Security & privacy at CourtSpark

Investor portal access requires email/password authentication, an executed NDA, and explicit admin approval before any confidential material is shown.

Admin actions are gated by a server-validated role check — not by client-side flags.

Application data lives in a managed Postgres database with row-level security enabled. Sensitive submissions (beta applications, advertiser trials, investor profiles) are readable only by authorized roles.

Backups and encryption in transit and at rest are provided by our cloud platform.

Transactional email is sent from an authenticated, SPF/DKIM-aligned sender domain. The send endpoint is restricted to server-to-server calls to prevent abuse of our mail infrastructure.

Every email includes a one-click unsubscribe and respects our suppression list.

We collect only what we need to evaluate partnerships, advertiser trials, and investor inquiries: contact details, organization info, and the form fields you submit. We do not sell personal data.

Investor materials are confidential and shared under NDA. Re-distribution of pitch-deck content or financial projections is prohibited.

If you believe you've found a security vulnerability, please email info@courtsparkai.com with details and reproduction steps. We aim to acknowledge reports within a few business days.