Privacy policy

Overview

Spaces is committed to protecting personal data and handling it in a transparent, lawful, and secure manner. This privacy policy describes what information we collect, why we process it, how long we keep it, and what rights you have regarding your personal data.

We process personal data only for legitimate business purposes, to provide and improve our services, to meet contractual obligations, and to comply with applicable laws and regulatory requirements.

Personal data we collect

Account information such as name, email address, business name, phone number, and contact details used to create and manage a user account.
Billing and transaction data, including payment references, invoice details, order history, and related commercial records.
Operational and usage data such as login activity, account preferences, support requests, and interactions with the platform.
Device and browser information, including IP address, device identifiers, browser type, and approximate location as needed for security and service delivery.
User-generated content, documents, messages, and files that you upload or share through the platform.

How we use personal data

To provide and maintain the service, including account access, product features, transaction processing, and customer support.
To verify identity, prevent fraud, secure accounts, and protect the platform against abuse or misuse.
To communicate with users about account updates, service notifications, security alerts, and support requests.
To improve service reliability, maintain quality, and develop new features based on aggregated and de-identified usage information.
To comply with legal obligations, enforce our terms, and respond to lawful requests from regulators or authorities.

Legal basis and consent

We process personal data based on one or more valid legal grounds, including the performance of a contract, compliance with legal obligations, legitimate business interests, and, where required, your consent. Where consent is needed, we will ask for it clearly and allow you to withdraw it at any time without affecting the lawfulness of processing carried out before the withdrawal.

Sharing and disclosure

We do not sell personal data. We may share personal data with trusted service providers and partners that help us operate the platform, process payments, provide support, or meet legal obligations.

Cloud hosting and infrastructure providers that help operate the service and store data securely.
Payment processors and billing services used to process subscriptions, invoices, and other transactions.
Customer support and communications tools used to respond to user inquiries and send service notifications.
Legal, compliance, and security providers when required to meet contractual, regulatory, or fraud-prevention obligations.

We may also disclose personal data to public authorities or other parties when required by law, necessary to protect rights, safety, or property, or as otherwise permitted under applicable data protection law.

Data retention

We retain personal data only for as long as necessary to provide the service, maintain business records, satisfy legal and regulatory requirements, resolve disputes, and enforce our agreements. When personal data is no longer needed, we delete or anonymize it securely in accordance with our retention policies.

Security measures

We implement reasonable administrative, technical, and organizational safeguards to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include access controls, encryption in transit, secure infrastructure, and operational procedures designed to reduce risk. However, no system can be guaranteed to be completely secure, and users should keep credentials confidential and use strong access controls.

International transfers

Personal data may be transferred to and processed in countries outside your own, including where our service providers or infrastructure are located. We take reasonable steps to ensure those transfers are protected by appropriate safeguards consistent with applicable privacy and data protection laws.

Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict, object to, or receive a copy of the personal data we hold about you. You may also have the right to withdraw your consent where consent is the legal basis for processing.

To exercise these rights, or if you have questions about this policy, please contact us through the support or privacy contact channel available in the application or on the website. We will respond to valid requests in accordance with applicable law and may ask you to verify your identity before fulfilling certain requests.

Cookies and similar technologies

We may use cookies, session data, and similar technologies to keep the service secure, remember user preferences, measure usage, and improve website performance. You can usually manage cookies through your browser settings, but disabling some cookies may affect the functionality of the service.

Children's data

The service is not directed to children under the age required for parental consent in the relevant jurisdiction, and we do not knowingly collect personal data from children without appropriate consent or legal basis. If we become aware that a child's personal data has been submitted without valid consent, we will take steps to delete it promptly.

Changes to this policy

We may update this privacy policy from time to time to reflect changes in the service, legal requirements, or operational practices. The most recent version will be posted on this page, and significant changes will be communicated through the application or other appropriate channels when required.