What we collect
Account information you give us (email, optional name, organization). Subscription metadata from Lemon Squeezy (status, tier, renewal dates) — never card numbers, which Lemon Squeezy holds. Anonymous metering events from your desktop client (e.g. pipeline_runs += 1) — never the inputs or outputs of those runs.
What we don't
Your project files, rasters, DAGs, model weights, posterior samples, scenario outputs, or LLM prompts. We do not log, proxy, or train on any of this material. BYOK API keys are encrypted with Supabase Vault and are only ever decrypted by your authenticated desktop client at runtime.
Your rights
You can export, correct, or delete your account data at any time by emailing SparcUrbanLabs@gmail.com. We will respond within 30 days.
Subprocessors
- Supabase — auth + database (US/EU)
- Lemon Squeezy — billing & merchant of record (US/EU)
- Vercel — website hosting (US)
- Resend — transactional email (US)
Cookies
This site uses only strictly necessary cookies. When you sign in, Supabase sets an HttpOnly, Secure, SameSite session cookie (sb-*-auth-token) so we can keep you logged in across pages. That's it — no advertising cookies, no analytics cookies, no third-party trackers, no cross-site identifiers.
Because these cookies are strictly necessary to provide the service you requested, they're exempt from prior consent under GDPR and the ePrivacy Directive. You can clear them at any time from your browser's site settings; doing so will sign you out.
© 2026 SPARC Labs LLC · 800 South Street · Philadelphia · PA 19147