SpareSeat

Privacy Policy

Last updated: July 10, 2026

This Privacy Policy explains how SpareSeat (“we”, “us”) collects, uses, and shares information when you use the SpareSeat platform. It is part of our Terms of Service. SpareSeat is designed for users in the United States.

1. Information we collect

Information you provide

  • Account information — email address, display name, password (stored as a hash by our authentication provider), and metro area.
  • Invitation email — the Gmail address you provide when joining a group, used solely so your Host can send your family-plan invitation. We never send email from this address or share it beyond your Host.
  • Messages — messages you post in group chat and dispute details you submit.
  • Host verification — Hosts receiving payouts complete identity verification directly with Stripe; SpareSeat receives verification status, not your underlying documents.

Information collected automatically

  • Usage and device data — IP address, browser type, pages viewed, and approximate region, collected through server logs and error monitoring.
  • Cookies — we use strictly necessary cookies to keep you signed in (authentication session). We do not use advertising cookies.

Information from third parties

  • Google sign-in — if you sign in with Google, we receive your email address and name from Google.
  • Payment information — payments are processed by Stripe. We receive transaction metadata (amounts, status, last four digits) but never your full card number.

2. How we use information

  • Operate the marketplace: matching, group management, invitations, and chat.
  • Process subscriptions, refunds, and Host payouts.
  • Enforce our service levels and platform integrity (e.g., invitation deadlines, reliability scores, dispute resolution, fraud prevention, banning abusive accounts).
  • Send transactional email (payment receipts and failures, invitation notifications, deadline reminders, dispute updates) via our email provider.
  • Monitor errors and improve the product.
  • Comply with legal obligations.

We do not sell your personal information, and we do not use it for third-party advertising.

3. How we share information

  • With other users, minimally — your display name, metro area, and reliability score are visible on the Platform. Your Host sees the invitation email you provide. Other group members see your display name and chat messages — never your email, payment details, or invitation address.
  • Service providers — infrastructure and processing partners acting on our behalf: Supabase (database & authentication), Stripe (payments & payouts), Vercel (hosting), Resend (email), and Sentry (error monitoring). Each receives only what it needs to perform its function.
  • Legal — when required by law, to protect rights and safety, or in connection with a business transfer (e.g., merger or acquisition), in which case this policy continues to apply to previously collected data.

4. Data retention

We keep account data while your account is active. Payment and payout records are retained as required for tax, accounting, and dispute purposes (generally 7 years). Chat messages are retained while the group exists. When you delete your account, we delete or anonymize personal data within 30 days, except records we must keep by law or that are needed for pending disputes.

5. Your rights and choices

  • You can view and update your display name and metro area in your account settings.
  • You can request access to, correction of, or deletion of your personal data by emailing admin@spareseat.app.
  • California residents — you have rights under the CCPA/CPRA, including the rights to know, delete, and correct, and the right not to be discriminated against for exercising them. We do not sell or share personal information as defined by the CCPA. Submit requests to the email above; we will verify your identity before acting.
  • Transactional emails are required to operate your subscription and cannot be opted out of while you have an active membership; any future marketing email will include an unsubscribe link.

6. Security

We protect data using industry-standard measures: encryption in transit, row-level security on our database, restricted service credentials, and webhook signature verification for payment events. No system is perfectly secure; if we learn of a breach affecting your personal data, we will notify you as required by law.

7. Children

The Platform is for adults 18 and older. We do not knowingly collect data from anyone under 18 (and never from children under 13). If you believe a minor has provided us data, contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. For material changes we will notify you by email or in-app before the changes take effect. The “Last updated” date above reflects the current version.

9. Contact

Privacy questions or requests: admin@spareseat.app.