Privacy Policy

This may include contact, account, booking, attendee and support information.

Hosts may also provide business details and verification documents.

We process the listing, schedule, quantity, attendance details, instructions and changes.

We also keep the policy and reference needed to manage the booking.

We may use device details, language, timezone and approximate location for security and nearby results.

Precise location is requested only when you choose Near Me and grant permission.

The provider collects payment and settlement-account details directly.

SPOT receives the amount, status, charges, reference and masked details needed for reconciliation.

We do not store full card numbers or security codes.

We use data to run accounts, availability, payments, notifications and support.

We also use it for host checks, fraud prevention, legal compliance and service improvement.

We share only what is needed with the relevant host and service providers.

We may also share information with lawful authorities where required.

Cookies or local storage keep sessions, language, security and essential functions working.

Limited events, such as listing views and checkout starts, help measure success and find product problems.

These events exclude full payment details and customer search text.

Google Analytics runs only after analytics consent.

Meta and advertising measurement require separate advertising consent. You can withdraw either consent at any time.

Retention periods depend on the record.

We keep account, booking, payment and support data for operations, security, accounting, disputes and legal duties.

It is then deleted or anonymised when no longer required.

Measures include access controls, password hashing, encrypted transport, audit records and risk-based procedures.

No transmission or storage method can guarantee absolute security.

Depending on applicable law, you may request access, correction, deletion, objection or restriction.

You may refuse precise location and change language or notifications without losing essential functions.

Submit privacy requests through the Contact page. We may request enough information to verify identity before completing a data request.