Privacy Policy

This Privacy Policy explains how SpooLoo LLC d/b/a SpooLink (“SpooLink,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects information when people use our websites, merchant accounts, AI-assisted tools, demo and session scheduling, event ticketing, seating and reservations, POS workflows, LiveGate™ admissions, support services, APIs, and related services.

For merchant-controlled attendee, customer, staff, and event data, the Merchant generally determines why and how the data is used, and SpooLink processes it to provide the requested services. For SpooLink account administration, optional purchases, AI-credit purchases, demo and sales inquiries, fraud prevention, security, support, and our own legal obligations, SpooLink determines the relevant processing purposes.

Depending on how the services are used, we may collect the following categories of information:

SpooLink may process ticket codes, QR tokens, order and refund status, admission scan results, gate and override activity, ticket lifecycle history, access records, device information, and fraud-monitoring records to provide ticketing and admissions, prevent duplicate or unauthorized entry, support Merchants, investigate disputes, generate reports, and protect platform integrity.

We record AI provider request identifiers, model and image settings, token usage when available, generation outcomes, and estimated provider costs linked to merchant credit activity for billing reconciliation, cost monitoring, troubleshooting, and internal reporting. This cost tracking does not require storing additional copies of prompts or images.

We process invoices, payment status, AI-credit reservations, settlements, purchases, usage, remaining balances, and expiration dates to provide and bill for optional SpooLink Services, maintain accurate balances, release credits after failed generations, prevent fraud, handle disputes, and provide reporting.

Stripe and other authorized payment providers may collect payment credentials and process payments, payouts, identity checks, tax information, refunds, disputes, and fraud signals under their own privacy notices. SpooLink does not store complete payment card numbers or card security codes on its own servers. Merchant-owned ticket payments and separate platform AI-credit purchases may be processed through different Stripe account contexts. Payment providers may retain payment and transaction records under their own notices; this is distinct from enrolling a payment method for future SpooLink checkout.

SpooLink may process prompts, uploaded or selected assets, event context, generated images, support messages, and related metadata to deliver AI-assisted creative, chatbot and support, analysis, fraud-prevention, security, and operational features.

When a Merchant requests AI image generation or transformation, relevant prompts, reference images, and generation settings are sent to the AI provider. Uploading or formatting existing artwork through a reuse tool does not itself request AI image generation. Merchants should avoid including sensitive personal information in prompts or reference materials.

AI-assisted tools may involve third-party AI service providers acting on SpooLink’s instructions. SpooLink does not use Customer Data, AI Input, or AI Output to train or fine-tune AI models without the user’s or Merchant’s prior written consent. We may retain limited request, response, safety, billing, and diagnostic records as needed to provide the feature, reconcile credits, investigate misuse, secure the platform, and meet legal obligations.

Automated processing may assist with fraud detection, admissions validation, account security, routing, recommendations, or operational workflows. Human review may occur where appropriate. Users may contact us about a decision or result that materially affects them.

We may use information to:

Where applicable law requires a legal basis, we process information as necessary to perform contracts, provide requested services, pursue legitimate interests such as security, fraud prevention, support, and product operations, comply with legal obligations, protect vital interests, or act with consent. Consent may be withdrawn where it is the applicable basis, without affecting prior lawful processing.

SpooLink may use essential, authentication, security, preference, performance, analytics, and, where enabled, advertising or remarketing cookies and similar technologies. Browser or device controls may limit some technologies, although essential cookies are required for core account and security functions.

Where required, SpooLink will request consent before using non-essential cookies. Third-party analytics, CRM, advertising, and marketing providers may process information under their own privacy notices.

We may share information with the Merchant responsible for an event; Authorized Users and venue operators; payment processors and financial providers; cloud, database, hosting, calendar, video-conferencing, communications, email, analytics, AI, support, and security vendors; professional advisers; transaction counterparties in a corporate reorganization; and government authorities or other parties when required or permitted by law.

Service providers may process information only for authorized purposes and subject to contractual or legal obligations appropriate to their role. SpooLink does not sell personal information for money. If our use of advertising technologies is considered a “sale” or “sharing” under an applicable state law, eligible users may exercise the rights provided by that law.

Merchants are responsible for providing legally required notices, obtaining necessary permissions and consents, honoring attendee and staff privacy rights, configuring access appropriately, and using Customer Data only for lawful event and business purposes. Privacy questions about a Merchant’s event practices should generally be directed to that Merchant.

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including providing active services; maintaining appointment, transaction, credit, ticket, scan, refund, dispute, tax, audit, support, and security records; complying with law and processor requirements; resolving disputes; preventing fraud; and enforcing agreements.

Retention periods vary by record type, Merchant instructions, account status, legal limitation periods, tax and accounting rules, payment-provider requirements, security needs, and backup schedules. We may delete, de-identify, or aggregate information when it is no longer reasonably required. Some records must remain after account closure.

SpooLink uses commercially reasonable administrative, technical, and organizational safeguards designed to protect information, including access controls and operational logging. No online service, transmission, or storage system can be guaranteed completely secure.

We may investigate suspected incidents, restrict access, preserve evidence, cooperate with providers or authorities, and provide notices where required by applicable law.

Information may be processed or stored in the United States and other countries where SpooLink or its providers operate. Where required, we use recognized transfer mechanisms or other safeguards for international transfers.

Depending on location and applicable law, individuals may request access, correction, deletion, portability, restriction, or objection; withdraw consent; opt out of certain targeted advertising, sale, sharing, or profiling; or appeal a denied request.

Submit a request to support@spoolink.com with “Privacy Request” in the subject line. We may need to verify identity and authority before fulfilling a request. If information is controlled by a Merchant, we may direct the request to that Merchant or assist the Merchant in responding. Authorized agents may submit requests where applicable law permits.

We will not unlawfully discriminate against a person for exercising privacy rights. Certain information may be exempt from a request or retained for transaction, tax, fraud, security, legal, or operational obligations.

SpooLink may send transactional emails, ticket confirmations, event notices, appointment confirmations and reminders, account and billing messages, operational notices, security alerts, support communications, and a reasonable follow-up when a person provides contact information but leaves a support chat before resolution. Transactional communications cannot always be disabled while an account, appointment, inquiry, or transaction remains active.

Recipients may use an unsubscribe link for eligible marketing emails and reply STOP to eligible SMS messages. Message and data rates may apply. Carrier and email-provider delays are outside SpooLink’s control.

When a person submits a sales, demo, municipal, investor, partnership, support, or other business inquiry, SpooLink may use the submitted contact details, organization, role, message, scheduling selections, and related communications to respond, evaluate the request, schedule and conduct a meeting, provide follow-up, maintain business records, and protect against abuse.

If appointment, calendar, email, or video-conferencing functionality is connected or used, relevant information, including joining links when provided, may be shared with the selected host, assigned staff, invited attendees, and the applicable Third-Party Service. A provider’s own privacy notice applies to its processing.

Chatbot and helpdesk interactions may use automated responses before or alongside human support. SpooLink may retain transcripts, attachments, routing information, escalation history, and contact details for support, training, quality, security, and operational purposes.

Event pages, flyers, venue information, performer media, promotional materials, and other public event content may be visible to anyone. Merchants should not publish personal or confidential information that is not intended for public display. Public visibility may depend on event publication and merchant-readiness requirements.

Specifically identified preview, sandbox, and testing environments may use simulated or resettable data. Activity may still be logged for security, support, training, analytics, and operational improvement.

SpooLink is not directed to children under 13 and does not knowingly collect personal information directly from children under 13 without appropriate authorization where required. Merchants that organize events involving minors are responsible for appropriate notices, permissions, and lawful collection practices.

SpooLink does not currently use facial recognition or biometric identification technologies unless expressly disclosed for a future feature or integration and implemented with any notices and consents required by law.

We may update this Privacy Policy by posting a revised version with a new effective date and providing additional notice where required. Material changes apply prospectively unless applicable law permits otherwise.

SpooLoo LLC d/b/a SpooLink

Website: https://www.spoolink.com

Privacy, support, and legal inquiries: support@spoolink.com