Your data stays yours.
SparkPlug sits between retailers and the vendors they carry, so the boundaries around your data matter. This page covers how that data is protected, what you control in the app, and what a brand partner can and cannot see.
SOC 2 Type II
Our SOC 2 Type II audit is complete. The full report is available on request.
Request the reportEncrypted in transit and at rest
Data moving between your systems and SparkPlug is encrypted in transit, and stored data is encrypted at rest. Access to production data is limited to the staff who need it. We don't sell your data.
Privacy Policy
What we collect, how we use it, how long we keep it, and how to review or delete your information.
Read the Privacy PolicyControls you hold in the app
Every connection between your locations and a brand partner is a setting you own. Nothing is shared until you allow it, and you can change any of these at any time.
Vendor-level access permissions
You decide which brand partners connect to your locations. Access is granted vendor by vendor, and you can change it at any time.
Campaign approval
You decide which campaigns run in your stores. Every incoming Spark can be accepted or rejected, and nothing goes live without your say.
Employee data visibility
You control what employees see: their own sales and standings, nothing more. No wider store data, other locations, or anyone else's information.
One-way, read-only integration
The connection to your POS is one-way and read-only. SparkPlug reads the sales data it needs and never writes back to your system.
A brand sees its own performance. Nothing else.
When you connect a brand partner, their view is scoped to their own products and their own campaigns at your locations. They cannot see another brand's sales, another brand's incentives, or your total store performance across the shelf.
Competing brands sitting side by side in your store are invisible to each other inside SparkPlug.
Frequently Asked Questions
Have another question or need documentation for a security review? Contact your SparkPlug account team, and we will help you find what you need.
Questions about security or privacy?
Send us a note and we'll route it to the right person — including SOC 2 report requests, security questionnaires, and data deletion requests.