Privacy Policy

1. Who this applies to

This policy covers venue operators (owners, managers, and staff), guests who browse or book venues, and anyone who contacts us or creates an account.

2. Data we process

• Account data — name, email, password (hashed), phone (optional), and role within a venue.
• Venue data — venue name, address, hours, photos, resources (tables, stations, rooms), menus, rates, and public listing content you publish.
• Bookings & operations — reservations, session timers, orders, staff actions, and related operational records.
• Payments — subscription billing for venue features is processed by Lemon Squeezy. We receive billing status and related metadata; we do not store full card numbers on our servers.
• Emails & messages — transactional emails (e.g. invites, password resets, booking confirmations) and optional guest↔staff chat content when that feature is enabled.
• Technical data — IP address, device/browser type, and basic usage logs needed to secure and improve the service.

3. How we use data

We use personal and venue data to:

• Provide, maintain, and improve the GoSpots platform
• Authenticate users and enforce tenant isolation between venues
• Process bookings, sessions, and operational workflows
• Bill venue subscriptions via Lemon Squeezy
• Send service emails and respond to support requests
• Detect abuse, prevent fraud, and keep the service secure

We do not sell personal data. Venue directory content you choose to publish is visible to the public as part of discovery.

4. Sharing & processors

We share data with service providers only as needed to run GoSpots, including hosting, email delivery, and Lemon Squeezy for payments. Venue staff you invite can access operational data for that venue according to their roles. We may disclose information if required by law or to protect the rights and safety of users and the platform.

5. Retention & security

We retain account and venue data while your account is active and for a reasonable period afterward as needed for billing, audits, and legal obligations. We use industry-standard measures (including encryption in transit and access controls) to protect data. No method of transmission or storage is 100% secure.

6. Your choices

You may update account details in the product, request access or deletion where applicable, and unsubscribe from non-essential marketing emails. Venue owners control what appears on their public listing. For privacy requests, contact hello@gospots.eu.

7. Children

GoSpots is intended for business operators and adult guests. We do not knowingly collect personal information from children under 16.

8. Changes

We may update this policy from time to time. The "Last updated" date above will change when we do. Continued use of the service after an update constitutes acceptance of the revised policy where permitted by law.

9. Contact

Questions about privacy: hello@gospots.eu.