Privacy Policy

Last updated: March 2026

This Privacy Policy describes how Spotbeam collects, uses, shares, and protects your personal information. By using our services, you consent to the data practices described in this policy.

1. Information We Collect

Account information: When you create an account or claim a business, we collect your name, email address, phone number, and business details you provide.

Business listing data: We aggregate publicly available business information from various sources including public records, government databases, and publicly accessible websites to create directory listings.

Usage data: We automatically collect information about how you interact with Spotbeam, including pages visited, searches performed, features used, timestamps, and referring URLs.

Device and technical data: We collect browser type, operating system, IP address, device identifiers, and general location data (city/region level, not precise GPS) for analytics, security, and service improvement.

Communications: If you contact us directly, we may collect your name, email, and the content of your message.

2. Legal Basis for Processing (EU/UK Users)

If you are located in the EU or UK, we process your personal data on the following legal bases:

Contractual necessity: Processing needed to provide our services (e.g., maintaining your account, processing payments).

Legitimate interests: Processing for purposes such as fraud prevention, service improvement, and analytics, where our interests do not override your privacy rights.

Consent: Where you have given explicit consent (e.g., marketing communications, analytics cookies).

Legal obligation: Where processing is required to comply with applicable law.

3. How We Use Your Information

To operate, maintain, and improve our services, including AI-powered search matching and business discovery.

To process transactions and manage your paid subscriptions.

To communicate with you about your account, listing, service updates, and respond to your inquiries.

To detect and prevent fraud, abuse, and security threats.

To analyze usage patterns and improve the user experience through aggregated, anonymized analytics.

To send you marketing communications — only with your explicit consent, and you can opt out at any time.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4. Information Sharing

Public business information: Business listing data (name, address, hours, category, etc.) is publicly visible by design. This is the core function of our directory service.

Service providers: We share data with trusted third-party providers who help us operate our services (e.g., hosting, payment processing, email delivery). These providers are contractually bound to protect your data and use it only for the services they provide to us.

Analytics: We may share anonymized, aggregated data with analytics providers. This data cannot be used to identify individual users.

Legal requirements: We may disclose your information if required by law, court order, or governmental regulation, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Business transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

5. Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy. Essential cookies are required for the site to function. Analytics cookies are used only with your consent.

We do not use advertising cookies or allow third-party advertising networks to track you on Spotbeam.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit (TLS/SSL) and at rest, regular security assessments, and access controls.

Despite our efforts, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

If we become aware of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law.

7. Your Rights

Regardless of your location, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; object to certain processing of your data.

If you are in the EU/UK (GDPR): You additionally have the right to data portability, the right to restrict processing, and the right to withdraw consent at any time without affecting the lawfulness of prior processing.

If you are in California (CCPA/CPRA): You have the right to know what personal information we collect and how it's used, the right to request deletion, the right to opt out of data sales (we do not sell your data), and the right to non-discrimination for exercising your rights.

To exercise any of these rights, contact us at privacy@spotbeam.ai. We will respond to verifiable requests within 30 days.

8. Data Retention

We retain your account data for as long as your account is active or as needed to provide you services.

If you delete your account, we will delete your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, resolving disputes).

Business listing data aggregated from public sources may remain in our directory after account deletion. Business owners can request removal of their listing by contacting us.

Analytics and log data is anonymized and may be retained for up to 24 months for service improvement purposes.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.

Where we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses approved by relevant authorities.

10. Children's Privacy

Spotbeam is not directed at children under 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly. If you believe we have inadvertently collected data from a child, please contact us.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you by email.

Your continued use of Spotbeam after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, contact our privacy team at privacy@spotbeam.ai.

If you are in the EU and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

Questions about this policy? Contact us at legal@spotbeam.ai