Who we are
SPOON is software for hospitality marketing teams: it plans social content, keeps ad accounts in view and reports per venue. SPOON is made and run by Nitro B.V., Herengracht 71, Amsterdam, the Netherlands. In this policy, “we” and “us” refer to Nitro B.V. as the company behind SPOON.
This policy covers the SPOON workspace, the SPOON apps on Meta, TikTok and Google, and this website. Questions go to info@nitroamsterdam.nl.
Our role
For the accounts our customers manage, we work on their behalf. SPOON’s customers are agencies and hospitality groups. They decide which venues, ad accounts, social accounts and photo folders are connected. For that data the customer is the controller and we are the processor under the GDPR. We only process it on their instructions, under a data processing agreement.
For our own relationships, we are the controller. That covers the people who sign in to SPOON, people who ask for a demo, and visitors to this website.
What we collect
From people who use SPOON
- Name, work email address, role and the workspace you belong to.
- Sign-in times, and which parts of the workspace are used and for how long. Admins of a workspace can see this for their own team.
- What you add in SPOON: plans, captions, comments, approvals, tasks, briefs and reports.
From accounts a business connects
Only the accounts a business chooses to connect, and only the parts listed in the next section. SPOON never reads direct messages, never reads the content of comments, and does not collect information about the people who follow, like or comment on a post.
From this website
- What you fill in on the demo form: name, work email, company, number of venues, what you need help with and your message.
- Our hosting provider keeps standard server logs, such as IP address and browser, for a short time to keep the site secure.
This website uses no analytics or tracking cookies.
Data from Meta, TikTok and Google
Meta: Facebook and Instagram
For the ad accounts, Facebook Pages and Instagram professional accounts a business connects, SPOON reads:
- Ad accounts: name, ID, currency and time zone; campaigns, ad sets and ads with their status, budget and schedule; the creatives (images, videos and text); daily spend and results as Meta reports them, such as impressions, clicks and reservations.
- Pages and Instagram accounts: name, username, profile picture and follower count; posts, reels, carousels and stories with their captions, media, links and dates; insights such as reach, views, likes, number of comments, saves, shares, profile visits and follows.
- Public ads from Meta’s Ad Library, to compare a venue’s ads with others nearby.
SPOON can also make changes on these accounts, but never on its own:
- Pause or restart an ad, or change a budget, when someone on the agency’s team does so in the workspace.
- Publish a post at its planned time, after it was approved, and only for accounts where the business has switched publishing on.
TikTok
When a business connects a TikTok ad account or TikTok account, SPOON reads:
- Ad accounts: advertiser name and ID; campaigns, ad groups and ads with their status and budget; daily spend and results as TikTok reports them.
- TikTok accounts: display name, profile picture and account ID; the account’s videos with their captions, cover images and dates; their counts of views, likes, comments and shares.
SPOON publishes a video to TikTok only when the account owner has given permission, the video was approved in the workspace and publishing is switched on for that account.
- Google Drive: the photo and video folders a business shares with SPOON, read-only. SPOON keeps a small preview of each file and its name and dates. It never changes or deletes files in Drive.
- Google Ads: the accounts under the agency’s manager account, read-only: campaigns, spend and the conversion the business counts as a reservation.
SPOON’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What we never do with platform data
- We use it only to provide SPOON to the business that connected the account.
- We do not sell it, rent it out or share it with data brokers.
- We do not use it for advertising, to target people or to build profiles of people.
- We do not use it to train models, and we do not use one customer’s data for another customer.
- We delete it when the account is disconnected or the business asks us to, as described under How long we keep it and on the data deletion page.
What we use it for
- To show each venue’s ad results, spend and cost per attributed reservation, and to flag what needs attention.
- To label photos and videos, so a month’s plan uses the right images and doesn’t repeat itself.
- To plan posts in the mix, look and voice a venue already uses, and to draft captions the team then edits and approves.
- To publish approved posts, and to carry out the ad changes a team member makes in the workspace.
- To make monthly reports for venues.
- To send emails about tasks, approvals and deadlines, which each person can switch off in their settings.
- To keep SPOON secure, fix problems and see which parts are used.
- To answer demo requests.
For our own relationships we rely on the contract with you (to provide your account), our legitimate interest (security, usage and answering a demo request you sent) and legal obligations (keeping invoices).
Drafts and labels
To describe photos and videos and to draft captions, SPOON sends the image, or the text of earlier captions and the brief, to Anthropic’s language and vision models. Labels are made from those descriptions by TypeSafe AI. Anthropic does not use this data to train its models.
Labels say what a photo shows, such as a dish, inside or outside, the season, and whether people are in it. SPOON does not recognise faces or identify who is in a photo.
Every draft is checked by a person, and nothing is published without approval. SPOON makes no decisions about people that have legal or similarly significant effects.
Outside the EU
The database and the workspace run in Frankfurt. Where a provider handles data outside the European Economic Area, the transfer is covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.
How long we keep it
- Workspace data, including everything read from connected accounts: for as long as the customer’s contract runs. Within 30 days after it ends we delete the workspace, after an export if the customer asks for one.
- Data from an account that is disconnected, or that a business asks us to delete: deleted within 30 days.
- Sign-in and usage records: for as long as the person’s account exists.
- Demo requests: up to 12 months if no customer relationship follows.
- Invoices and contracts: 7 years, as Dutch tax law requires.
- Backups are kept for 7 days, so deleted data is also gone from backups 7 days later.
Security
- Data is encrypted in transit and at rest.
- Each workspace only sees its own organisation’s data; this is enforced in the database itself.
- Keys for Meta, TikTok and Google are kept as server-side secrets and never reach the browser.
- Only people on the agency’s team can change ads, and only admins decide who has access.
- A full backup is made every day.
Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it, to limit or object to how we use it, and to get a copy in a common format. Email info@nitroamsterdam.nl and we answer within a month.
If your data is in an agency’s workspace, that agency decides about it; we pass your request on and help them answer it. To remove a Facebook, Instagram, TikTok or Google account and its data from SPOON, see the data deletion page.
You can also complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.
Children
SPOON is made for businesses and is not meant for anyone under 16.
Changes
When this policy changes we post the new version here with a new date. If a change affects how customer data is used, we email customers before it takes effect.
Contact
Nitro B.V., Herengracht 71, Amsterdam, the Netherlands. Email info@nitroamsterdam.nl.