# Privacy Policy

Last updated: July 2026

## Introduction

Spotaro ("we", "our", or "us") provides a Telegram Mini App and related web services that help users organize Events, manage Spaces, reserve Spots, and browse public Events on a location-based calendar.

This Privacy Policy explains what information we collect, how we use it, and what rights users have regarding their data.

## Scope of the Service

Spotaro includes:

- The Telegram Mini App for creating and managing Events, Spaces, Spots, and participation requests
- The authenticated web application experience
- The public Events calendar (/web), which allows browsing public Events by city and month
- Optional account profile settings, including a preferred Local Events location

## Information We Collect

When you use Spotaro, we may collect:

### Account and identity data
- Telegram User ID
- Telegram username
- First name and last name
- Profile photo URL provided by Telegram (where available)
- Language preference

### Content and activity data
- Information related to Events, Spaces, Spots, and requests created or managed within Spotaro
- Event details such as name, date, description, privacy settings, location (city/country and related coordinates where provided), cover images, and participation settings
- Subscription and access grants for Events (including via invite links)

### Location-related data
- A preferred Local Events city and country, if you choose to save one in your profile settings
- A calendar location selection you make while browsing the public calendar
- Approximate location derived from IP-based geolocation (city and country) when you use the public calendar without a saved profile location, solely to suggest a default city for browsing public Events

### Technical information
- Technical information necessary for the operation, security, and integrity of the service (for example, authentication tokens or session data required to keep you signed in)

We do not sell personal information.

## How We Use Information

We use collected information to:

- Provide and operate the Spotaro Mini App and web services
- Create, display, and manage Events, Spaces, and Spots
- Process participation requests and related notifications
- Show public Events on the calendar for a selected or suggested city
- Apply your preferred Local Events location when you are signed in
- Improve functionality and user experience
- Maintain security, prevent abuse, and enforce our Terms of Use
- Comply with applicable law and lawful requests from competent authorities
- Communicate service-related information

## Public Events and Visibility

Events marked as public (non-private), and related public Space information intended for discovery, may be visible on the public Events calendar and to other users according to the settings chosen by the Event creator.

Private Events remain accessible only to users who have been granted access (for example, owners and users who redeem an invite link), subject to the service’s access rules.

## Data Storage

User data may be stored in cloud-based databases and infrastructure providers used by Spotaro (including Cloudflare services where applicable).

We take reasonable measures to protect user information from unauthorized access, disclosure, alteration, or loss.

## Data Sharing

Information may be shared only:

- When required by applicable law or by a valid legal process
- To protect the rights, safety, security, or integrity of Spotaro, its operators, and its users
- With service providers strictly necessary for operating the platform (who process data on our behalf)
- When content is intentionally made public by a user (for example, a public Event shown on the calendar)

## Content Moderation and Lawful Removal

Spotaro and its operators reserve the right to review, restrict, remove, or permanently delete any user content, records, or accounts — including Events, Spaces, Spots, requests, images, profile data, and related records — where we reasonably believe such action is necessary to:

- Comply with applicable laws and regulations
- Respond to lawful requests, orders, or demands from courts, law-enforcement agencies, or other competent governmental authorities
- Address content or activity that violates the law, these policies, or the rights of others
- Protect the safety, security, or integrity of the service and its users

Where legally permitted and practicable, we may notify affected users of such actions; however, we may be unable to do so when prohibited by law or by the terms of a governmental request.

## Data Retention

We retain information for as long as necessary to provide the service, comply with legal obligations, resolve disputes, and enforce agreements. Content removed for legal or policy reasons may be retained where required for compliance, security, or dispute resolution.

## User Rights

Subject to applicable law, users may request:

- Access to their data
- Correction of inaccurate data
- Deletion of their data

Requests may be submitted using the contact information provided below. We may need to verify your identity before fulfilling a request, and certain data may be retained where required by law.

## Children's Privacy

Spotaro is not intended for children under the age required by applicable law. We do not knowingly collect personal information from children.

## Changes to this Policy

We may update this Privacy Policy from time to time. Updated versions will be published on the Spotaro website with a revised “Last updated” date.

## Contact

For questions regarding this Privacy Policy, please contact:

help@spotaro.app