Privacy Policy
Worried about the confidential data you upload? Check our List data privacy policy
LAST UPDATED: 30-07-2026
Privacy is important to us and we strive for a high level of protection in all processing of personal data. Within the EU/EEA, the General Data Protection Regulation (GDPR) applies from May 2018. Accordingly, we have developed this Policy in order for you to understand how we collect, use, communicate and disclose and make use of personal information. The following outlines our privacy policy.
Purpose of Data Collection
Generally, we collect personal data for customer service-related purposes (such as providing our products and services and responding to customer requests or inquiries), as well as to understand how customers use our services. For more information about how we use personal data, see our Privacy Policy at spotzee.com/policies/privacy-policy/
Respect of Privacy
Here's what we do to protect data privacy:
- Before or at the time of collecting personal information, we will identify the purposes for which information is being collected.
- We will collect and use of personal information solely with the objective of fulfilling those purposes specified by us and for other compatible purposes, unless we obtain the consent of the individual concerned or as required by law.
- We collect data about visitors of websites using the Spotzee software. This data is collected anonymously and is not directly bound to any identifiable user, whether it be its personal identity, or its network information.
- We will only retain personal information as long as necessary for the fulfillment of those purposes.
- We will collect personal information by lawful and fair means and, where appropriate, with the knowledge or consent of the individual concerned.
- Personal data should be relevant to the purposes for which it is to be used, and, to the extent necessary for those purposes, should be accurate, complete, and up-to-date.
- We will protect personal information by reasonable security safeguards against loss or theft, as well as unauthorized access, disclosure, copying, use or modification.
- We will make readily available to customers information about our policies and practices relating to the management of personal information.
Website analytics
After you provide analytics consent, we use PostHog to understand how people use our website, how visitors find Spotzee, and whether they take selected actions such as opening or completing a booking. PostHog receives page paths, page titles, campaign parameters, referring domains, limited Cal.com booking-state information, and privacy-masked session replay and heatmap interaction data. This helps us understand general navigation, clicking, and scrolling patterns. We retain first-touch and last-touch campaign attribution in your browser for up to 90 days.
Session replay masks all page text and form inputs in your browser before capture. Network request and response bodies and headers are excluded, and captured URLs are reduced to their path and safe campaign parameters. We do not send names, email addresses, phone numbers, booking identifiers, meeting titles, meeting times, video links, raw advertising click identifiers, or Cal.com form responses to PostHog. Autocapture and person profiles remain disabled. Cal.com remains available if you decline analytics.
You can change or withdraw analytics consent at any time through the Privacy choices link in the website footer. Withdrawing consent stops further analytics capture and clears the stored campaign-attribution context from your browser.
GDPR Policy
Spotzee strictly implements the GDPR regulation, that aims at protecting user data and providing a right to modify and delete such data, as well as to consent to data collection.
You can find our full GDPR-oriented privacy policy on our Spotzee GDPR status page (which applies to all our users, regardless of their location worldwide). This article lists the data we collect on our users, as well as their rights. Our users can sign a Data Processing Agreement with us. You can upload your signed copy by logging into your Spotzee account and visiting your profile page.
Personal Data We Process
From customers (i.e., users of www.spotzee.com and subscribers to Spotzee software and services), we collect the categories of information, which may include Personal Data, described in our privacy policy https://spotzee.com/policies/privacy-policy/. We process such information for the purposes described in the "How do we process your Personal Data" section of our Privacy Policy. From consumers (i.e., users of a website developed and operated by an Spotzee customer), we may collect information such as name, contact information, IP address, purchase information, and transaction data.
Gmail and Google User Data
When you connect a Google account to Spotzee, we request only the https://www.googleapis.com/auth/gmail.send scope. This permission is used solely to send emails that you initiate through Spotzee using your own Gmail account.
We do not use this permission to read, access, store, index, or analyse the contents of your Gmail mailbox, including received messages, labels, or message history. Email content handled by Spotzee's Email Proxy is processed transiently and is not stored in our databases after delivery.
OAuth tokens are stored in encrypted form and are used only to authenticate requests to the Gmail API. You can disconnect your Google account and request deletion of associated tokens and related data at any time by contacting us or using the account settings provided in the Spotzee application.
Microsoft and Outlook User Data
When you connect a Microsoft account to Spotzee (including Commercial, Government, or China cloud tenants), we request only the minimum Microsoft Graph permissions required to send emails from your mailbox on your behalf (for example, Mail.Send). These permissions are used solely to deliver emails that you initiate through Spotzee using your own Microsoft account.
We do not use these permissions to read, access, store, index, or analyse the contents of your mailbox, including received messages, folders, or message history, except as strictly necessary to send the specific message you request. Email content handled by Spotzee's Email Proxy is processed transiently and is not stored in our databases after delivery.
Access tokens obtained from Microsoft are stored in encrypted form and used only to authenticate requests to the Microsoft Graph API. You can disconnect your Microsoft account and request deletion of associated tokens and related data at any time by contacting us or using the account settings provided in the Spotzee application.
Accessing Personal Data
Customers who would like to access their Personal Data may do so by logging into the Spotzee user interface or emailing us at contact@spotzee.com. Consumers who would like to access their Personal Data should request access from the Spotzee customer whose website they use.
Transfers to Third Parties and Data Residency
We may disclose and transfer customer and consumer Personal Data to third parties, including to our contractors or service providers who provide services or perform functions on our behalf, in response to a subpoena or other legal process by a governmental entity or third party, or if otherwise required by law, to protect or enforce our rights or property, including as evidence in litigation in which we are involved, in the event of the sale or dissolution (bankruptcy) of assets, in whole or in part, of Spotzee or any of its affiliates, and to our affiliates and subsidiaries, for purposes consistent with our Privacy Policy. We contractually require those third parties to provide the same level of protections to Personal Data as required under the Principles. Spotzee will remain liable under the Principles if a third party processes Personal Data in a manner inconsistent with the Principles, unless Spotzee proves that it is not responsible for the event giving rise to the damage. In accordance with our legal obligations, we may also transfer, subject to a lawful request, Personal Data to public authorities for law enforcement or national security purposes.
User data is safely stored in Europe. The Spotzee core infrastructure is hosted in Amsterdam, The Netherlands and Frankfurt, Germany. User data is stored in our core infrastructure. We do not transfer user data outside of the EU.
Contacting Us, Complaints and Dispute Resolution
Spotzee commits to resolve complaints about our collection or use of your personal information. Individuals with inquiries or complaints regarding our Privacy should first contact Spotzee at:
Jonah and Associates Pty Ltd
Level 31/120 Collins St,
Melbourne VIC - 3000
Australia