Privacy policy

1. Who is responsible

LOVEIT LABS (Pty) Ltd, registration number 2026/840936/07, operates this website, Spotted, and Watch This in South Africa. Contact our Information Officer at privacy@loveitlabs.co.za.

We are responsible for our website, accounts, service operations, transactions, and the face-matching information we create or manage. Event organisers and venues have their own responsibilities for the photos they upload or the recording they arrange, including camera placement, lawful permissions, and notices to people photographed or recorded. Using our services does not remove those responsibilities.

This policy covers people using our services and people who appear in uploaded photos or recorded clips even if they do not have an account. Product-specific detail is available in the Spotted privacy notice and the Watch This privacy notice, together with the notices shown when you enrol a face or a venue enables recording.

2. Visiting this website and contacting us

This studio website has no account or checkout of its own. Our hosting and delivery infrastructure can receive ordinary request information such as IP address, browser information, requested pages, and time of access. When you email us, we receive your email address, message, and any information you choose to include, for support or correspondence.

The homepage requests fonts from Google Fonts. Your browser therefore contacts Google and sends ordinary request information, including your IP address. See Google's privacy policy. The policy pages themselves use local styling and system fonts.

The current studio website does not set advertising cookies or load third-party analytics. That does not mean all our products are cookie-free: Watch This uses essential session and security cookies, and Spotted uses browser session storage for sign-in. Paystack and other websites you visit have their own storage and privacy practices.

3. Spotted: photos, accounts, and faces

• Account and event information: name, email address, password hash where applicable, sign-in and access records, event membership requests, organiser decisions, and photos matched to you.
• Selfies and face templates: when you enrol a Spotted selfie, the image is stored privately and processed using Amazon Web Services Rekognition to create a face template. Spotted retains its identifier; Rekognition holds the template. This is biometric information and requires special protection under POPIA.
• Event photos: organisers upload photos. Clear faces in those photos can be processed into face templates for matching. This can involve people who have never enrolled or created an account. The organiser must provide the relevant notices and meet the requirements for lawful upload and processing.
• Organiser People features: names, reference images, and labels can identify people in an organiser's photos. Searching for a person by face or adding a reference face uses a separate consent process described in Spotted's detailed notice.
• Consent and accountability records: the statements shown, their version, when a person agreed, declined, or withdrew, and associated identifiers such as IP address. Organiser upload confirmations and activity logs support accountability, security, and investigation.

Attendee matching is used to find your photos in events you have joined, not to create a public face-search service. Organiser teams can see event-access information and, for access requests you make yourself, your selfie while it remains on file. Matches can be inaccurate. Contact support about incorrect matches or unintended disclosure.

You can use My account > Delete my selfie to withdraw attendee biometric consent. Matching stops and live-service links to the selfie, template, and matched photos are removed when the withdrawal commits. External deletion is queued and retried; it is not a claim of instantaneous deletion from every system. Deleting a selfie does not by itself delete the organiser's source photos, per-photo face detections, or your financial records. Erasing an account is a separate action. Organisers should contact support about their own selfie or account removal.

4. Watch This: recordings, claiming, and optional matching

At participating venues, cameras process a rolling video buffer. A trigger saves a clip and thumbnail for playback, claiming, and downloading. A clip may contain your image, your activity, sound, and other people. The venue controls camera placement and must provide appropriate recording notices. Unclaimed clips and their claim links can appear on the venue display; people with access to that display or a claim link may be able to view or claim them.

If you create an account, Watch This handles your username or email, password hash, session and security information, and the clips linked to your account. A clip may have multiple owners. Removing it from your library or deleting your account does not necessarily remove a copy another owner is entitled to retain.

Where optional face matching is enabled, you may enrol a face through an explicit consent process. Watch This uses Spotted as the matching provider, backed by AWS Rekognition. The enrolment image is sent to create a face signature and is not retained as a Watch This selfie. An enrolled face is scoped to its venue.

At a venue with matching enabled and enrolled members, stills from saved clips are sent for comparison against enrolled faces at that venue. People in those stills may not have enrolled. Under this matching flow, their faces are compared rather than added as new enrolled templates, and the provider does not retain those stills. This differs from Spotted's event-photo indexing.

Use Watch This's face settings to stop automatic matching and request deletion of your face signature. External-provider failures can require retries. Clips already linked to your account have a separate deletion process. Contact privacy@loveitlabs.co.za if you appear in a clip but do not have an account.

5. Purchases, payments, and support

For Spotted purchases we handle the buyer's contact details, event and order, price and currency, payment references and status, delivery status, and refund or dispute information. Organiser payout onboarding also involves business and bank information; bank account details supplied for a Paystack subaccount go to Paystack, while Spotted retains identifying payout information such as bank name and the account's last four digits rather than the full account number.

Paystack processes payments and may collect payment credentials, device and fraud-prevention information, and other information required by financial law. LoveIt Labs does not store full card numbers, card security codes, or your online-banking password. Paystack also has its own legal responsibilities; see Paystack's privacy policy.

Do not email us card security codes, passwords, or full payment-card details. We may need an order reference or proportionate verification to resolve a support, refund, or privacy request.

6. Purposes and lawful grounds

We use information to provide requested accounts, matching, clip libraries, downloads, payments, and support; protect the services and investigate faults; meet legal and financial recordkeeping duties; and record required permissions. Depending on the activity, the lawful ground is your consent, performance of the requested agreement, a legal obligation, or a legitimate interest subject to your rights.

Biometric and children's information needs additional protection. A general reference to legitimate interests does not replace the required conditions for processing that information. Organiser and venue confirmations do not replace an individual's own consent where that consent is required.

We do not sell personal information or share it with advertisers. Withdrawing biometric consent does not require giving up unrelated statutory rights. We may still retain records we are legally required or otherwise lawfully entitled to keep, as explained below.

7. Providers and international processing

Information is disclosed only as needed to operate the services, fulfil your requests, meet legal requirements, or protect rights. Other people may receive media when it is displayed at a venue or shared or downloaded by someone entitled to it; a download already saved to another person's device cannot necessarily be recalled.

Spotted's disclosed service providers include AWS Rekognition for face processing, Cloudflare R2 for private media storage, Neon for its database, Resend for email, Fly.io for hosting, and Sentry for error reporting. Watch This uses its configured application, database, and media-storage infrastructure, Resend where email is enabled, Spotted/AWS for optional matching, and Sentry where error reporting is enabled. Google Fonts is used on the studio homepage and Paystack processes payments.

Providers may process information outside South Africa. Transfers must meet POPIA's requirements, including an adequate level of protection, appropriate binding safeguards, or another applicable lawful basis. Contact the Information Officer for questions about providers, transfer arrangements, or a particular product configuration.

8. Retention and deletion

• Purchased Spotted photos: the 30-day minimum retrieval window is a customer-access commitment, not a rule deleting all photos after 30 days. Photo availability and lawful removal are separate from the retention of biometric, account, and financial information. We do not promise permanent hosting.
• Spotted attendee selfies: automatic cleanup becomes due 180 days after the later of the most recent enrolment and latest approved event date, or enrolment alone where there is no approved event. Rollout controls and failed external deletion can affect actual completion; you can request deletion sooner. Organiser selfies are not covered by that attendee sweep.
• Spotted event-photo face templates: retained while the source photo remains in Spotted and removed through the photo or event deletion process, with external cleanup retried where necessary. Other People-feature and consent records have the distinct periods described in Spotted's detailed notice.
• Spotted accountability and financial records: orders are retained for five years after purchase; consent and upload-confirmation records generally for five years from the relevant record. Account erasure removes or anonymises account links where applicable but does not delete all legally retained evidence. Organiser activity logs have a 12-month retention period.
• Watch This unclaimed clips: expire according to the venue's configured retention period. Expired, unowned media is removed by scheduled cleanup; failed storage deletion is retried rather than treated as complete.
• Watch This owned clips: retained while linked to an owner's library. Shared ownership can preserve a clip after one person removes it. Removing the last ownership returns an orphaned clip to a deletion or expiry process; it is not a promise that every copy vanishes immediately.
• Correspondence, logs, and backups: retained for the purpose they serve, including support, security, recovery, and legal duties, rather than indefinitely by default. Erasure from a live service can precede expiry or cleanup of recovery copies. Spotted's detailed notice describes its specific backup window; that window is not a blanket promise for every product.

Ask us about the information and retention period relevant to your request. We will distinguish live-service removal, queued external deletion, records lawfully retained, and copies held by others rather than claim that an email instantly deletes everything.

9. Your rights, children, and complaints

You can request access to your personal information, correction, deletion, objection to processing, or withdrawal of consent where consent is the basis. Email privacy@loveitlabs.co.za. You do not need an account to raise a concern about appearing in event photos or venue footage. Include the product, event or venue, and enough information for us to locate the material without sending unnecessary sensitive information.

We may need to verify your identity proportionately before disclosing or changing private information. We aim to respond within 30 days and will explain lawful retention, any limits on the request, or additional time needed. Product self-service deletion routes can act sooner.

A parent or lawful guardian must provide required permissions and act for a child under 18. Organisers and venues must address children in their notices and permissions. A parent or guardian can exercise a child's rights through the same privacy contact.

You may complain to the Information Regulator (South Africa). You do not have to give up that right while we investigate.

10. Security and policy changes

We use measures such as encrypted connections, access controls, password hashing, and private media storage with expiring links. These controls do not make authorised venue displays or files shared by users private, and no system can promise absolute security. Report suspected exposure to the Information Officer.

We update the date above when this policy changes. Material changes affecting existing users will be communicated where we can contact them. A new use requiring consent needs that consent; changing this page alone does not supply it.