Privacy policy

Last updated: 3 November 2026

This privacy policy explains how Skuka Solutions Private Limited (“SpotX”, “we”, “us”), a company registered in Mohali, Punjab, India, collects and uses personal data through spotx.in, the SpotX platform, the SpotX player apps and the SpotX Player (together, the “Services”). We act as a Data Fiduciary under India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and follow the Information Technology Act, 2000 and the rules made under it.

In short

• We collect what you give us (such as your name, work email and company), and technical data from your screens and players.
• We use it to run SpotX, reply to you and keep the Services secure. We don’t sell personal data.
• Audience detection gives aggregated, anonymous insights. It doesn’t identify or record individuals.
• SpotX platform data is stored in India.
• You can access, correct or erase your data, withdraw consent, and raise a grievance at any time.

1. Who we are

SpotX is a cloud digital signage platform made by Skuka Solutions Private Limited. For questions about this policy, see section 15.

2. What we collect

Data you give us

• Enquiries. When you book a demo, start a trial or apply to become a partner: your name, work email, company, phone number, number of screens, industry, your message and the page you sent it from.
• Accounts. Names, email addresses, phone numbers, roles and permissions of the people on your team, and login credentials (stored in protected form).
• Billing. Billing contact, company name and address, GSTIN and payment records. Card and bank details are handled by our payment providers; we don’t store full card numbers.
• Support. What you tell us in support tickets, emails and calls.

Data collected automatically

• Screens and players. Device identifiers, model, operating system, IP address, network status, playback logs, screen status and connection history.
• Platform usage. Log-ins, actions in the dashboard, and audit logs of changes made by your users.
• Website. Anonymous performance measurements of spotx.in (see section 6).

We don’t ask for sensitive personal data such as health, financial account or biometric information, and we ask you not to upload it to SpotX.

3. How we use your data

• To create and manage accounts and give your team access.
• To deliver the Services: publish content, schedule campaigns, monitor screens and produce reports.
• To reply to enquiries, run demos, trials and partner applications, and provide support.
• To bill you, process payments and keep tax and accounting records.
• To send service messages, such as alerts, security notices and changes to these terms.
• To send news and offers about SpotX, where you’ve agreed. Every marketing email has an unsubscribe link.
• To keep the Services secure, prevent fraud and misuse, and fix problems.
• To understand how the Services are used so we can improve them, using aggregated data where we can.
• To meet legal obligations and respond to lawful requests from authorities.

4. Consent and legitimate uses

We process personal data on the basis of your consent, or for a legitimate use permitted by section 7 of the DPDP Act, such as data you’ve voluntarily given us for a specific purpose, meeting a legal obligation, or responding to an emergency. Where we rely on consent, you can withdraw it at any time by emailing business@spotx.in. Withdrawing consent doesn’t affect processing that already took place, but we may no longer be able to provide some Services.

5. Who we share it with

We don’t sell or rent personal data. We share it only as follows:

• Service providers (Data Processors) who work on our behalf under contract: cloud hosting, website hosting (Vercel), email delivery (Resend), our CRM (Pipedrive), business tools (Google Workspace), payment providers and support tools. They may use the data only to provide their service to us.
• Partners. If you came to SpotX through a reseller or integrator, we may share the details needed to set up and support your account with that partner.
• Business transfers. If we are involved in a merger, acquisition or sale of assets, data may pass to the new owner, who must keep protecting it under this policy.
• Legal requirements. When the law, a court order or a government authority requires it, or to protect the rights, property or safety of SpotX, our customers or others.

6. Cookies and analytics

spotx.in uses Vercel Speed Insights to measure how fast pages load. It doesn’t use cookies or identify you. We don’t use advertising cookies or sell browsing data. The SpotX dashboard uses essential cookies to keep you logged in; you can block cookies in your browser, but the dashboard won’t work without them.

7. AI features

Audience detection

If a customer turns on audience detection, a camera at the screen is used to estimate audience presence, attention, dwell time and broad demographics. The video is analysed on the fly; SpotX doesn’t store images or video of people, doesn’t identify individuals, and keeps only aggregated, anonymous counts. Customers who use audience detection must tell visitors, for example with signage at the location.

AI assistant and content generation

When you use AI features to create content, plan schedules or summarise performance, we process your prompts, the content you select and the related account data to produce a result. Some AI features may use third-party AI model providers acting on our behalf. Don’t include personal data in prompts unless you need to. AI output can be wrong, so review it before it goes on screen.

8. Where your data is stored

SpotX platform data is stored in India. Some service providers listed in section 5, such as email and CRM tools, may process enquiry and contact data outside India. We transfer data abroad only as permitted under the DPDP Act and never to a country the Government of India has restricted.

9. How long we keep it

• Account and platform data: while your account is active, then up to 90 days so you can export it, after which we delete or anonymise it.
• Enquiries from people who don’t become customers: up to 24 months after our last contact.
• Invoices and tax records: as long as Indian tax and company law requires (usually 8 years).
• Audit and security logs: up to 12 months, unless needed for an investigation.

When you withdraw consent or the purpose is complete, we erase personal data unless the law requires us to keep it.

10. How we protect it

We use reasonable security practices in line with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011: role-based access, approval workflows, audit logs, and access limited to staff who need it. No system is completely secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected people as the DPDP Act requires.

11. Children

SpotX is a business service for people aged 18 and over. We don’t knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

12. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and how we use it, and who we have shared it with;
• ask us to correct, complete, update or erase it;
• withdraw your consent;
• nominate another person to exercise your rights if you die or become unable to; and
• raise a grievance with us, and if you’re not satisfied, complain to the Data Protection Board of India.

Email business@spotx.in to make a request. We may need to confirm your identity first, and we will respond within the time the law allows. Account users can also update most details directly in the dashboard.

13. Customer data we process for you

Customers decide what content goes on their screens and who uses their account. For content and data that customers upload or create in SpotX, we process it on the customer’s instructions, and the customer is responsible for having the right to use it. If you’re a visitor or employee at a customer’s location, please contact that business first; we’ll help them respond.

14. Changes to this policy

We may update this policy as the Services or the law change. We’ll change the date at the top, and for significant changes we’ll tell account holders by email or in the dashboard before they take effect.

15. Grievance officer and contact

For questions, requests or complaints about personal data, contact our Grievance Officer. We acknowledge grievances within 24 hours and aim to resolve them within 15 days.

Grievance Officer, Skuka Solutions Private Limited
3BHK, 6th Floor, Zone 1, Presidential Tower, Site No. 252, Chandigarh Sector 67, Rupnagar, SAS Nagar, Mohali, Punjab – 160062, India
Email: business@spotx.in (subject: “Grievance”) · Phone: +91 99887 77549