Privacy Policy

This Privacy Policy explains how YoungsAgency (“YoungsAgency”, “we”, “us”, or “our”), the operator of the GetMySpot platform, collects, uses, shares, and protects your personal information. It applies to the GetMySpot website, our booking services, and our WhatsApp booking chatbot.

By using GetMySpot, contacting us, or messaging our WhatsApp chatbot, you agree to the practices described in this policy. If you do not agree, please do not use the service.

1. Who we are

GetMySpot is a booking platform operated by YoungsAgency that helps you discover and reserve sports turfs, gaming cafes, and other recreation venues. YoungsAgency is the data controller responsible for the personal information described in this policy. You can reach us at teams@getmyspot.in.

2. Information we collect

We collect the following categories of information:

a. Information you provide to us

• Identity & contact details — your name, phone number, and email address.
• Booking details — the venue, sport or activity, date, time slot, duration, number of players, and any special requests you make.
• Contact form messages — the name, email address, and message content you submit through our website contact form.
• Payment information — when you pay for a booking, transaction details are processed by our third-party payment providers. We receive confirmation and reference details, but we do not store your full card or bank credentials.

b. WhatsApp booking chatbot data

When you book or chat through our WhatsApp booking chatbot, we collect and process:

• Your WhatsApp phone number and your WhatsApp profile name.
• The content of the messages you send to and receive from the chatbot, including text, and any media, attachments, or voice notes you choose to share.
• Booking preferences shared in the conversation — such as the venue, sport or activity, preferred date and time slot, number of players, and location or area you are searching in.
• Location information, only if you choose to share it in the chat to help us find nearby venues.
• Booking and payment references generated to confirm and manage your reservation.
• Conversation metadata — timestamps, delivery and read status, and the interaction history needed to fulfil and support your booking.

The WhatsApp chatbot operates on the WhatsApp Business Platform, which is provided by Meta Platforms, Inc. Your messages are also processed by WhatsApp/Meta in accordance with WhatsApp’s Privacy Policy. We only use the chatbot to help you find venues, take bookings, send confirmations and reminders, and provide support.

c. Information about venue owners and staff

If you own or work at a venue listed on GetMySpot, we store the WhatsApp numbers you (or our team, at your request) add for that venue, together with whether each is an owner or a staff number. This exists so that bookings made by a venue’s own people are recognised as such rather than mistaken for a customer holding slots they never intend to use. You can ask us to remove a number at any time.

d. Information we collect automatically

• Device & usage data — IP address, browser and device type, pages viewed, and how you interact with the website.
• Cookies and similar technologies — used to keep the site working and to understand usage (see section 8).

e. Device characteristics used to prevent fake bookings

When you open a booking link, we collect technical characteristics of the device and browser you open it with, and combine them into a device identifier. This is used only to detect and prevent fraud — in particular, slot hoarding and fake holds that block real customers from booking. It is not used for advertising, and we do not sell it or share it with advertisers.

The characteristics we collect are:

• Browser and system information — browser and operating system version, language settings, time zone, and how far your device’s clock differs from ours.
• Display and hardware characteristics — screen size and colour depth, pixel ratio, number of processor cores, approximate device memory, and touchscreen support.
• Graphics and font characteristics — a non-reversible hash of a small test image your browser draws, your graphics hardware as your browser reports it, and which fonts from a fixed list are installed. These help distinguish two otherwise identical devices.
• Network location — the country and city your connection appears to come from, and a one-way hash of your IP address. We do not store the IP address itself alongside this record; the hash only lets us recognise repeat activity from the same connection.
• Booking activity — how many booking links this device has opened, how many slots it has held, and how many of those were paid for.

We do not read files, contacts, photos, location services, or anything else on your device. Everything above is information your browser makes available to any website you visit.

Why we are allowed to do this. We rely on our legitimate interest in keeping the platform usable and our venue partners’ slots genuinely available. Fake holds directly harm other customers, who find slots unavailable that nobody intends to play on.

What it can lead to. A booking attempt that our checks score as unusual may be asked to complete a short verification (see Cloudflare in section 4) before the slot is held. One scored as high risk may be declined automatically, or held for manual review. If you believe a booking of yours was declined in error, contact us at teams@getmyspot.in and a person will review it.

3. How we use your information

• To create, process, confirm, and manage your bookings.
• To operate the WhatsApp booking chatbot and respond to your messages.
• To send booking confirmations, reminders, and service-related notifications.
• To respond to your enquiries and provide customer support.
• To operate, maintain, secure, and improve the GetMySpot platform.
• To prevent fraud and misuse — including detecting fake or abandoned slot holds using the device characteristics described in section 2(e) — and to comply with our legal obligations.

4. How we share your information

We do not sell your personal information. We share it only as needed to run the service:

The fraud-prevention records described in section 2(e) are an exception in the other direction: they are not shared with venues, not shared with advertisers, and are readable only by our own platform administrators, who use them to review declined bookings and to improve the checks.

• Venues you book with — we share the details necessary to confirm and honour your reservation (for example, your name, contact number, and booking details).
• Service providers — including WhatsApp/Meta (chat messaging), our email provider (Resend), hosting and infrastructure providers, and payment processors, who handle data on our behalf under appropriate safeguards.
• Cloudflare — if a booking attempt is flagged by the checks in section 2(e), your browser completes a short verification provided by Cloudflare Turnstile before the slot is held. Cloudflare receives your IP address and basic browser information in order to run that check. It is used only to tell a person from a script; Turnstile does not track you across websites and is not used for advertising. Most bookings are never flagged, and no verification runs on them at all.
• Legal and safety — where required by law, legal process, or to protect the rights, property, or safety of YoungsAgency, our users, or others.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.

5. Data retention

We keep your personal information only for as long as necessary to provide the service, fulfil the purposes described in this policy, resolve disputes, and comply with our legal obligations. Booking and WhatsApp conversation records may be retained for a reasonable period for support, accounting, and legal purposes, after which they are deleted or anonymised.

Fraud-prevention data is kept to fixed windows, deleted automatically, and not retained beyond what the checks actually read:

• Booking attempt records (which number tried to hold which slot, and the score it received) — 30 days.
• Booking link records — deleted within 24 hours, once the link they refer to has expired anyway.
• Device characteristics (section 2(e)) — 12 months from the last time that device was seen, after which the record is deleted in full.

6. Your rights and choices

Depending on your location, you may have the right to access, correct, update, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can:

• Email us at teams@getmyspot.in to make a request.
• Stop using the WhatsApp chatbot at any time, or ask us to delete your chat history and booking data.
• Ask us what fraud-prevention data we hold about your device, ask for it to be deleted, or ask a person to review any booking that was automatically declined.

We will respond to your request in line with applicable law.

7. Security

We use reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Booking links we send you are personal to you: they carry no phone number in the address, they stop working after a few hours, and each one can place a single booking. A link forwarded to someone else will not let them book as you.

8. Cookies

Our website uses cookies and similar technologies to keep the site functioning and to understand how it is used. You can control cookies through your browser settings; disabling some cookies may affect how the site works.

9. Children’s privacy

GetMySpot is not directed to children under the age of 13, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, please contact us so we can delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” above. Significant changes will be communicated where appropriate. Your continued use of GetMySpot after an update means you accept the revised policy.

11. Contact us

If you have any questions about this Privacy Policy or how we handle your data, contact:

YoungsAgency — operator of GetMySpot
Email: teams@getmyspot.in