Spoto Privacy Policy
This policy explains what Spoto collects, why we collect it, how long we keep it, and the GDPR rights available to people who use the service in the EU.
Controller
Spoto operates from Paris, France and handles personal data under EU privacy standards.
No Sale
We do not sell personal data. We only use service providers needed to run analytics, hosting, and product operations.
Effective Date
April 11, 2026
What data we collect
Search and destination requests
Search queries and address lookups you enter in Spoto, including destination labels used to rank nearby parking.
Location data
Your device location only if you choose to grant geolocation access, so we can show parking near you.
Feedback
Ratings, optional comments, language preference, and basic technical context such as timestamp and browser information when you submit feedback.
Waitlist signups
Your email address and any selected city preference when you join the Spoto waitlist.
Spot reports
When user-submitted parking reports are enabled, we collect the spot identifier, availability status, timestamp, language, and technical anti-abuse metadata related to that report.
Analytics and consent records
Consent choices and analytics events that help us understand site performance and product usage when you opt in.
How we use data
Operate and improve Spoto
We use search inputs, destination context, optional location, feedback, and waitlist information to run the service, improve results, prioritize launches, and troubleshoot issues.
Analytics and product measurement
If you allow analytics, we measure visits, core actions, and usage patterns in aggregate so we can understand product adoption and performance.
Crowdsourced availability intelligence
Spot reports and related usage signals may be aggregated to build and improve Spoto's future crowdsourced parking availability model.
GDPR legal bases
We generally process data to provide the service you request, pursue legitimate interests in operating and improving Spoto, and rely on consent where analytics or optional geolocation access require it.
Cookies, local storage, and analytics
Spoto does not use advertising cookies. We store your consent preference locally and may use analytics cookies or similar measurement technologies only when you opt in to analytics.
Analytics are used only to understand product performance and user behavior at a high level. If analytics are disabled, Spoto still works with essential functionality.
Retention periods
- Search queries, destination lookups, and analytics events: up to 12 months.
- Geolocation data: used in-session to provide nearby parking and not kept as an account profile; any short-lived security or server logs are typically retained for up to 30 days.
- Feedback submissions: up to 24 months so we can review product quality trends and respond to recurring issues.
- Waitlist emails: until launch communications for the selected city are complete, or up to 24 months after the latest interaction, whichever comes first.
- Spot reports and associated anti-abuse records: up to 24 months in identifiable form, after which we may retain only aggregated or anonymized availability data.
- Consent records: up to 12 months to document analytics choices.
Sharing and no sale of personal data
We may share personal data with infrastructure, hosting, analytics, database, and email service providers that help us run Spoto on our behalf. They may process data only under our instructions and applicable contractual safeguards.
We do not sell personal data, and we do not use personal data for third-party advertising.
Your GDPR rights
If GDPR applies to you, you can exercise these rights by emailing spoto@nanocorp.app:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data when retention is no longer justified.
- Receive a portable copy of data you provided to us, where applicable.
- Object to processing based on our legitimate interests.
Contact and jurisdiction
Spoto is based in Paris, France. Questions about this policy, GDPR requests, or complaints about how we handle personal data should be sent to spoto@nanocorp.app.
EU privacy standards and French law apply to this policy unless mandatory local law requires otherwise.