Privacy Policy

We collect information you provide directly, such as your name, work email address, company, support requests, and other communications with Practora.

When your organization uses Spark, we process the workspace and installation information needed to operate the service. This can include Microsoft Entra or Slack identifiers, tenant and workspace identifiers, user profile details, conversation references, messages sent to Spark, files intentionally shared with Spark, workflow records, integration metadata, and audit-trail data.

When you connect a finance or business system, we process the information required to complete the work you request and to enforce your organization’s access and approval controls.

We use information to provide and secure Spark, authenticate users, connect the correct organization, process requested workflows, maintain audit records, respond to support requests, prevent abuse, and improve service reliability.

Customer finance data and private workspace content are processed to provide the service. Practora does not sell personal information or use private customer content to train general-purpose AI models.

When you connect Google Workspace, Practora uses your Google account identity to associate the connection with your Practora workspace. With your consent, it accesses Google Drive file metadata to find Docs and Sheets, reads document text and spreadsheet values for your requests, and applies document or spreadsheet changes only after the required Practora approval.

Data accessed through a connected Google account may be used for requests made by members of the Practora workspace it is connected to, according to the access mode a workspace administrator chose. New connections share no files until the person who connected the account selects them. With “selected files”, requests from any member of that workspace may use only the selected Docs and Sheets. With “all Docs and Sheets”, only requests made by the person who connected the account may use it. Google access tokens are not shared with other users. A workspace administrator can change the access mode, pause the connection, or forget it in Connections → Xero & Google files. Selected-file restrictions are enforced by Practora and do not narrow the permissions shown on Google’s consent screen.

Relevant Google file content and metadata may be processed by our AI infrastructure providers to complete the tasks you request. Google Workspace file data is not used to train general-purpose AI models, for advertising, or for prospecting, and is not sold. Human access is limited to your affirmative permission, security investigations, applicable legal obligations, or other uses permitted by Google’s policy.

We store encrypted connection credentials to maintain your connection. Requests, relevant file content, generated outputs, and approval and audit records may remain in your workspace history under the retention rules below. Forgetting a connection deletes its stored tokens, revokes Practora’s access with Google and prevents further access (if the same Google account is still connected to another Practora workspace, Google access continues until that connection is also forgotten); it does not by itself erase earlier workspace records. You can also revoke Practora’s access in your Google Account and contact us to request deletion of Google-derived workspace data, subject to applicable legal and security retention obligations.

Practora’s use and transfer of Google API data adheres to the Google API Services User Data Policy, including its Limited Use requirements: https://developers.google.com/terms/api-services-user-data-policy.

We share information with service providers only where needed to operate Practora, including hosting, identity, communications, analytics, security, and AI infrastructure providers. They may process information only for the services they provide to us.

We may disclose information where required by law, to protect users or the service, or as part of a corporate transaction subject to appropriate confidentiality protections.

When an administrator installs Spark, the relevant platform sends Practora verified installation and tenant information. Spark processes messages only in the conversations where it is installed and addressed according to the configured conversation rules.

Your organization controls whether Spark is installed, which users may access it, which integrations are connected, and when it is removed. Platform administrators may also manage Spark through Microsoft Teams or Slack administration policies.

We keep information only for as long as needed to provide the service, satisfy contractual or legal requirements, resolve disputes, and maintain proportionate security and audit records.

We use technical and organizational safeguards designed to protect customer information. No system can guarantee absolute security, so customers should avoid sending information that is not required for the requested workflow.

Depending on applicable law, you may request access, correction, deletion, restriction, or portability of personal information. Organization administrators can also request deletion of workspace data, subject to contractual, legal, security, and audit-retention requirements.

For privacy questions or requests, contact kendra.blignaut@practora.ai.