Trusted by 120,000+ IT professionals across 180+ countries

Privacy & Security Policy

Effective date: 2026.09.10  ·  Last updated: 2026.09.10

SPOTO (“SPOTO”, “we”, “us”) operates www.spoto.net and provides IT certification training, courseware, and related services. This policy explains what personal information we collect, why we collect it, how we protect it, and the rights you have over it.

If you do not agree with this policy, please do not use our website or services.

1. Who we are and how to reach us

2. Information we collect

You give us directly
  • Account data: name, email address, password (stored hashed), phone number, country/region.
  • Order and billing data: mailing address, billing address, purchase history, and payment card details.
  • Support data: messages you send through Live Support, email, WhatsApp, or ticket forms, including any attachments.
  • Marketing data: your subscription preferences for promotions and newsletters.
We collect automatically
  • Device and usage data: IP address, browser type, operating system, device identifiers, pages viewed, referring URLs, and timestamps.
  • License and activation data: the IP addresses and device identifiers associated with installations of SPOTO software (see Section 7).
  • Cookies and similar technologies: see Section 6.
Payment card notice
Card details are collected and processed directly by our payment providers (PayPal / Stripe / other). SPOTO does not store full card numbers on its own servers; we retain only the last four digits and the card brand for order reconciliation and refunds.

3. Why we use your information and our legal basis

PurposeLegal basis (GDPR)
Create and maintain your account; authenticate loginsPerformance of a contract
Process orders, payments, refunds, and deliver coursewarePerformance of a contract
Provide customer support and respond to enquiriesPerformance of a contract / legitimate interests
Prevent license abuse, fraud, and unauthorized redistributionLegitimate interests
Send promotional emails and membership offersConsent (withdrawable at any time)
Improve our website, courses, and services through analyticsLegitimate interests / consent where required
Meet tax, accounting, and other legal obligationsLegal obligation

We do not sell your personal information, and we do not use it for automated decision-making that produces legal or similarly significant effects.

4. When we share information

We never sell, rent, or trade your personal information. We share it only in these situations:

  • Service providers acting on our instructions — payment processors, email and CRM platforms, hosting and CDN providers, live-chat and analytics vendors. They may use your data only to perform services for us, are bound by written contracts and confidentiality obligations, and must delete or return the data when the engagement ends.
  • With your permission — when you ask us to share information with a third party.
  • Where sharing is necessary to deliver what you requested — for example, passing your shipping address to a courier.
  • Legal and safety reasons — to comply with a valid legal request, enforce our Terms of Service, protect our intellectual property, or investigate fraud, license abuse, or threats to the rights and safety of others.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, with notice to you and continued protection under this policy.

5. Your account and password

You choose a password when you register. Keep it confidential and do not reuse it across other sites. If you forget it, use the “Forgot password” link or contact support@spoto.net to reset it.

Notify us immediately if you believe your account has been accessed without authorization. To the fullest extent permitted by applicable law, SPOTO is not liable for losses arising from your failure to safeguard your own login credentials — but this limitation does not apply where the loss results from our own security failure, nor does it limit any liability that cannot lawfully be excluded.

6. Cookies and analytics

We use cookies and similar technologies to keep you signed in, remember your cart and preferences, measure site performance, and — where you consent — support advertising measurement. Categories in use: strictly necessary / functional / analytics / advertising. Analytics and advertising providers currently in use: Google Analytics, Meta Pixel, etc.

You can manage non-essential cookies through our cookie banner or your browser settings at any time. Blocking strictly necessary cookies may prevent parts of the site from working.

7. IP addresses and software licensing

SPOTO software licenses permit installation on a limited number of devices (currently one). To enforce this, we record the IP addresses and device identifiers used to activate and run the software.

If we observe activation patterns that suggest a license is being shared or redistributed — for example, frequent activations from widely dispersed IP addresses — we will contact you first to verify legitimate use. Where the evidence indicates a breach of our Terms of Service, we may suspend the license. You may contest any suspension by writing to support@spoto.net, and we will review the decision with a human reviewer.

8. How long we keep your information

  • Account data: for as long as your account is active, plus 12 months after closure.
  • Order and invoice records: 7 years, to meet tax and accounting requirements.
  • Support correspondence: 24 months from the date of the last message.
  • Marketing data: until you unsubscribe, plus a suppression record so we do not contact you again.
  • License activation logs: 24 months.

We delete or irreversibly anonymize personal information once these periods expire.

9. International transfers

SPOTO operates from China and uses service providers located in Singapore. When we transfer personal information out of the EEA, the UK, or other regions with transfer restrictions, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, together with additional technical and organizational measures. You may request a copy of the relevant safeguards at support@spoto.net.

10. Your rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and receive a copy;
  • correct information that is inaccurate or incomplete;
  • delete your information, subject to our legal retention obligations;
  • object to or restrict certain processing, including direct marketing;
  • receive your data in a portable, machine-readable format;
  • withdraw consent at any time, without affecting processing that already took place;
  • lodge a complaint with your local data protection authority.

California residents additionally have the right to know the categories of personal information collected, disclosed, or sold, the right to delete, the right to correct, and the right not to be discriminated against for exercising these rights. SPOTO does not sell or share personal information as those terms are defined under the CCPA/CPRA.

To exercise any right, email support@spoto.net. We will verify your identity and respond within 30 days (or the shorter period your local law requires). Exercising your rights is free of charge.

11. How we protect your information

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the data, including TLS encryption in transit, encryption of sensitive data at rest, salted password hashing, role-based access controls, least-privilege access for staff, PCI-DSS-compliant payment processing through our providers, and regular review of our security practices.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach occurs that is likely to result in a high risk to your rights, we will notify you and the relevant supervisory authority without undue delay and within the time limits set by applicable law.

12. Children’s privacy

Our services are intended for professionals aged 18 and over. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact support@spoto.net and we will delete it promptly.

13. Third-party links

Our site may link to third-party websites, forums, and training resources. We are not responsible for their privacy practices, and this policy does not apply to them. Please review the privacy policy of any site you visit.

14. Changes to this policy

We review this policy regularly and update it as our services change. The “Last updated” date at the top always reflects the current version. If we make a material change — for example, a new purpose for processing or a new category of recipient — we will notify you by email or a prominent notice on our site before it takes effect, and where the law requires it, we will ask for your consent.

15. Contact us

Questions, requests, or complaints about privacy: support@spoto.net

If you are not satisfied with our response, you may contact your local data protection authority.