Privacy Policy for Spotly

When you sign up and use Spotly, you may choose to provide some or all of the following personal information:

• Name (first and last)
• Email address
• Phone number
• Date of birth (if you opt to enter it; we do not require DOB to create an account)
• Profile photo, bio, and venue/cuisine preferences (optional, for a more personalized experience)
• Payment information (e.g., credit card details, billing address)—processed securely via our payment provider, Casys
• Location data (only if you enable location services, used to show nearby venues and events)

Whenever you use the Service—whether on mobile or web—we automatically collect certain technical and usage data, including:

• Device token and operating system (e.g., iOS or Android version)
• IP address and approximate geolocation (to help secure your account and serve local content)
• App usage data: which screens you visit, buttons you tap, search queries, reservation history, and crash reports
• Cookies and similar tracking technologies (see Section 3)
• Google Analytics data for aggregate app‐performance insights (e.g., session length, feature usage)

• Social media logins (if you choose to sign in via Facebook, Google, or Apple): we receive basic profile information (name, email, avatar).
• Data from venue/partner accounts: if you register as a venue owner or event organizer, you may upload event details, seating layouts, or promotional materials.

• Authenticate and manage your account
• Process table reservations, ticket purchases, and any in‐app transactions (via Casys)
• Send booking confirmations, reminder notifications, and important system alerts

• Recommend nearby venues, upcoming events, or promotions based on your location, past reservations, and stated preferences
• Remember your settings (e.g., favorite venues, language choice) so you don't have to re‐enter them

• Work with Casys (our payment processor) to tokenize your payment method securely
• Monitor for suspicious activity and block accounts that appear to be violating our Terms of Use or engaging in fraudulent behavior

• Retain reservation logs and transaction records when required by local regulations
• Respond to valid law‐enforcement requests (e.g., subpoenas, court orders)

• Use Google Analytics to understand how users navigate the app, which features are most popular, and where performance bottlenecks occur
• Analyze aggregated data to find usage trends, fix bugs, and plan new features

• Send newsletters, marketing emails (if you opt in), and promotional offers from Spotly or our partners
• Respond to customer‐support inquiries, feedback, or complaints

• If we undergo a merger, acquisition, or asset sale, your data may be transferred (see Section 3)
• Any other uses to which you consent

• Hosting & Infrastructure: AWS (or another cloud provider) stores your profile, reservation records, and media uploads
• Analytics: Google Analytics collects pseudonymized usage data (e.g., session duration, screen flows) under its own Privacy Policy
• Payments: Casys processes and stores your credit‐card information; we only receive a tokenized reference

• If required by law (court order, subpoena, or government inquiry), we'll share the minimum data necessary to comply
• To protect user safety—if we reasonably believe someone's life or property is at risk

• When you book a table or buy a ticket, we share your name, email, and phone number with the venue or organizer so they can confirm your reservation and contact you if needed
• We do not share sensitive payment data (e.g., your full credit‐card number) with venues—only a confirmation of payment

• In public areas (e.g., venue reviews, event chat), certain profile fields (username, avatar, bio) may be visible to anyone using Spotly
• You can control what you share via your Privacy Settings in the app

• If Spotly acquires or merges with another company, your data may transfer as an asset, subject to notice and your continued rights under this policy
• We may share limited contact information with marketing partners if you expressly opt in (e.g., third‐party restaurant promotions)

• Any other sharing not listed above will only occur if you explicitly agree (e.g., participating in a user‐research study)

We retain your personal data (profile, reservations, payment tokens) for as long as your account remains active. If you request deletion (see below), we'll delete or anonymize it unless we are required to keep it for legal reasons (e.g., tax records, fraud investigations).

We keep aggregated analytics (Google Analytics) indefinitely in pseudonymized form. Raw logs (device tokens, IP addresses, crash reports) are retained for up to 12 months, then purged or anonymized.

For compliance with local regulations, we retain transaction receipts and billing records for at least 5 years (or as required by Macedonian law).

1. In the Spotly app, go to Settings → Privacy → Delete Account.
2. Follow the on-screen prompts to confirm.
3. We will permanently remove your personal profile, reservations, and photos within 30 days, unless required otherwise for legal or security reasons.
4. Even after deletion, anonymized usage statistics (e.g., "User X made 10 reservations in 2024") may remain in our analytics.