1. Who is responsible for your data?
Sparklikes (“SparkLikes”, “we”), registered at available on request, is the data fiduciary for personal data processed through sparklikes.com, the account app and the API. Questions and requests go to contact.followkart@gmail.com or to our grievance officer, contact.followkart@gmail.com.
2. What data do we collect from guests?
Guests do not create an account and do not give us an email or password. For a guest order we collect only:
- The target link or username you enter, which is usually public information on the platform.
- Order data: the service, quantity, price, order reference, status, start count and refill requests.
- Payment data: for UPI, the payment status and transaction reference returned by the payment page; for USDT, the transaction hash, sending wallet address and amount you submit.
- Technical data: IP address, browser type and approximate location derived from the IP, used to prevent fraud, set your default currency and keep the site secure.
If you contact support, we also keep the messages and any contact details (such as an email or WhatsApp number) you choose to give.
3. What extra data do we collect from account holders?
If you create an account, we also collect:
- Email address and, if you sign in with Google, your Google account name and email as shared by Google.
- Password, stored only as a one-way hash. We cannot see your password.
- Wallet records: top-ups, charges, refunds and balance.
- Order history and API keys (stored securely), plus API request logs used for security and troubleshooting.
- Preferences such as your display currency.
4. What do we never collect?
We never ask for or store your social media passwords, login codes or admin access. We do not receive or store card numbers, bank logins or UPI PINs; those stay with your bank and UPI app. We do not knowingly collect data from children under 18.
5. Why do we use your data?
We use your data only for these purposes:
- to place, deliver, track, refill and refund your orders;
- to confirm payments and match payment references to orders;
- to run your account, wallet and API access;
- to answer support requests and handle complaints;
- to prevent fraud, abuse, chargebacks and security incidents;
- to issue invoices and meet tax, accounting and legal obligations;
- to understand overall site usage in aggregate so we can improve it.
Under the Digital Personal Data Protection Act, 2023 (DPDP Act), we process data on the basis of your consent, given when you place an order or create an account, and for legitimate uses the Act allows, such as complying with law. We do not use your data for advertising profiles and we do not sell it.
6. Who do we share data with?
We share data only with service providers who help us run SparkLikes, and only what they need:
- Fulfilment partners receive the target link or username and the order details needed to deliver. They do not receive your name, email or payment details.
- Payment processors: the UPI payment page provider handles UPI payments under its own privacy terms. USDT payments are recorded on a public blockchain, which we do not control.
- Hosting, email and infrastructure providers that store and process data on our behalf.
- Google, if you choose Google sign-in.
- Authorities, where Indian law requires it or to protect our rights and users against fraud.
Some providers may process data outside India. Where they do, we use providers with appropriate safeguards and follow any restrictions notified under the DPDP Act.
7. How long do we keep data?
We keep data only as long as needed for the purposes above:
- Order and payment records: up to 8 years, to meet Indian tax and accounting requirements.
- Account data: while your account is open, then deleted or anonymised within 90 days of closure, apart from records we must keep by law.
- Technical and security logs, including IP addresses: up to 180 days, unless needed longer to investigate fraud or abuse.
- Support messages: up to 2 years after the issue is closed.
8. What are your rights?
Under the DPDP Act, 2023 you have the right to:
- obtain a summary of the personal data we process about you and how we process it;
- have inaccurate or incomplete data corrected and updated;
- have your data erased when it is no longer needed, subject to legal retention duties;
- withdraw consent at any time (this does not affect processing already done, and may mean we cannot deliver an order in progress);
- nominate another person to exercise your rights in case of death or incapacity;
- have your grievances addressed, first by us and then, if unresolved, by the Data Protection Board of India.
To make a request, email contact.followkart@gmail.com or our grievance officer. Guests should include the order reference so we can find the data. We reply within 30 days. If you are outside India, you may have similar rights under your local law, and we will honour them where they apply.
9. How do we use cookies?
We use a small number of cookies: a session cookie to keep you signed in and your cart working, and a currency cookie to remember ₹ or $. We do not use advertising trackers. See our cookie policy.
10. How do we protect your data?
We use HTTPS everywhere, hash passwords, restrict staff access to what each role needs and keep secrets encrypted at rest. No system is perfectly secure; if a personal data breach affects you, we will notify you and the Data Protection Board as the DPDP Act requires.
11. Who is the grievance officer?
Our grievance officer is contact.followkart@gmail.com. Postal address: Sparklikes, available on request. Complaints are acknowledged within 48 hours and resolved within 30 days where possible.
12. Can this policy change?
Yes. We will update this policy when our practices or the law change, and show the new date at the top. For material changes affecting account holders, we will also notify you in the account app.