• Public directories: Business information available through public listings

2. How We Use Your Information

We use the information we collect to:

Purpose	Types of Data Used
Build and maintain your website	Business info, branding, online presence
Process payments and manage billing	Contact info, payment info
Provide customer support	Contact info, communications
Optimize your website for search engines	Business info, analytics data
Generate performance reports	Analytics data, usage data
Improve our services	Usage data, feedback, analytics
Communicate service updates	Contact info
Comply with legal obligations	All categories as required

3. Third-Party Services

We use the following third-party services to provide and improve our Services:

Service	Purpose	Data Shared
Cloudflare	Website hosting, CDN, SSL	Website content, visitor traffic data
Stripe	Payment processing	Payment and billing information
Google Analytics	Website traffic analysis	Anonymized usage data, cookies
Google Search Console	Search performance monitoring	Search query data, site indexing data
Google Places / Maps	Business profile data, maps	Business name, location
UptimeRobot	Website uptime monitoring	Website URL

Each of these third-party services has their own privacy policies governing how they handle data. We encourage you to review their policies.

4. Cookies and Tracking

4.1 What Cookies We Use

We and our third-party partners use cookies and similar technologies on our website and on client websites:

• Google Analytics cookies: Used to understand how visitors interact with websites, including pages visited, time on site, and traffic sources. Google Analytics uses cookies (such as _ga and _gid) to collect this data in an anonymized form.
• Essential cookies: Necessary for website functionality, such as form submissions and session management.

4.2 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain cookies, or delete cookies. Note that disabling cookies may affect website functionality.

4.3 Do Not Track

We currently do not respond to "Do Not Track" browser signals, as there is no consistent industry standard for compliance.

5. Data Retention

• Active clients: We retain your data for as long as your account is active and you are receiving Services.
• After cancellation: We retain your business information and website data for 90 days after service termination, in case you wish to reactivate. After 90 days, your data will be deleted from our systems.
• Payment records: We retain billing records for 7 years as required by tax and accounting regulations.
• Communications: Email correspondence is retained for 2 years after your last interaction.
• Analytics data: Aggregated, anonymized analytics data may be retained indefinitely.

6. Data Security

We take reasonable measures to protect your information, including:

• SSL/TLS encryption for all data in transit
• Secure hosting via Cloudflare's infrastructure
• Payment processing through PCI-DSS compliant Stripe
• Access controls limiting who can view client data

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

7. Your Rights

7.1 All Clients

Regardless of where you are located, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct any inaccurate personal data
• Deletion: Request that we delete your personal data (subject to legal retention requirements)
• Data portability: Request your data in a structured, commonly used format
• Opt-out: Unsubscribe from marketing communications at any time

7.2 California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: You can request the categories and specific pieces of personal information we have collected about you.
• Right to delete: You can request deletion of your personal information, subject to certain exceptions.
• Right to non-discrimination: We will not discriminate against you for exercising your CCPA rights.
• Sale of data: We do not sell your personal information to third parties.

7.3 European Residents (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis: We process your data based on contractual necessity (to provide our Services), legitimate interest (to improve our Services), and your consent (for marketing communications).
• Right to restrict processing: You can request that we limit how we use your data.
• Right to object: You can object to our processing of your data based on legitimate interests.
• Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time.
• Data transfers: Your data may be transferred to and processed in the United States. We rely on Cloudflare's and Stripe's data transfer mechanisms for international data transfers.

8. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on our website. The "Last Updated" date at the top of this policy reflects the most recent revision.

10. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or have a data-related concern, contact us at:

HeySpark (a service of Eagle Eyes Ventures LLC)
Email: hello@heyspark.co
Website: heyspark.co