Privacy Policy

1. Information We Collect

1.1 Personal Information You Provide

When you sign up for our SMS alert service, we collect:

• Contact Information: First name, last name, email address, mobile phone number
• Age Verification: Date of birth (to verify you are 18 or older)
• Preferences: Restaurant preferences, dining dates, party size, and notification settings
• Consent Records: Records of your consent to receive SMS messages, including date, time, and method of consent

1.2 Automatically Collected Information

• Usage Data: How you interact with our SMS service, message delivery status, click-through rates
• Device Information: Mobile device type, operating system, carrier information
• Log Data: IP address, browser type, access times, pages viewed (when using our website)
• Location Data: General location information based on IP address (not precise GPS location)

1.3 Information from Third Parties

• Publicly available Disney World restaurant reservation data
• Mobile carrier delivery confirmations and status updates
• Analytics and service improvement data from our technology partners

2. How We Use Your Information

2.1 Primary Service Delivery

• Send SMS alerts about Disney World restaurant reservation availability
• Personalize notifications based on your preferences
• Verify your age and eligibility for our services
• Process opt-in and opt-out requests

2.2 Communication and Support

• Respond to your customer service inquiries
• Send important service updates and changes
• Provide technical support
• Send consent confirmations and opt-out confirmations

2.3 Service Improvement

• Analyze usage patterns to improve our alert accuracy
• Monitor service performance and reliability
• Develop new features and services
• Ensure compliance with TCPA and other regulations

2.4 Legal and Compliance

• Maintain records required by TCPA regulations
• Investigate and prevent fraud or abuse
• Comply with legal obligations and law enforcement requests
• Protect the rights and safety of our users and services

3. SMS-Specific Privacy Practices

3.1 Message Content

• SMS messages contain only Disney restaurant availability alerts and service-related information
• We do not include sensitive personal information in SMS messages
• Messages are sent only to numbers that have explicitly opted in
• Message frequency is limited and based on actual reservation availability

3.2 Consent Management

• We maintain detailed records of all SMS consent, including date, time, and method
• Consent records are stored for at least 4 years as required by TCPA
• We honor all opt-out requests within 10 business days (effective April 2025)
• Multiple opt-out methods are provided (STOP, QUIT, END, CANCEL, UNSUBSCRIBE, OPT OUT, REVOKE)

3.3 Carrier Integration

• We work with approved SMS service providers that comply with carrier guidelines
• Message delivery is subject to your mobile carrier's terms and conditions
• We register our messaging campaigns with carriers as required
• Standard message and data rates from your carrier apply

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Information

We never sell, rent, or trade your personal information to third parties for marketing purposes.

4.2 Service Providers

We may share limited information with trusted service providers who help us operate our services:

• SMS Platform Providers: To deliver text messages (phone numbers and message content only)
• Analytics Services: To improve service performance (aggregated, non-identifying data only)
• Customer Support Tools: To provide customer service (contact information and service history only)
• Security Services: To protect against fraud and abuse (necessary data only)

All service providers are contractually required to protect your information and use it only for specified purposes.

4.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal process, court orders, or government requests
• Investigate fraud, security issues, or violations of our Terms of Service
• Protect the rights, property, or safety of our users or the public
• Respond to emergency situations

4.4 Business Transfers

If our company is acquired, merged, or sold, user information may be transferred as part of that transaction. We will notify affected users and provide choices regarding their data.

5. Data Security

5.1 Protection Measures

• Encryption: All personal data is encrypted in transit and at rest
• Access Controls: Limited employee access on a need-to-know basis
• Secure Infrastructure: Industry-standard security practices and regular audits
• Regular Monitoring: Continuous monitoring for security threats and vulnerabilities

5.2 Data Retention

• Active Users: Data retained while your SMS subscription is active
• Opt-Out Records: Maintained for 4 years as required by TCPA
• Support Records: Customer service interactions retained for 2 years
• Security Logs: System logs retained for 1 year for security purposes

5.3 Data Deletion

When you opt out of SMS services, we:

• Remove your phone number from active messaging lists within 10 business days
• Retain opt-out records to prevent future unwanted messages
• Delete non-essential personal information after required retention periods
• Anonymize remaining data for analytics and compliance purposes

6. Your Privacy Rights and Choices

6.1 SMS Opt-Out

You can stop receiving SMS messages at any time by:

• Replying STOP, QUIT, END, CANCEL, UNSUBSCRIBE, OPT OUT, or REVOKE to any message
• Emailing us at support@spontaneousworks.io
• Contacting customer support

6.2 Access and Correction

You have the right to:

• Access the personal information we have about you
• Correct inaccurate or incomplete information
• Update your preferences and settings
• Request information about how your data is used

6.3 Data Portability

You can request a copy of your personal data in a commonly used, machine-readable format.

6.4 Account Deletion

You can request complete deletion of your account and associated data, subject to legal retention requirements.

7. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal information from minors. If we discover that we have collected information from a child under 18, we will delete it immediately. Parents who believe their child has provided information to us should contact us at support@spontaneousworks.io.

8. International Users

Our SMS services are currently available only in the United States. If you access our website from outside the US, please note that your information may be transferred to and processed in the United States, where privacy laws may differ from your home country.

9. Third-Party Links and Services

Our communications may include links to Disney's official booking platforms and other third-party services. This Privacy Policy does not apply to those external sites. We encourage you to review the privacy policies of any third-party services you use.

10. Cookie and Tracking Technology Policy

Our website uses:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: To understand website usage (with your consent)
• No Advertising Cookies: We do not use cookies for targeted advertising

You can control cookie settings through your browser preferences.

11. California Privacy Rights

California residents have additional rights under the CCPA, including:

• Right to know what personal information is collected and how it's used
• Right to delete personal information (subject to legal exceptions)
• Right to opt out of the sale of personal information (we don't sell information)
• Right to non-discriminatory treatment when exercising privacy rights

To exercise these rights, contact us at support@spontaneousworks.io with "California Privacy Rights" in the subject line.

12. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify users of material changes through:

• SMS notification to active users
• Email notification
• Prominent notice on our website

Continued use of our services after changes constitutes acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or to exercise your privacy rights, please contact us: