Privacy policy
Last updated 16 October 2026
Spotqu is a booking platform that organizations use to take appointments on their own websites. This page says what we collect, why, who handles it and how long we keep it.
Who is responsible
Spotqu is run by Arsen Sekularac. Contact: [email protected].
The organization you book with decides how it uses your booking, for example to contact you about it. Spotqu stores and processes that booking on the organization's behalf.
What we collect
| What | When | Why |
|---|---|---|
| First and last name, email address | When you create an account | To identify you and send you booking emails |
| Phone number | When you create an account | So the organization can reach you about a booking |
| Your Google account ID, name, email and profile picture | If you sign in with Google | To sign you in; the picture is shown to the organization |
| Your appointments: organization, service, staff member, time, changes and cancellations | When you book, move or cancel | To provide the booking and remind you of it |
| Name, phone or email given for a walk-in | When an organization books for you | To record and confirm that booking, and to show it in your account once the same email address is confirmed as yours |
| IP address, browser type, sign-in session | While you use the site | To keep you signed in and to protect accounts from abuse |
| What went wrong: the error, the address of the page, the steps before it, your browser type, language, time zone and IP address | When a page in your browser or our server fails | To find and fix the fault |
We use only the cookies needed to keep you signed in, to protect forms and to remember the language you chose. There is no advertising or tracking, and we do not sell your data.
The legal basis is the performance of the booking you ask for and, for security logs and error reports, our legitimate interest in keeping the service safe and working.
Who handles it for us
Your data is stored in the EU. We use service providers for hosting, email delivery, error monitoring and Google sign-in; some of them are in the United States, and those transfers rely on standard contractual clauses.
How long we keep it
- Your account, until you ask us to delete it.
- Appointments, for as long as the organization needs its booking history.
- Encrypted database backups, 30 days, then deleted automatically.
- Sign-in sessions, 30 days after your last visit.
Your rights
You can ask to see, correct, export or delete your data, or object to how it is used. Email [email protected] and we will answer within 30 days. You can also complain to the data protection authority where you live; in Serbia that is the Commissioner for Information of Public Importance and Personal Data Protection.
Google sign-in
Spotqu's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We ask Google only for your basic profile and email address.
Changes
If this policy changes, the date at the top changes with it.