Privacy Policy

This Privacy Policy explains how GC SPARK, owned and operated by Tayyaba Khalid, collects, uses, stores, and protects information submitted through gcspark.com. We collect information necessary to process gift card submissions, verify transactions, communicate with customers, prevent fraud, and provide customer support.

Last updated: May 17, 2026Operated by GC SPARK

1. What we collect

When you submit a card, we collect: your name, email, optional phone, the gift card brand, balance, card number, PIN, optional purchase receipt, and the payout rail you choose (PayPal, Zelle, Cash App, or Chime).

We also collect technical signals: IP address, browser user-agent, referring page, and timestamps. These help us prevent fraud and improve the experience.

2. How we use it

Verifying the gift card's authenticity and balance.
Initiating your payout via your chosen rail.
Sending you transactional emails (submission received, status changes, payout confirmation).
Preventing fraud and abuse (rate limits, duplicate detection, IP/email pattern checks).
Responding to support requests via email or the in-app EVA chat.

3. Where it lives

All data is encrypted in transit (TLS 1.3) and at rest. Card numbers and PINs are stored encrypted in a private database with row-level access control. Uploaded card images live in a private object store with signed, time-limited URLs — never public.

4. Who can see it

Only verified GC SPARK staff working an active ticket can briefly unmask card details. Every reveal is recorded in an immutable audit log with the actor, timestamp, and reason. Engineers do not have routine access to card data.

We never sell, rent, or trade your personal information with marketers or data brokers.

5. How long we keep it

Card numbers, PINs, and uploaded card images are automatically purged once the payout has settled.
Submission metadata (reference, status, dates, anonymized rate) is kept for up to 7 years to comply with US financial-records retention.
Chat transcripts auto-expire after 90 days.

6. Your rights

You can request a copy of your data, ask for corrections, or request deletion by emailing support@gcspark.com. We respond within 30 days. Some records (e.g. completed payouts) are required by law to be retained.

7. Children

GC SPARK is intended for adults 18+ who legally own the gift cards they sell. We do not knowingly collect data from minors. If you believe a minor has used our service, contact support@gcspark.com and we will remove the data.

Independent service statement

GC SPARK operates independently from all gift card issuers. The brands featured on this website do not sponsor, authorize, or endorse GC SPARK's services. References to third-party trademarks are made solely for identification purposes.

Questions?

Email us — we read every message.

Anything in this policy unclear? Get in touch.

support@gcspark.com