Your data should earn its keep.
Spotter is designed to collect only what helps make community opinions accountable, business claims verifiable and payments secure.
What Spotter collects
Account and contact information includes your email address, authentication identifiers and any business contact details you submit. A business claim also records your stated role, official public reference, verification method and a short internal staff note. If authority is revoked, Spotter records the reason category, date and a short internal note. Community information includes ratings, written takes, vibe tags, equipment observations and moderation results.
Spotter’s normal business-verification workflow does not request or store identity-document copies, document numbers, passwords, access codes or private account credentials.
A post-publication content report records the reporter’s account identifier, the reported take, a reason, details and the staff outcome. Reporter identity and report details are private and are not displayed with the take.
Technical information may include security logs, approximate location when you choose to use nearby search, browser information and payment references. Spotter does not store full card numbers.
Why it is used
Information is used to operate accounts, moderate reviews, calculate the community index, verify business claims, provide labelled promotion, prevent manipulation, process subscriptions and respond to access, correction or complaint requests.
Private content reports are used to assess published takes against the Community Standards, prevent duplicate or abusive reporting and document staff decisions.
Review text may be sent to an AI service for safety checks and pattern summarisation. Paid placement never changes the independent community score.
Storage and disclosure
Spotter expects to use Supabase for accounts and database storage, OpenAI for moderated AI summaries, Stripe for payments and a production map provider. Those providers may process information outside Australia. Hosting regions, retention periods and the operator’s processor list must be confirmed before live collection.
Your choices and rights
You may request access to or correction of personal information, ask for account deletion, withdraw your own contribution through the member account, or raise a privacy complaint. Withdrawal removes a take from publication and the community index while retaining a minimal moderation record. The final policy must publish the operator’s stable privacy contact and complaint-handling timeframe.
The production operator, stable privacy contact and complaint-handling timeframe have not yet been published.