Privacy at Spark

Updated September 24, 2026

Spark supports TrendAI internal and customer events. It stores your name, account email, profile, joined events, saved sessions, personal plans, chat content, travel information supplied by your event team, poll responses, notification device tokens, exchanged contact cards, event and networking tags, and Catch the Spark collections, event check-ins and room attendance history. It also stores session questions and answers, chat likes and reactions, optional customer tenure, profile-sharing preferences, earned achievements and limited activity counters used to award them.

Who can see what

Your event chat messages are visible to permitted attendees in that event. Session conversations and questions are restricted to participants currently joined to the session and authorized event administrators. New questions go privately to the event team. Published written answers are visible to that session; selected questions can appear anonymously on a code-protected presentation screen. Your private plans are visible to you. Travel details are visible to you and event administrators. Administrators manage attendee access, moderate conversations, and see aggregated poll results. Memberships and content are separated by event.

Room check-in and attendance

Joining through a room QR, the calendar or a staff scan records your room, session, entry time and how you checked in. Event administrators can see current check-ins and each attendee’s history. Joining another room or selecting Leave room closes the previous visit. Session end times do not clear a check-in. Spark does not continuously track your physical location. Your room can receive polls, updates and TuneIn2 prompts. Staff scans do not exchange contact cards. If the event enables check-in rewards, a staff scan can grant a Spark that animates in your app.

Contact exchanges and Catch the Spark

Event tags reflect organizer groups, saved sessions and travel assignments. Operational tags are visible to event administrators; participants manage their own networking interests and qualities. Networking descriptions are self-selected, with a separate visibility choice for each: private, QR connections, or everyone in the event. Only event-visible networking tags appear in discovery; receiving updates about those topics requires a separate opt-in. You can disable organizer group and event updates in your profile. Private personal plans never create shared tags.

Showing or scanning a contact QR shares both participants’ chosen contact cards within that event. Your connections receive credit for sparks you personally catch, including future catches. Facts received through a connection do not pass onward until you personally see them. Connections can see your name as the source of a shared spark. The event leaderboard shows names and unique spark totals; you can hide yourself in Profile and continue collecting and sharing. Your shared card may include years as a TrendAI customer if you choose to provide it.

Camera access is used only when you open the scanner. Saving contacts to your phone requests Contacts access; Spark does not upload your address book. Removing a connection stops future sharing but preserves sparks already collected. Contact cards already exported to a phone remain there. Contact cards, connections and collections stored in Spark are removed when you delete your account.

Sign-in and connected mailboxes

Employee features use verified TrendAI Microsoft sign-in. An email address alone does not establish employee status. Microsoft directory searches are restricted to verified employees. Authorized administrators may connect Microsoft mailboxes to send event email. Mailbox authorization tokens are encrypted on the backend and are not shared with attendees.

Storage and service providers

Spark uses Amazon Web Services for hosting and storage, Microsoft for employee identity and authorized email delivery, and Apple and Google for mobile notifications. Photos and videos that you choose to upload are shared within your event. Connecting to a session’s TuneIn2 feed sends your connection to the server selected by its administrator. Spark does not sell personal information or use advertising trackers.

AI translation

Chat translation is optional and starts only after you allow it. Spark sends accessible chat message text and quoted replies, which may contain personal information, to Amazon Web Services through Amazon Bedrock with your selected language. Translations are saved in Spark and reused until the source is changed or removed. Other participants who can read your messages may choose to translate them. You can stop new requests by turning off Translate to my app language. TuneIn2 session audio and captions are processed by the selected session service, including its configured transcription and translation providers.

Achievements and profile sharing

If the event enables Achievements, Spark records limited activity such as connections, attended sessions, posts, reactions, poll participation, collected Sparks and selected app interactions to award achievements and points. Selected device interactions are reported in small batches. Spark does not collect raw scrolling positions, message drafts or keystroke streams. Only you see how you earned an achievement. Other authorized attendees can see earned achievement names and the activity sections you choose to share. Profile settings let you separately hide Spark progress, achievement names and conversation statistics. Turning off a profile section does not stop earning; disabling the event module pauses new awards.

Biometric sign-in

Optional Face ID, Touch ID or Android biometrics unlock a saved sign-in token protected on your device. Spark does not receive or store your biometric templates. You can disable biometric sign-in and use your password or verified employee sign-in instead.

Your choices

Notification permission is optional. You can edit your profile, edit or delete your messages, block attendees, report content, and remove saved sessions. In the native apps, an encrypted cache keeps recently viewed schedules available offline for up to 24 hours. Signing out clears that cache.

Retention and deletion

Event data remains available while its organizer runs the event and until the organizer arranges removal. Delete your account from Profile to remove your account, memberships, private plans and travel records and hide your messages. An administrator must appoint a replacement before deleting an account that solely administers an event. Backups may retain deleted data for up to 30 days. Security audit records can retain anonymous references to administrator actions. The permanent review account contains simulated information.

For privacy requests or account deletion assistance, contact Casey_Mondoux@trendmicro.com. Identify the event and your account email; never send your password.