Privacy Policy

When you fill out our contact form, we collect the information you enter: your business name, email address, phone number, your website URL if you have one, and your budget range, how you heard about us, and whatever you write in the message box, if you choose to fill those in.

Along with that submission, our form software automatically records your IP address, browser, and device type, plus the page you submitted from. This is standard for spam prevention and troubleshooting.

Contact form submissions are emailed to us and stored in this website’s own database, where we can review them later. They are not only transient email.

Free site audit form. Our free site audit form asks for your website address first and your email address second. We save the website address as soon as you tap Next, even if you never enter your email, so we can follow up about an audit you started but did not finish. At that step we keep only the website address, the page you were on, the time, and, if you first reached our site through one of our tagged links or ads, the campaign tags from that first visit. We delete these records after 90 days.

If you book a call through our scheduling widget, that scheduling is handled by Google Calendar under Google’s own privacy policy. We receive the booking details you provide: typically your name, email address, and the time you selected.

Payments for our monthly and annual plans are handled by Stripe. You enter your card details on Stripe’s checkout page, not on this website, and we never see or store your full card number.

Stripe gives us the details of your order: your name, email address and business name, the plan you chose, the amount, and your invoice and subscription references. We use them to confirm your order, send you a receipt, set up your service, and contact you about your plan. For each new purchase we also create or update a record for you in our customer database (Zoho CRM) and send a notice to our billing inbox.

If you use the billing portal to update your card or cancel, that happens on Stripe’s site under Stripe’s own privacy policy.

We use Google Analytics (GA4) to understand how visitors use our site: pages viewed, general location (city/region level, not precise), device and browser type, and how you arrived here. We use this in aggregate and don’t use it to identify you personally. Google Analytics uses cookies and similar technologies; you can opt out using Google’s Analytics opt-out browser add-on, or by adjusting your browser’s cookie settings.

We also use Microsoft Clarity to see how visitors interact with our pages, such as where you click, how far you scroll and a replay of your session, so we can tell which parts of the site are confusing or ignored and improve them. Clarity masks typed text and form input by default, so what you type is not captured. It uses cookies and similar technologies; see Microsoft’s privacy statement for how it handles this data.

Clarity also receives a copy of the request logs of our website’s content delivery network, sent automatically from our hosting account for every request to this site, whether or not a Clarity script runs in your browser. Each log entry contains the date and time, your IP address and country, the page requested including any search terms or tracking parameters in the web address, your browser and device description, the page you came from, and the response status and size. It does not contain cookie values or the contents of a form you submit. We use it to understand how the site is reached, including by automated crawlers.

We run a security plugin (Wordfence) that logs visitor IP addresses and request activity in order to detect and block malicious traffic and login attempts. Our web server also keeps standard access logs.

Your theme preference (light/dark) and whether you’ve already seen our intro animation are stored in your own browser, not sent to us or any third party.

If we send you a follow-up email about your inquiry or a proposal, that email may include a small, invisible tracking image. It tells us roughly whether and when the email was likely opened, so we know whether to follow up differently. This is a common but imprecise signal: many email apps block it by default, so it does not reliably confirm a message was actually read, and we don’t rely on it for anything beyond deciding whether to check in again.

We use the Meta Pixel and Meta’s Conversions API (Facebook/Instagram) on our site. When you visit, Meta may place cookies (commonly named _fbp and _fbc) and receive information about your visit, such as the pages you view. If you submit our free site audit request, we also send Meta a record of that submission: your email address and phone number in a one-way scrambled (hashed) form that cannot be reversed back into the original, plus which page and what content the request was for. We use this to measure whether our Facebook and Instagram activity leads to audit requests, and to show our ads to people likely to be interested. Meta may use this information consistently with its own privacy policy. You can limit this in your Meta Ad Preferences, or by blocking cookies from facebook.com in your browser.

We also set our own first-party cookies (kept for up to 90 days) that remember which link or campaign first brought you to our site (for example, a specific Facebook post or ad) so that if you later submit a lead form, we can credit it to the right source internally. These cookies are not shared with anyone outside our company.

• To respond to quote requests and answer questions about our services
• To follow up with you about a project you’ve inquired about
• To keep this website secure and functioning
• To process payments, manage subscriptions and send receipts
• To understand and improve how this website performs
• To measure and improve our Facebook and Instagram advertising

We do not sell your information. We do share limited, mostly hashed information with Meta for the advertising purpose described above; beyond that, we do not share your information for cross-context behavioral advertising, and we do not use it for purposes beyond what’s described here.

We use a small number of service providers to run this site and respond to inquiries. Each processes data on our behalf:

• Amazon Web Services: hosts this website and its database in the United States, including stored contact form submissions
• Amazon SES: delivers contact form notifications to our inbox
• Stripe: payment processing, receipts and the billing portal for our plans
• Zoho CRM: stores contact and customer records so we can follow up and support you
• Google Analytics: website usage analytics
• Microsoft Clarity: behavior analytics and session replay, and analysis of our website’s request logs
• Meta (Facebook/Instagram): advertising measurement, as described above
• Google Calendar: appointment scheduling, if you book a call
• Wordfence: website security monitoring and malicious-traffic blocking

None of these providers are authorized to use your information for their own marketing purposes. We may also disclose information if required by law.

Our tools use YouTube API Services to publish videos to our own YouTube channel and to read how those videos perform. By using features of our tools that connect to YouTube, you agree to be bound by the YouTube Terms of Service. YouTube data is also covered by the Google Privacy Policy.

What we access. For the YouTube channel connected to our tools (our own), we read the channel’s name and subscriber count, its videos’ titles, descriptions, lengths and public counts (views, likes and comments), and YouTube Analytics for those videos (watch time, how much of each video people watch, and where views come from). We upload a video to that channel only after a person at KMC Spark approves it. We do not access any other channel or any viewer’s personal information.

How we use it. To publish our approved videos and to show our team which videos perform best, so we can decide what to post and when. We do not sell this data or share it with anyone other than the service provider that hosts our tools (Amazon Web Services).

How long we keep it. We keep only the most recent daily snapshot. It is refreshed every day and replaced, and never kept for more than 30 days without being refreshed. If the connection to YouTube is removed, we delete the stored YouTube data at the next daily refresh.

Removing access. You can revoke our access to a Google account at any time in your Google Account’s security settings. To ask us to delete YouTube data sooner, email hello@kmcspark.com.

This website is served over an encrypted HTTPS connection. Contact form submissions are stored on access-controlled infrastructure, and access to them is limited to the people at our company who need it to respond to you. No method of transmission or storage is completely secure, so we can’t guarantee absolute security.

We keep contact form submissions for up to 24 months from the date of your inquiry, after which we delete them. If you ask us to delete your information sooner, we will.

Free website applications. If you apply for one of our free-website offers, we collect what you enter in the application (your name, contact details, business details and, where the offer is for veteran-owned businesses, your branch of service and the veteran ownership of the business). We use it only to run the offer, to follow up with you about it, and to send you the free site audit we offer every applicant. Applications are stored with our other website inquiries and in our customer records (Zoho CRM). If you are selected as a finalist, we may ask you to confirm your eligibility, and we delete any verification material once a winner is chosen. We keep applications for up to 24 months, as we do other inquiries, unless you ask us to delete yours sooner.

We keep billing and order records for as long as the law requires us to keep tax and accounting records. We may not be able to delete those on request while that period runs. Stripe keeps its own records under its own policy.

You can ask us to access, correct, or delete the information we hold about you at any time by emailing hello@kmcspark.com. We’ll respond promptly. You can also opt out of Google Analytics or Meta advertising using the links above, or block cookies in your browser settings.

This website is intended for business owners and is not directed at children. We do not knowingly collect information from anyone under 13.

If we make material changes to how we handle your information, we’ll update this page and revise the date at the top.

Questions about this policy or the information we hold about you?

KMC Spark LLC
Piscataway, NJ
Email: hello@kmcspark.com
Phone: (732) 507-5235