Who we are

Superspace is booking and business software for studios, event halls and other spaces. We are based at 27 Admiralty Way, Lekki, Lagos, Nigeria. This policy covers superspaceapp.com, the Superspace dashboard, the Showcase booking pages we host for studios, and the emails and payment pages that come with them.

We handle personal data in two roles:

For studio owners and their teams, we decide how your account data is used, so we are responsible for it under the Nigeria Data Protection Act 2023.
For people who book a studio through its Showcase page, a payment link or at its front desk, the studio decides what it collects and why. We store and process that data on the studio's behalf. If you booked a studio, contact the studio about your data first; we will help them answer you.

What we collect

When you create and run a studio account

Your name, email address, phone number and password.
Your studio's details: business name, address, spaces, photos, prices, opening hours, policies and the bank account your payouts go to.
The names, roles and email addresses of team members you invite, and what each of them does in the dashboard.

When you verify your identity

Before a studio can publish spaces and take payments, we verify who runs it. For an individual we collect your legal name, date of birth, National Identification Number (NIN), phone number and residential address. For a registered business we also collect the business name and CAC registration number. We use these only to confirm your identity and your business, prevent fraud, and meet our legal obligations.

When someone books a studio

The customer's name, email address and phone number.
The booking itself: the space, date, time, number of guests, purpose, add-ons and any notes the customer or the studio adds.
Messages between the customer and the studio sent through Superspace.
Payment records: amount, method, status and reference.

Card payments, bank transfers and payouts are processed by Paystack. We receive confirmation that a payment succeeded, its amount and reference; we never see or store full card numbers.

When you visit our website or try the demo

The email address you enter to open the interactive demo.
How you use the site: pages viewed, buttons clicked in the demo, the website or ad that sent you (including ad tags such as utm, gclid and fbclid), your browser, device and approximate location from your IP address.
Error reports when something breaks, so we can fix it. These are set up not to include your name, email or other personal details by default.

How we use it

To provide Superspace: run your account, take and manage bookings, process payments and payouts, send booking confirmations and reminders, and show your Showcase page. We rely on our contract with you.
To verify identities and prevent fraud, and to keep the records that tax, financial and anti-money-laundering laws require. We rely on our legal obligations and our legitimate interest in keeping Superspace safe.
To support you when you write to us, and to tell you about changes to your account, plan or this policy.
To improve Superspace: understand which features are used, find and fix errors, and measure whether our ads and website work. We rely on our legitimate interests.
To send product news and offers, including after you try the demo. You can unsubscribe from any marketing email with the link at the bottom of it.

We do not sell personal data, and we do not use studios' customer data to market to those customers.

We share personal data only with the people and services that need it to do their part:

The studio you book with, which sees your booking, contact details and messages.
Paystack, for card payments, bank transfers, virtual accounts and payouts.
Identity verification partners, to check NIN and CAC details against official records.
Cloudflare, which hosts and protects our website.
Resend, which delivers our emails and stores demo sign-ups.
Ably, which delivers live notifications in the dashboard.
Sentry, which records errors so we can fix them.
Google (Tag Manager and Analytics), Microsoft Clarity and advertising platforms such as Google Ads and Meta, to understand how people use our website and whether our ads work.
Marketplaces you connect in Channels, which receive the spaces you choose to publish there.

Each provider may use the data only to provide its service to us. We may also disclose data when the law requires it, to protect people from harm or fraud, or to a buyer if Superspace is ever sold or merged, under the same protections as this policy.

Transfers outside Nigeria

Some of the providers above store or process data outside Nigeria. When that happens we rely on the safeguards the Nigeria Data Protection Act allows, such as the provider's contractual commitments to protect the data to the same standard.

Cookies and analytics

We use your browser's storage to keep you signed in and to remember settings, such as your email on the demo so you don't have to enter it twice. Superspace does not work without these.

Our website also loads Google Tag Manager, which can set cookies for Google Analytics, Microsoft Clarity and advertising platforms. You can block or delete cookies in your browser's settings at any time; signing in to the dashboard will still work.

How long we keep it

We keep account and booking data for as long as the studio's account is open. When a studio closes its account, we delete or anonymise its data, except records the law requires us to keep for longer, such as payment, tax and identity verification records. Website analytics are kept in aggregate.

How we protect it

Everything sent to and from Superspace is encrypted in transit. Identity verification details are encrypted when stored. Inside a studio, roles and permissions decide which team members can see customers, payments and settings. No system is perfectly secure; if a breach affects your data, we will tell you and the Nigeria Data Protection Commission as the law requires.

Your rights

Under the Nigeria Data Protection Act you can ask us to:

give you a copy of the personal data we hold about you;
correct data that is wrong or incomplete;
delete your data, unless we must keep it by law;
stop or limit how we use it, or object to a use based on our legitimate interests;
send your data to you or another service in a common format;
withdraw a consent you gave, such as to marketing emails.

Email support@superspaceapp.com from the address on your account and we will reply within the time the law allows. You can also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

Children

Superspace is for businesses and adults. Studio accounts are for people aged 18 or over, and we do not knowingly collect data from children.

Changes to this policy

When we change this policy we update the date at the top. If a change affects how we use your data in a meaningful way, we will tell studio owners by email or in the dashboard before it takes effect.

Contact us

Questions about this policy or your data: email support@superspaceapp.com, or write to Superspace, 27 Admiralty Way, Lekki, Lagos. You can also reach us through the contact page.