Legal
This Privacy Policy explains how Spotlio Control processes information for authorized staff using Spotlio services.
Open any section below to review the full policy.
What it isSpotlio Control is a business and operations application provided by Spotlio for authorized client staff.What it supportsInternal workflows such as ticket scanning, guest lookup, order lookup, redemption actions, and operational reporting.What this policy coversWhat information may be processed through the app, how it is used, and how privacy-related requests can be made.
Intended usersAuthorized business users such as resort, attraction, venue, or operations staff using Spotlio services on behalf of their organization.Not intended forA general consumer-facing social or advertising use case.
Account and profile informationEmail address, user profile details, and organization, tenant, or site-related access identifiers.Guest and customer informationFull name, email address, phone number, and external reference identifiers.Order and operational informationOrder records, product and purchase details, redemption status, scan and validation results, guest-to-order relationship data, and operational dashboard information.Technical and service informationAuthentication session data, app configuration data, and service interaction data needed to operate the app securely and reliably.
Access and authenticationAuthenticate authorized users and manage access to protected workflows.Operational workflowsLook up guests, customers, and orders, validate tickets, and process redemption actions.Reporting and reliabilityDisplay dashboard information and maintain service security, reliability, and access control.
Why camera access is requestedTo let authorized users scan QR codes and barcodes for validation and redemption workflows.How it is usedOnly for in-app scanning functionality, not for advertising or unrelated profiling.
No sale of personal dataSpotlio does not sell personal data through this app.Who may receive dataSpotlio as service provider, client organizations using Spotlio services, and service providers or infrastructure partners supporting authentication, hosting, databases, APIs, and app delivery systems.Why sharing may occurOnly as reasonably necessary to provide the service, support authorized workflows, maintain security, and comply with applicable obligations.
Product purposeSpotlio Control is not intended as an advertising or cross-app tracking product.Current implementationIt is not designed to perform cross-app behavioral tracking for third-party advertising purposes.
How retention is determinedRetention may depend on client configuration, operational needs, contractual arrangements, and applicable legal requirements.General approachOperational records may be retained only for as long as reasonably necessary for service delivery, support, security, compliance, and legitimate business purposes.
Protection measuresSpotlio uses reasonable technical and organizational measures to protect data handled through the app.Service safeguardsThe app communicates with HTTPS-based backend services and requires authenticated access for protected workflows.Important limitationNo method of transmission or storage can be guaranteed to be completely secure, but we work to protect information appropriately for the nature of the service.
Organization controlIn many cases, the organization using Spotlio services determines what operational and customer data is made available to authorized staff through the app.End-user contextIf you access the app through your employer or organization, some data-handling decisions may also be governed by that organization’s policies and instructions.
Emailsupport@spotlio.comWebsitehttps://www.spotlio.com/Additional noteIf you use the app through an employer, resort, venue, or other client organization, you may also need to contact that organization directly for certain data requests.
ChildrenSpotlio Control is a business application and is not directed to children.
Policy updatesSpotlio may update this Privacy Policy from time to time to reflect operational, legal, or product changes.Latest versionThe current version should be made available through the designated privacy policy URL or another official Spotlio channel.