Privacy Policy

1. Introduction

Spatioworld Technologies Private Limited ("Spatioworld", "we", "our", or "us") is committed to protecting your privacy and handling personal data responsibly.

This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you visit https://spatioworld.com or https://www.spatioworld.com (collectively, the Website), use our mobile applications for iOS and Android (collectively, the Apps), submit information through the Website or Apps, or use services and products made available through or linked from the Website or Apps, to the extent this Policy applies.

The Website currently describes services including IT Services, GIS Services, GIS Training, and Geocode API solutions, and products including SpatioSafe, SpatioWorld Maps, and SpatioWorld Authenticator. Spatioworld may introduce additional services or products in the future. This Policy is intended to apply to such offerings where applicable, unless a separate privacy notice is provided.

By using the Website, the Apps, or applicable Services, you acknowledge this Privacy Policy. Where consent is legally required, we will request consent through an appropriate mechanism.

2. About Us

Data Fiduciary / Data Controller, as applicable under law

Spatioworld Technologies Private Limited

VANTAGE CAPITAL 805, SR NO 263/264/A/2

HINJAVADI, Infotech Park (Hinjawadi)

Pune, Haveli, Maharashtra, India, 411057

Email (privacy & legal enquiries): contact@spatioworld.com

Email (product & account support): support@spatioworld.com

Phone: +91 89565 88558

Official Website: https://spatioworld.com

Website alternate domain: https://www.spatioworld.com

3. Information We Collect

Depending on how you interact with the Website, Apps, and Services, we may collect the following categories of information:

Personal and Contact Information

·       Name

·       Email address

·       Phone number

·       Company or organization name, where provided

·       Information included in your enquiry or message

Account and Service Information

·       Account identifiers and login information where an account is offered

·       Service preferences and settings

·       Subscription, purchase, billing, and transaction-related information where applicable

·       Information you submit or generate while using a Service

Technical and Usage Information

·       IP address

·       Browser and operating system information

·       Device and network information, including device model, operating system version, and app version for the Apps

·       Pages or resources visited

·       Date and time of access

·       Referring website or source

·       Error, diagnostic, crash, security, and server logs

Cookies and Similar Technologies

We may use cookies, browser local storage, session storage, and similar technologies for essential functionality, security, remembering preferences, and other purposes described in our Cookie Policy.

Form and Security Information

When you submit a Website form, we may collect the information entered in the form, your consent or acknowledgement where applicable, and technical/security information associated with the submission. Website forms may use Cloudflare Turnstile to help prevent automated abuse and spam. Turnstile-related processing may involve information being processed by Cloudflare in accordance with its applicable policies.

4. SpatioWorld Authenticator App

This section applies to the SpatioWorld Authenticator mobile application for iOS and Android (the Authenticator App). It explains the specific way the Authenticator App handles information. Where this section differs from other sections of this Policy, this section applies to the Authenticator App.

Purpose of the App

The Authenticator App generates time-based one-time passwords (TOTP) used for two-factor authentication (2FA) on websites and services that support standard authenticator apps.

Information Stored on Your Device

·       Account labels, issuer names, and usernames that you add or that are contained in a setup QR code

·       Secret keys (setup keys) used to generate one-time codes

·       App settings and preferences, such as app lock, display, and ordering of accounts

This information is stored locally on your device using the secure storage provided by your device's operating system (such as the iOS Keychain or Android Keystore). Secret keys and generated one-time codes are not transmitted to Spatioworld servers, and we do not have access to them.

Offline Code Generation

One-time codes are generated on your device. An internet connection is not required to generate codes.

Camera Permission

The Authenticator App requests access to your camera only to scan QR codes for adding accounts. Camera images are processed on your device for this purpose only and are not stored or transmitted by us.

Biometric and Device Lock

If you enable app lock, authentication using Face ID, Touch ID, fingerprint, or your device passcode is handled entirely by your device's operating system. We do not collect, receive, or store your biometric data.

Backups and Device Transfer

We do not upload your Authenticator App accounts or secret keys to our servers. If you use any export, backup, or transfer feature offered in the App, or if your device or operating-system backup service (such as iCloud or Google backup) includes App data, that data is created at your request and handled by you or by the relevant platform provider under their policies. You are responsible for keeping such exports or backups secure.

Diagnostics and Support

We may receive limited crash and diagnostic information, such as device model, operating system version, app version, and error details, through the Apple App Store, Google Play, or crash reporting tools where enabled, to fix problems and improve stability. Such information does not include your secret keys or one-time codes. If you contact support, we will process the information you choose to share with us.

No Advertising and No Sale of Data

The Authenticator App does not display third-party advertising, does not track you across other companies' apps or websites, and we do not sell your information.

Deleting Your Data

You can delete individual accounts within the App at any time. Uninstalling the App removes App data stored on your device, subject to any device or platform backups you control. Because secret keys are stored only on your device, we cannot recover deleted or lost accounts. Before deleting accounts or uninstalling the App, make sure you have disabled two-factor authentication or set up another verification method with the relevant service, to avoid losing access to your accounts.

5. How We Use Your Information

·       Provide, operate, maintain, and improve the Website, Apps, and Services.

·       Respond to enquiries, requests, applications, and support messages.

·       Create and manage accounts where offered.

·       Provide requested products, services, training, subscriptions, or support.

·       Process purchases, subscriptions, payments, invoices, and related administration where applicable.

·       Maintain website and app functionality and remember necessary preferences.

·       Diagnose crashes, errors, and performance issues in the Apps.

·       Protect the Website, Apps, and Services from fraud, spam, abuse, unauthorized access, and security threats.

·       Communicate important service, security, administrative, or policy updates.

·       Comply with legal, regulatory, tax, accounting, and law-enforcement obligations.

·       Establish, exercise, or defend legal claims and protect our rights and the rights of users or third parties.

6. Legal Basis / Grounds for Processing

Depending on the applicable law and the nature of the interaction, we may process information based on your consent, performance of a contract or steps taken at your request, compliance with legal obligations, legitimate or otherwise permitted business purposes, protection of rights and security, or another lawful basis available under applicable law.

Where consent is the applicable basis, you may withdraw consent subject to legal and operational limitations. Withdrawal does not affect processing already carried out lawfully before withdrawal.

7. Sharing and Disclosure of Information

We do not sell your personal information.

We may disclose information to service providers, contractors, professional advisers, payment providers, hosting and infrastructure providers, security providers, or other parties where reasonably necessary to operate the Website, Apps, and Services, comply with law, protect rights, or complete a transaction.

Where required or permitted by law, we may disclose information to government authorities, regulators, courts, law-enforcement agencies, or other competent authorities.

Service Providers and Sub-processors

Depending on the Service and functionality in use, providers may include:

·       Contabo — cloud hosting infrastructure used by Spatioworld.

·       Razorpay — payment processing where paid subscriptions or payments are offered.

·       Apple App Store and Google Play — app distribution, in-app purchases, subscription billing, and app crash and diagnostic reports, where applicable.

·       Google Firebase — app services such as notifications, crash reporting, or diagnostics, where used by a particular App.

·       Cloudflare — security and bot-protection services, including Turnstile used on Website forms or account-related flows.

·       Traccar — underlying GPS tracking technology used by certain Spatioworld tracking products, where applicable.

·       Other providers that may be introduced as the Website, Apps, and Services evolve.

The provider list may change as our Services evolve. Where appropriate, the current or applicable provider information will be reflected in this Policy or the relevant Service documentation.

8. Data Security

We implement reasonable technical and organizational measures intended to protect personal information, including HTTPS/TLS encryption, access controls, password security, firewall protection, monitoring, software updates, backups, and use of operating-system secure storage in the Apps, as appropriate to the nature of the information and Service.

No method of electronic transmission, processing, or storage is completely secure. We cannot guarantee absolute security. You are responsible for keeping your device, device passcode, and any exports or backups secure.

Data Storage and Hosting

Information collected through Spatioworld systems may be stored on infrastructure operated by our hosting and technology providers. Current hosting arrangements may include infrastructure located in India. Storage locations and providers may change as our Services evolve, subject to applicable law and appropriate safeguards. Information stored only on your device by an App, such as Authenticator App secret keys, is not stored on our infrastructure.

Data Breach

If we become aware of a personal data breach requiring notification under applicable law, we will take the steps required by law, which may include notifying relevant authorities and affected individuals within applicable timelines.

9. Third-Party Services, Links, and Embedded Content

The Website and Apps may contain links to or integrations with third-party websites and services, including payment, mapping, security, communication, app store, social, or other providers. Third parties may independently collect information when you interact with their services.

We are not responsible for third-party privacy practices. We encourage you to review the privacy policies of third parties before providing information or using their services.

10. Map Data, Open-Source Software, and Product Technology

Some Spatioworld products and services may use open-source software, open geographic data, third-party map data, routing engines, geocoding engines, tracking platforms, or other third-party technologies. Their own licences and policies may apply.

Examples may include OpenStreetMap data and technologies used by products such as SpatioSafe, SpatioWorld Maps, and geocoding or routing services. The specific technologies used may change over time as our products evolve.

11. Data Retention

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected, to provide a Service, to comply with legal or accounting obligations, to resolve disputes, enforce agreements, or protect our rights.

Retention periods may differ depending on the type of data, the Service, the account status, legal requirements, and security or operational needs.

Information stored locally by the Authenticator App remains on your device until you delete it or uninstall the App.

When information is no longer required, we may securely delete, anonymize, or otherwise dispose of it in accordance with applicable law and our retention practices.

12. Your Rights and Choices

Subject to applicable law, you may have rights to request access to, correction of, deletion of, or information about processing of your personal data, and to withdraw consent where consent is the applicable basis.

You may also control certain cookies and similar technologies through the cookie consent controls and browser settings described in our Cookie Policy.

You can manage App permissions, such as camera access, at any time through your device settings. Disabling a permission may limit related features.

To exercise applicable privacy rights, request deletion of an account, or make a request, contact us using the details in Section 16. We may need to verify your identity before fulfilling a request.

13. Children's Privacy

Unless a particular Service expressly states otherwise and complies with applicable law, the Website, Apps, and Services are not intended for children under 18 years of age.

We do not knowingly collect personal information from children in violation of applicable law. If we become aware of such collection, we will take reasonable steps to address it.

14. Changes to This Privacy Policy

We may update, revise, expand, replace, or otherwise change this Privacy Policy at any time, subject to applicable law, including when we introduce new services or products, change technologies or providers, modify data practices, or respond to legal or regulatory requirements.

The latest version will be published on the Website with an updated Effective Date. Where applicable law requires notice or renewed consent for a material change, we will provide such notice or obtain such consent.

Your continued use of the Website, Apps, or applicable Services after an updated Policy becomes effective constitutes acknowledgement of the revised Policy to the extent permitted by law.

15. Nominate a Representative

Where applicable law provides a right to nominate another individual to exercise privacy rights on your behalf in specified circumstances, you may contact us using the details below to make such a request. Any nomination will be handled subject to applicable law and reasonable verification requirements.

16. Contact Us

For privacy questions, requests, or legal enquiries, contact:

Spatioworld Technologies Private Limited

VANTAGE CAPITAL 805, SR NO 263/264/A/2

HINJAVADI, Infotech Park (Hinjawadi)

Pune, Haveli, Maharashtra, India, 411057

Email (privacy & legal enquiries): contact@spatioworld.com

Email (product & account support): support@spatioworld.com

Phone: +91 89565 88558

17. Grievance Officer

Where required by applicable law, you may contact our Grievance Officer regarding concerns relating to personal data.

Grievance Officer

Vaibhav Patel

Email: contact@spatioworld.com

We will acknowledge and address grievances within the timelines prescribed by applicable law.