Privacy Policy

Last updated: March 17, 2026

PeopleSpot ("we", "us", "our") operates the people.spot platform, including the website, dashboard, and messaging services. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information: When you sign up, we collect your business name, email address, and password (stored securely using bcrypt hashing).

Client Data: As a business using our platform, you may store your clients' contact information including names, phone numbers, email addresses, appointment details, and membership information.

Messages: We process messages sent and received through WhatsApp, SMS, and email channels to provide our services. Message content is stored to maintain conversation history and enable AI-powered responses.

Usage Data: We collect information about how you use our platform, including message counts, feature usage, and performance metrics.

2. How We Use Your Information

To provide and maintain our platform services
To send appointment reminders and notifications on your behalf
To power AI-assisted responses using your knowledge base content
To track usage for billing purposes
To improve our services and fix issues
To communicate with you about your account

3. Data Isolation

Each business account's data is strictly isolated. Your clients' information, conversations, appointments, and memberships are only accessible to your account. We enforce data separation at the database level to prevent any cross-account data access.

4. Third-Party Services

We use the following third-party services to operate our platform:

Meta (WhatsApp Business API): To send and receive WhatsApp messages
Twilio: To send and receive SMS messages
OpenRouter / Anthropic: To power AI-assisted responses (message content is sent to generate replies)
Fly.io: To host our backend infrastructure
Vercel: To host our web application
PostgreSQL (Fly.io): To store application data

Each third-party service has its own privacy policy governing their handling of data.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we are required to retain it by law.

Message content and conversation history are retained to provide ongoing service. You may request deletion of specific data at any time.

6. Data Security

We implement appropriate security measures to protect your data:

Passwords are hashed using bcrypt
All data is transmitted over HTTPS/TLS
Database access is restricted and encrypted in transit
Authentication tokens expire after 24 hours
Row-level security policies enforce data isolation between accounts

7. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Delete your account and associated data
Export your data in a portable format
Opt out of non-essential communications

8. Client Consent

As a business using PeopleSpot, you are responsible for obtaining appropriate consent from your clients before storing their data and sending them messages through our platform. This includes compliance with applicable messaging regulations (TCPA, GDPR, etc.).

9. Cookies

We use minimal cookies for authentication (session tokens stored in localStorage). We do not use tracking cookies or third-party analytics.

10. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the platform.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:

Email: privacy@people.spot