1. Controller and scope
BYRDS CONSULTING, 88 rue Armand Silvestre, 92400 Courbevoie, France, RCS Nanterre 982 951 915, is the controller for personal data processed to provide Sparkle. Contact us at contact@byrds.consulting.
This policy applies to sparkle.estate, its dashboard and APIs, account and billing journeys, AI image enhancement, product emails, analytics, diagnostics, and support. Your organisation remains responsible for personal data that it decides to include in listing details or photographs and may itself be a controller for that data.
2. Data we process
3. Purposes and legal bases
4. AI image processing
When you select Enhance, Sparkle preprocesses the image on its server and sends the resulting image, a fixed real-estate enhancement instruction, requested size and quality, and technical identifiers through Vercel AI Gateway. Routing is restricted to OpenAI, currently using openai/gpt-image-2. OpenAI returns one generated image, which Sparkle validates, resizes, watermarks where required, and stores alongside a comparison image.
Vercel operates the gateway and OpenAI performs inference. Sparkle records the model, provider generation ID, usage, cost, dimensions, latency, and error state. The analytics event contains the fixed instruction and a textual output summary, not the uploaded or generated pixels. See the Vercel AI Product Terms, OpenAI API data controls, and OpenAI privacy policy.
OpenAI states that API content is not used to train its models unless the API customer opts in; Byrds does not opt in. Under the standard provider controls, OpenAI may retain abuse-monitoring logs containing prompts, images, outputs, and related metadata for up to 30 days, longer only where legally required or where content is flagged for safety review. Sparkle does not currently request provider-level Zero Data Retention in application code.
Do not upload images containing people, private documents, access codes, vehicle plates, family photographs, or sensitive information unless this is necessary, lawful, and appropriately disclosed. No solely automated decision with legal or similarly significant effects is made about you; the AI only proposes an edited image for your review.
5. Cookies and browser storage
Sparkle does not use advertising cookies. Authentication and preference storage are necessary to provide the requested service. Audience and product analytics are configured without persistent browser identifiers: Plausible sets no analytics cookie, and PostHog uses in-memory persistence that ends when the page context closes. Other functional or diagnostic storage is listed below.
6. Recipients and providers
We may also disclose data to professional advisers, auditors, insurers, authorities, or courts where necessary and lawful, and to a successor in a merger, financing, restructuring, or sale subject to appropriate confidentiality and notice. We do not sell personal data or use it for behavioural advertising.
7. International transfers
Some providers are established in or may process data from countries outside the European Economic Area, including the United States. Depending on the provider and account configuration, transfers are protected by an adequacy decision such as the EU–US Data Privacy Framework, European Commission Standard Contractual Clauses, and supplementary contractual and security measures. Provider data locations and subprocessors can change; contact us for the current safeguards relevant to your account.
8. Retention
9. Security
We use measures appropriate to the risk, including TLS in transit, signed HttpOnly session cookies, origin checks for mutations, access controls, isolated production credentials, restricted provider keys, webhook signature verification, file validation and normalisation, and owner checks before accessing listings or images. No system is perfectly secure; contact us promptly if you believe your account or data has been compromised.
10. Your rights and choices
Subject to applicable law, you may request access, correction, deletion, restriction, and portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing. You may also define instructions concerning your personal data after death where French law applies.
Email contact@byrds.consulting from the address associated with your account. We may ask for information necessary to verify your identity and protect other users. You may also complain to your local supervisory authority or to the CNIL.
You can delete individual images and listings in the dashboard, sign out to remove the active authentication cookie, clear cookies or site storage in your browser, unsubscribe from optional emails, and object to PostHog, Plausible, Sentry, or other legitimate-interest analytics by contacting us. Blocking strictly necessary storage may prevent account or dashboard features from working.
11. Third-party data in your uploads
If a photograph or listing contains personal data about another person, you are responsible for informing them and establishing a lawful basis where required. Sparkle is designed for property imagery, not biometric identification or decisions about people. Minimise third-party data and avoid uploading people or sensitive details. Contact us if a person asks about data that may only be identifiable through your workspace.
12. Changes and contact
We may update this policy to reflect product, provider, security, or legal changes. The date above identifies the current version. Material changes will be highlighted in the Service or sent to the account email before they take effect where appropriate.
For a privacy request, provider list, transfer safeguard, retention detail, or question, contact BYRDS CONSULTING at 88 rue Armand Silvestre, 92400 Courbevoie, France, or contact@byrds.consulting.