Privacy Policy

ProSpot Technologies, operating the ProSpot platform at prospot-tt.com ("we", "us", or "our"), respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital service directory and social marketplace platform in Trinidad and Tobago. By accessing or using our services, you agree to this Privacy Policy.

1. Information We Collect

A. Information You Provide to Us

Account details: name, email address, phone number, password, and profile details.
Business/professional data: business names, categories, service descriptions, location data, pricing, portfolio images, and, for verification, business registration documents, certifications, or identity documents where applicable.
User Content: posts, photos, videos, captions, reviews and ratings, comments, and other content you submit.
Messages: the content of direct messages you send to or receive from other users through the Platform.
Support communications: information you provide when you contact us, report a problem, or interact with other users.

B. Information Collected Automatically

Device and usage data: IP address, device identifier and type, browser and operating system, connection information, and standard web-log data.
Activity data: pages viewed, searches, listings and posts interacted with, likes, follows, bookmarks, shares, and traffic to and from the Platform.
Location data: approximate location derived from your IP or device, used for location-based discovery and to route you to the appropriate country domain. You can control device location permissions in your device settings.
Cookies and similar technologies: we use cookies, web beacons, and similar technologies - see Section 7.

2. How Your Reviews, Messages, Media and Verification Documents Are Handled

Because ProSpot is a social platform, some of your information is public and some is private:

Public by design: business profiles, posts, photos/videos, reviews and ratings, and public engagement (follows, likes) are visible to other users and may be indexed by search engines. Public content may remain visible, cached, or re-shared even after you delete it or your account.
Private: direct messages are visible to the participants and to our authorized safety, security, and legal staff where necessary.
Verification documents: documents you upload to claim or verify a business are used only to perform verification, are accessible only to authorized personnel, and are retained no longer than necessary for that purpose and our legal obligations, after which they are securely deleted.
Engagement data is used to compute authority rankings (see Section 6).

3. How We Use Your Information

We use the information to:

Provide, operate, maintain, and improve the Platform and its features.
Enable discovery, connections, posts, reviews, and messaging between users and Service Providers.
Verify the identity and legitimacy of Service Providers.
Process registrations, support requests, payments for paid features, and administrative updates.
Compute authority rankings and personalize discovery (see Section 6).
Monitor usage, detect and prevent fraud, abuse, and security incidents, and enforce our Terms.
Send you service and, where you have not opted out, marketing communications.
Comply with laws and legal obligations in Trinidad and Tobago.

We process personal information on the basis of your consent, the performance of our contract with you, our legitimate interests in operating and securing the Platform, and legal obligations.

We do not sell your personal data. We may share information as follows:

Public directory listings: business details, contact information, listings, posts, and reviews are visible to the public to facilitate discovery.
Service providers / processors: we share information with trusted third parties who host, store, deliver, operate, secure, and analyze the Platform on our behalf, bound by contracts limiting their use of the data to providing those services. These currently include, for example: cloud media/document storage and content delivery (Cloudflare R2 / CDN); database and backend hosting (Supabase); analytics; and email/notification and payment providers. (This list must be confirmed against the providers actually used.)
International transfers: some of these providers store or process data outside Trinidad and Tobago. Where personal information is transferred abroad, we take steps intended to ensure it is protected by safeguards comparable to those required under Trinidad and Tobago law, and we disclose this transfer to you here.
Legal and regulatory compliance: we may disclose information where required by law or in response to valid requests by public authorities in Trinidad and Tobago (e.g., law enforcement or the Office of the Information Commissioner).
Business transfers: we may transfer data in connection with a merger, restructuring, or sale of assets.

5. Data Security and Breach Handling

We implement technical, physical, and administrative measures - such as encryption in transit, access controls, and password hashing - to safeguard your information appropriate to its sensitivity. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a security incident affecting your personal data, we will investigate and, where appropriate or required, notify affected users and relevant authorities.

6. Automated Processing and Authority Rankings

We use automated processing of engagement data - including reviews, ratings, likes, follows, bookmarks, shares, and comment activity - to calculate location- and category-based authority rankings (for example, "#1 Hairdresser in Port of Spain") and to order discovery results. These rankings affect how prominently a business appears. They are computed from the signals described above and are not an endorsement by ProSpot. Businesses may contact us at prospot.tt@gmail.com with questions about how rankings are derived.

7. Cookies and Tracking

We use cookies and similar technologies for essential functionality (e.g., keeping you signed in), preferences, and analytics/performance measurement. Where required, we will ask for your consent to non-essential (analytics/marketing) cookies before setting them, and you can withdraw consent or manage your preferences at any time through our cookie controls or your browser settings.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes in this Policy - for example, account data for the life of your account, verification documents only for as long as needed to verify and meet record-keeping obligations, and logs for a limited period - unless a longer period is required or permitted by law.

9. Your Rights and Choices

Consistent with the general privacy principles of Trinidad and Tobago's Data Protection Act, you may:

Access: request confirmation of, and access to, the personal information we hold about you, and how it is used and disclosed.
Correction: review, update, or correct your account details at any time by logging in, or request correction of other information.
Challenge: challenge the accuracy or completeness of your information, or our compliance with these principles.
Deletion: request deletion of your account and personal data, subject to exceptions where retention is legally required or necessary to resolve disputes and enforce our agreements. Note that public content may persist as described in Section 2.
Marketing opt-out: opt out of marketing communications using the unsubscribe link in our emails or your notification settings.

To exercise these rights, contact prospot.tt@gmail.com. We aim to respond within thirty (30) days. You may also contact the Office of the Information Commissioner of Trinidad and Tobago.

10. Children's Privacy

The Platform is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn we have collected such information, we will delete it. If you believe a minor has provided us data, contact prospot.tt@gmail.com.

11. Compliance and Governing Law

ProSpot Technologies operates from Trinidad and Tobago. This Privacy Policy is governed by the laws of Trinidad and Tobago, including the general privacy principles of the Data Protection Act as applicable. (Note: as of this drafting, the Act is only partially proclaimed and the Office of the Information Commissioner's enforcement powers are being established; we nonetheless aim to align with its principles.)

12. Changes to This Privacy Policy

We may update this Privacy Policy at any time. We will notify you of substantial changes by updating the "Last Updated" date or by notice through the Platform. Please review this Policy periodically.

13. Contact Us

For questions, concerns, or requests regarding this Privacy Policy or our data practices: ProSpot Technologies · Trinidad and Tobago · prospot.tt@gmail.com