Privacy Policy
Spark by Elysia Partners · Last updated 7 October 2026
Spark is an AI employee for businesses. It answers and makes phone calls, handles texts and emails, books appointments and keeps customer records, on behalf of the business that signs up. Spark is made by Elysia Partners Pty Ltd, an Australian company ("Elysia Partners", "we", "us").
This policy explains what information we collect, how we use it, who we share it with, how we protect it and how you can delete it. It covers the Spark website and app at spark.elysiapartners.com.
1. Information we collect
- Account details: your name, business name, email address, phone number, password (stored as a one-way hash) and business profile.
- Billing details: handled by our payment processor. We keep a customer reference and payment status, not your full card number.
- Business content: the customer contacts you add or import, call recordings and transcripts, call summaries, text messages, emails your AI sends or drafts, notes, bookings and the instructions you give your AI.
- Connected account data: data from accounts you choose to connect, such as Gmail, Google Calendar, Microsoft Outlook or your accounting software. See section 2 for Google.
- Usage and technical data: pages you use, actions you take, device and browser type, IP address and error logs, used to keep Spark secure and working.
2. Google user data (Gmail and Google Calendar)
Connecting a Google account is optional. When you connect one, Google asks you to approve the access below. Spark uses each permission only for the feature described.
| Permission | What Spark does with it |
|---|---|
| Read your email gmail.readonly |
Read-only: Spark never deletes, archives, moves or marks your emails. Shows your emails in Spark's inbox; lets your AI read recent emails aloud to you on a call, only after the caller says your account PIN; spots new enquiries and replies from your customers so Spark can draft a reply for you to approve and keep your customer records up to date. |
| Send email on your behalf gmail.send |
Sends emails you approve in Spark; sends follow-up emails you have switched on (for example a confirmation after a call or booking); and, if you allow it, lets your AI send a confirmation email to a customer during a call. You choose which of these are on, per inbox, in Spark's settings. |
| Google Calendar calendar, calendar.events |
Checks your free times and creates, updates or cancels appointments that your AI books for your customers. |
| Your Google email address userinfo.email |
Identifies which Google account is connected. |
Limited Use
Spark's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We only use Google user data to provide and improve the user-facing features described above.
- We only transfer Google user data to others when it's needed to provide those features, for security, to comply with the law, or as part of a merger or sale of the business with notice to you.
- We never use Google user data for advertising, and we never sell it.
- We never use Google user data to develop, improve or train generalised AI or machine learning models. The AI language model service that helps write drafts processes it only to return a result to Spark and does not train its models on it.
- No person at Elysia Partners reads your Google user data unless you ask us to (for example for support), it's needed for security or to investigate abuse, or the law requires it.
What we store from Google
- The access and refresh tokens that let Spark connect to your account.
- Details of emails that matter to your business: the sender's name and email address, subject, and the text of emails Spark drafts or sends for you, kept as part of your customer records. Spark reads your other emails when it needs them rather than keeping a copy of your whole inbox.
- Appointments your AI creates in your calendar, as part of your bookings.
3. How we use information
- To run Spark and the features you turn on: answering and making calls, texting, emailing, booking and record keeping.
- To show you what your AI has done and what's waiting for your approval.
- To bill you, support you and send you important account messages.
- To keep Spark secure, prevent misuse and fix problems.
- To meet our legal obligations, including telemarketing and spam laws.
We do not sell personal information, and we do not use your business content or Google user data for advertising.
4. Who we share information with
We share information only with service providers that help us run Spark, only as much as each one needs, and under contracts that require them to keep it confidential and use it only to provide their service to us:
- Cloud hosting and databases, where Spark and its data are stored.
- Telephone and text message providers, to connect calls and send texts.
- Voice and speech providers, to turn speech into text and text into speech during calls.
- AI language model providers, to understand conversations and write drafts (see section 5).
- Email delivery and payment providers, for account emails and billing.
We may also disclose information if the law requires it, to protect people's safety or our legal rights, or as part of a sale or merger of our business (with notice to you). We don't otherwise share it.
5. AI processing
Spark uses AI language models to understand calls, texts and emails and to write replies and summaries. To do that, the relevant content (for example an email a customer sent you, or a call transcript) is sent to our AI language model provider through its business service, processed and returned to Spark. That provider does not use content sent through its business service to train its models, and we never use Google user data to train AI models.
6. How we store and protect information
- All information is sent over encrypted connections (HTTPS/TLS).
- Data is stored on secured cloud servers with access limited to the people and systems that need it.
- Passwords are stored as one-way hashes. Sensitive connection details are protected and are never shown in the app.
- Each business's data is kept separate, and every request is checked to make sure it only reaches that business's own data.
- We monitor for misuse and fix security issues promptly.
Our servers may be located outside Australia (for example in the United States). Where that happens we take reasonable steps to make sure your information is handled consistently with Australian privacy law.
7. How long we keep it and how to delete it
- We keep your information while your account is open, so Spark can keep working for you.
- Disconnecting Google: remove the inbox or calendar in Spark (Settings), or remove Spark's access at myaccount.google.com/permissions. When you disconnect in Spark we delete the stored tokens straight away and Spark can no longer read, send or book anything for that account.
- Closing your account: when you close your account we delete your account, AI employees, call records, connected accounts and their tokens, and your customer records. Backups are overwritten in the normal course, within 30 days.
- Deleting specific information: email hello@elysiapartners.com and we'll delete what you ask within 30 days, unless the law requires us to keep it.
8. Your choices and rights
- Turn individual email and calendar features on or off at any time in Spark's settings.
- Ask us for a copy of your information, or ask us to correct or delete it.
- Your customers can opt out of texts and emails using the opt-out link or by replying STOP; Spark honours opt-outs automatically.
- We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). You can ask to access or correct the personal information we hold about you, and we'll respond within 30 days.
- If you're unhappy with how we've handled your information, contact us first. In Australia you can also contact the Office of the Australian Information Commissioner at oaic.gov.au. If you're elsewhere, you may have rights under your local privacy law, and we'll honour them.
9. Other things you should know
- Your customers' information: the business using Spark decides whose details go into it and is responsible for having the right to contact those people. We process that information on the business's behalf.
- Children: Spark is a business product and isn't meant for anyone under 18. We don't knowingly collect children's information.
- Changes: if we change this policy we'll update it here and change the date at the top. If a change affects how we use Google user data, we'll ask for your consent before it applies.
10. Contact us
Elysia Partners Pty Ltd
Email: hello@elysiapartners.com
Website: spark.elysiapartners.com