Last Updated: July 18, 2026
Your privacy matters to us. This Privacy Policy explains how QSpot Technologies Inc. ("QSpot," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use the QSpot app or website (the "Service"). QSpot is a Canadian federal corporation with its head office at 9155 Emerald Drive, Whistler, British Columbia V8E 0G5.
We collect the following categories of personal information:
(a) Account Information — your name, email address, and profile photo from your Google or Apple account;
(b) Phone Number — if you use two-factor authentication, your mobile number, used to send a one-time verification code by SMS through our messaging provider (Twilio);
(c) Location Data — with your permission, your device's precise location, used to show you nearby Spots and, during an active transaction, to share your real-time location with the other party so you can meet in person;
(d) Identity & Biometric Verification Data — where identity verification is enabled, images of your government-issued identity document together with a self-portrait ("selfie") photo and the facial-geometry data derived from it, which our verification provider (Stripe Identity) uses to confirm that you match your document. This is sensitive biometric information, collected only with your consent for identity verification;
(e) Transaction Data — your purchase and sale history, amounts, and payment and payout details (card payments and payouts are processed by Stripe; we do not store your full card number);
(f) Communications — messages you exchange with the other party through the in-app chat;
(g) Device & Usage Information — device type, operating-system version, IP address, push-notification tokens, and app-usage analytics;
(h) User Content — photos, listing descriptions, and the ratings and reviews you give and receive.
We use your personal information to:
(a) Operate, maintain, and improve the Service;
(b) Create and secure your account, including SMS two-factor authentication;
(c) Facilitate transactions, process payments, and pay out Sellers;
(d) Share your real-time location with the other party during an active transaction so you can meet to complete the exchange — this sharing happens only while a transaction is active and stops when it ends;
(e) Verify your identity and prevent fraud and abuse, including through identity/biometric verification where enabled;
(f) Send transactional and service messages (confirmations, receipts, security and safety alerts);
(g) Comply with legal, tax, and regulatory obligations;
(h) Send promotional messages where you have consented or as otherwise permitted by law — you can opt out at any time.
Some information we handle is sensitive, including your precise geolocation and, where identity verification is enabled, your biometric (facial) verification data. We collect and use this information only for the specific purposes described in this Policy — precise location to enable meet-ups and show nearby Spots, and biometric data to verify your identity and prevent fraud. We do not use this information to build advertising profiles, and we do not sell it. Before any biometric identity verification, we will obtain your consent and tell you what is collected and why. Biometric verification is performed by Stripe Identity; you can review how Stripe handles this data in its privacy policy. Where required by law, we will complete applicable regulatory filings for biometric verification before enabling it.
We do not sell your personal information. We share it only as follows:
(a) With the other party to a transaction — once a transaction is confirmed, the other party can see your display name, profile photo, short bio, average rating, number of reviews, how long you have been a member, and whether you are a Premium member; while a transaction is active, they can also see your real-time location as described above;
(b) Payment & identity providers — Stripe (payments, payouts, and identity verification);
(c) Messaging provider — Twilio (SMS verification codes);
(d) Maps & location providers — our map and address-lookup providers (such as MapTiler and Geoapify) receive location and search queries to provide maps and suggestions;
(e) Push-notification, hosting, and analytics providers — Google/Firebase and Apple (push notifications and analytics) and our cloud hosting provider (Supabase), which stores your data on our behalf;
(f) Legal authorities — where required by law, legal process, or to protect the rights, safety, or property of QSpot or others;
(g) Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.
Our service providers are bound by contract to protect your information and to use it only to provide services to us.
We keep each category of personal information only as long as needed for the purposes described in this Policy:
• Account and profile data — while your account is active;
• Transaction, payment, and tax records — for the period required by tax and financial record-keeping laws (generally up to seven (7) years);
• Identity-verification and biometric data — only as long as needed to complete verification and meet legal obligations, after which it is deleted or retained by our verification provider under its own retention schedule;
• Location data — only for the duration of the relevant transaction and a short period afterward;
• Chat messages — while your account is active or as needed to resolve disputes.
When you delete your account, we delete or de-identify your personal information, except where we must retain specific records for legal, tax, regulatory, or fraud-prevention purposes.
Depending on where you live, you have some or all of the following rights:
(a) Access — request a copy of the personal information we hold about you;
(b) Correction — ask us to correct inaccurate or incomplete information;
(c) Deletion — ask us to delete your account and personal information, subject to legal retention requirements;
(d) Portability — receive your information in a structured, commonly used, machine-readable format;
(e) Withdraw consent — withdraw consent to non-essential processing (such as marketing) at any time;
(f) California residents (CCPA/CPRA) — rights to know, delete, correct, and to opt out of the "sale" or "sharing" of personal information and to limit the use of sensitive personal information. We do not sell or share your personal information for cross-context behavioural advertising;
(g) Canadian residents (PIPEDA, BC PIPA, and Quebec Law 25) — rights of access and correction, data portability, the right to withdraw consent, and, in Quebec, the right to be informed about automated decision-making that significantly affects you.
To exercise any of these rights, email admin@qspotmarketplace.com or, where available, use the account controls in the app. We will verify your request and respond within the time required by applicable law. You may also complain to your privacy regulator (for example, the Office of the Privacy Commissioner of Canada, the BC Office of the Information and Privacy Commissioner, or the Commission d'accès à l'information du Québec).
On our website we use cookies and similar technologies to keep you signed in, remember your preferences, and understand usage. In the app, we use device identifiers and local storage for the same purposes. You can manage cookies through your browser settings; disabling some may affect functionality. We do not use these technologies for cross-app advertising.
We use industry-standard safeguards to protect your information, including encryption of data in transit (TLS) and at rest, access controls, and regular security reviews. No system is perfectly secure, so we cannot guarantee absolute security. If a security incident affects your personal information and creates a risk of serious harm, we will notify you and the appropriate regulators as required by applicable law. Please contact us immediately at admin@qspotmarketplace.com if you believe your account has been compromised.
The Service may contain links to third-party websites or integrate with third-party services (e.g., mapping providers). This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through QSpot.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe that a minor has provided us with personal information, please contact us at admin@qspotmarketplace.com and we will promptly delete such information.
QSpot is based in Canada. Some of our service providers (including Stripe, Twilio, Google/Firebase, and our hosting provider) store or process information on servers located in the United States. This means your personal information may be transferred to, stored in, and processed in the United States and other countries whose data-protection laws may differ from those in your province or country. Where required — including for transfers of information about Quebec residents outside Quebec — we assess these transfers and put appropriate protections in place. By using the Service, you acknowledge these transfers.
If you are located in the European Economic Area, the United Kingdom, or Switzerland, the EU/UK General Data Protection Regulation ("GDPR") applies to our processing of your personal information, and this section applies in addition to the rest of this Policy.
(a) Controller — QSpot Technologies Inc. (address above) is the controller of your personal information. Canada is recognised by the European Commission as providing an adequate level of data protection for information handled under Canada's federal private-sector privacy law;
(b) Legal bases — we process your information on the following bases: (i) performance of our contract with you (Art. 6(1)(b)) — your account, listings, transactions and payouts, in-app chat, transactional messages, and sharing your real-time location with the other party during an active transaction; (ii) legal obligation (Art. 6(1)(c)) — tax and financial record-keeping, identity verification where required, and responding to lawful requests; (iii) legitimate interests (Art. 6(1)(f)) — preventing fraud and abuse, securing the Service, and enforcing user blocks, always balanced against your rights and freedoms; and (iv) consent (Art. 6(1)(a)) — analytics and crash reporting, marketing emails, and any other optional processing. You can withdraw consent at any time in Settings without affecting the lawfulness of processing before withdrawal;
(c) Your GDPR rights — in addition to the rights in Section 6, you may request restriction of processing and you may object to processing based on legitimate interests. You may object to direct marketing at any time and we will stop without exception. You can exercise your rights in the app (Settings → Privacy & Data Rights) or by emailing admin@qspotmarketplace.com; we will respond within one month;
(d) Automated decision-making — we do not make decisions based solely on automated processing that produce legal or similarly significant effects concerning you;
(e) International transfers — your information is stored in Canada (which benefits from an EU adequacy decision) and processed by service providers in the United States that participate in the EU-U.S. Data Privacy Framework and/or are bound by the European Commission's Standard Contractual Clauses (including Stripe, Twilio, and our email and hosting providers);
(f) EU representative — as a controller established outside the EU, we will appoint a representative in the European Union under Article 27 GDPR before offering the Service in the EEA. The representative's name and contact details will be published in this section;
(g) Complaints — you have the right to lodge a complaint with your local data-protection supervisory authority.
QSpot is accountable for the personal information under its control. We have designated a Privacy Officer responsible for our compliance with this Policy and applicable privacy laws. You can reach our Privacy Officer at:
Andrew Bellew, Privacy Officer
QSpot Technologies Inc.
9155 Emerald Drive, Whistler, British Columbia V8E 0G5, Canada
Email: admin@qspotmarketplace.com
We may update this Privacy Policy periodically to reflect changes in our practices or applicable law. We will notify you of significant changes by email or in-app notice. Your continued use of the Service after such changes take effect constitutes your acceptance of the updated Privacy Policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Andrew Bellew, Privacy Officer
QSpot Technologies Inc.
9155 Emerald Drive, Whistler, British Columbia V8E 0G5, Canada
Email: admin@qspotmarketplace.com
Website: https://www.qspotmarketplace.com
California residents may contact us at the same address regarding CCPA/CPRA requests.