SpotLift

Privacy Policy

Effective date: May 12, 2026

Your privacy matters to us. This policy is written in plain language so you can understand exactly what data SpotLift collects and why — without needing a lawyer to explain it.

1. Who We Are

SpotLift (spotlift.in) is an AI-powered Google Business Profile optimisation tool for small businesses in India — restaurants, salons, clinics, and coaching centres. We help businesses improve their visibility on Google Maps through AI-generated content.

SpotLift is operated as a sole proprietorship by Sarawanan, based in Bangalore, Karnataka, India.

Email: contact@spotlift.in
Phone: +91 85490 71560
Address: Bangalore, Karnataka, India

2. What Data We Collect

2.1 Free audit tool (spotlift.in/audit)

Business name and city
Email address (to send audit results)
Google Business Profile data via Google Places API (category, address, phone, hours, reviews). We do not access your Google account credentials.
Google Place ID

2.2 Account signup

Email and password (password encrypted by Supabase — we never see it)
Business name, type, area, city
Preferred language (Kannada, Tamil, Hindi, English)
Google Place ID

2.3 Tool usage

We store content you generate (posts, replies, descriptions) for your history. We do not store content you discard.

2.4 Payments

Payments are processed by Razorpay. We never see your card number, UPI ID, or bank details. We store only your plan name, payment status, and renewal dates.

2.5 Usage limits

We track how many times you use each tool per month to enforce your plan limits. This is not shared with third parties.

3. How We Use Your Data

To provide and improve SpotLift
To pre-fill your business details in every tool
To send your free audit report by email
To manage your subscription, billing, and usage limits
To send occasional product updates (unsubscribe anytime)
To generate AI content via Anthropic Claude API — your business context is sent to Claude but is not used to train AI models

We do not sell your data. We do not use your data for advertising. SpotLift is ad-free.

4. Who We Share Data With

Supabase

Database hosted in Mumbai (ap-south-1). Your data stays in India. Row Level Security ensures no user can see another user's data.

Anthropic

Your business name, type, area, and tool inputs are sent to Claude API to generate content. Not used for training.

Google Places API

Used when you search for your business during onboarding or audit.

Razorpay

Payment processing. SpotLift receives only a payment confirmation.

Vercel

Website hosting. Standard server logs (IP, browser, page) collected by Vercel.

5. Data Storage and Security

All data stored in India (Supabase Mumbai)
All connections use HTTPS encryption
Passwords never stored in plain text
Row Level Security — each business sees only their own data
We do not store your Google account credentials

6. Data Retention

We keep your data while your account is active. After cancellation, data is retained for 90 days then permanently deleted on request. Audit leads are retained for 12 months.

7. Your Rights (DPDP Act 2023)

Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Withdraw consent

Email contact@spotlift.in with subject "Privacy Request". We respond within 30 days.

8. Cookies

We use only essential session cookies to keep you logged in. No advertising or third-party tracking cookies.

9. Children's Privacy

SpotLift is for adults operating businesses. We do not knowingly collect data from anyone under 18. Contact us if you believe a minor has an account.

10. Grievance Officer

As required under IT Rules 2021 and DPDP Act 2023:

Grievance Officer: Sarawanan

Email: contact@spotlift.in

Phone: +91 85490 71560

Response time: within 30 days