1. Introduction
Spott ("we", "us") respects your privacy. This policy explains what information we collect, how we use it, and the choices you have. We comply with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
2. Information we collect
- Account info: name, email, password hash, profile photo.
- Listing info: business name, address, phone, hours, photos, description.
- Reviews & messages: ratings, text, photos, and direct messages you post.
- Usage data: pages viewed, searches, clicks (used to improve search relevance and analytics).
- Payment data: handled by Stripe. We store only subscription metadata, never full card numbers.
3. How we use your information
- Operate, maintain, and improve the Service.
- Display listings, reviews, and search results.
- Process subscriptions and add-on purchases.
- Send transactional emails (account, billing, claim approvals).
- Detect fraud, abuse, and policy violations.
4. Sharing
We share data only with trusted service providers needed to run Spott: cloud hosting and database (Lovable Cloud), payments (Stripe), email delivery, and analytics. We do not sell your personal information.
5. Cookies
We use cookies and similar technologies to keep you signed in, remember preferences (such as language and theme), and measure aggregate usage. You can clear cookies in your browser at any time.
6. Data retention
We keep account and listing data for as long as your account is active. You may delete your listings or account at any time; backups are purged on a rolling 30-day schedule.
7. Your rights
You may access, correct, export, or delete your personal information from your dashboard or by emailing us. We will respond to verified requests within 30 days.
8. Security
We use encryption in transit (HTTPS), encryption at rest for our database, role-based access controls, and row-level security to protect your data. No system is perfectly secure — please use a strong, unique password.
9. Children
The Service is not intended for children under 13. We do not knowingly collect personal information from children.
10. International transfers
Our hosting providers may process data outside Canada. We require providers to maintain protections at least equivalent to PIPEDA.
11. Changes
We may update this policy. Material changes will be posted here with a new "Last updated" date.
12. Contact
Privacy questions or requests: privacy@spott.ca.