Privacy at Spotler One
Last updated 3 November 2026
Spotler One is a product of Spotler. This page says what Spotler One does with personal data, including the data it receives from Google.
How Spotler handles data on its own websites is in Spotler's privacy statement.
What we collect
- On this site: the email address you type into a form, saved as soon as it is complete and before you send anything, and the name, company and message you send. This site also loads Google Tag Manager, which can set cookies to measure visits.
- In the app: the name and email address of each person who works in a workspace, what they do there for the workspace's audit log, and when they sign in and which pages they open.
- Customer data: the contacts, companies and events a workspace brings in. The customer decides what goes in and why, and Spotler processes it on the customer's behalf.
How we use it
We use this data to provide and secure Spotler One, to support our customers, to improve the product and tell the people who use it about it, and to answer your message or follow up on an address you left on this site, such as with a beta invite. We do so to perform our contract with a customer, for our legitimate interest in answering enquiries, improving and promoting the product and keeping the service secure, or with your consent where we ask for it.
Data from Google Tag Manager
A customer can place the Spotler One tag in their own Google Tag Manager account by signing in with Google. This only happens when they start it and grant permission.
- What we access: the Tag Manager accounts and containers your Google account can reach, and the contents of the workspace we set up.
- How we use it: to create or update a workspace named "Spotler One" with our tags, triggers and variables. We create and publish a container version only when you choose to place the tag; if you choose to only stage it, nothing is published.
- What we store: Google's access token, encrypted, for at most ten minutes. We do not ask for a refresh token, so we have no access after that. With the workspace we keep the container's ID and path, a link to it, whether it was published, and which events you approved or declined.
- How long we keep it: the access token for at most ten minutes. The container's ID, path and link and your event choices stay with your workspace until you ask us to delete them. To request deletion, email infosec@spotler.com.
- Who we share it with: nobody, apart from the infrastructure providers that host Spotler One. We do not sell this data, and we do not use it for advertising or to train AI models.
Spotler One's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
You can withdraw this permission at any time in your Google Account.
Sharing, security and retention
Spotler One is hosted in the EU. We share personal data only with service providers that help run it, with other Spotler companies for the purposes on this page, and where the law requires it. We encrypt data and limit who can reach it, and we keep it only as long as we need it for these purposes or as the law requires.
Your rights
You can ask to see, correct or erase your personal data, to restrict or object to its use, and to receive a copy to take elsewhere. If your data is in a customer's workspace, that customer is usually the first to ask.
Contact
Questions about this page or your data go to infosec@spotler.com.
We post any change to this page here, with a new date at the top.