Privacy Policy

Last updated: February 9, 2026

1. Introduction

MySpot (“we”, “our”, “us”), operated by Kwata Team, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our queue management and appointment scheduling platform.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA), Canada’s Anti-Spam Legislation (CASL), and the Telephone Consumer Protection Act (TCPA).

2. Information We Collect

We collect only the minimum information necessary to provide our services:

  • Name: Your first name for personalized communication
  • Phone Number: Encrypted with AES-256-GCM; stored as a one-way SHA-256 hash for lookup
  • Appointment Data: Scheduling information to manage your bookings
  • Queue Data: Position and wait time information (auto-purged after 24 hours)
  • SMS Logs: Records of messages sent for compliance audit trails (retained 2 years)
  • Feedback: Voluntary ratings and comments you provide after appointments

3. How We Use Your Information

  • Sending appointment confirmations, reminders, and updates via SMS
  • Managing your position in virtual queues
  • Providing AI-powered conversational scheduling via text message
  • Collecting and analyzing feedback to improve service quality
  • Generating anonymized analytics for business operators

4. Data Protection

We implement bank-level security measures:

  • Encryption at Rest: AES-256-GCM encryption for all phone numbers
  • Encryption in Transit: TLS 1.3 for all data transmission
  • Password Security: bcrypt with cost factor 12 for all credentials
  • Network Isolation: Databases and caches are not exposed to the internet
  • Access Control: Role-based authentication with JWT tokens

5. SMS Consent (CASL/TCPA Compliance)

We only send SMS messages with your explicit consent. You can opt out at any time by replying STOP to any message. We maintain a complete audit trail of consent records including timestamps, IP addresses, and consent method.

6. Your Rights

Under PIPEDA, you have the right to:

  • Access your personal information we hold
  • Request correction of inaccurate information
  • Request deletion of your personal data
  • Withdraw consent for SMS communications at any time
  • File a complaint with the Office of the Privacy Commissioner of Canada

7. Data Retention

  • Queue data: 24 hours (auto-purged)
  • Appointment data: 365 days (configurable)
  • SMS logs: 2 years (legal requirement)
  • Consent records: Permanent (legal requirement)
  • Feedback: 365 days
  • Personal information: Until deletion request

8. Contact

For privacy inquiries, data access requests, or to exercise your rights, contact us at: support@kwatateam.com or call +1 (587) 333-2772.

Kwata Team — Calgary, Alberta, Canada