Draft — not yet reviewed by a lawyer
At signup: your name, business name, email address, phone number if you give one, your timezone, and how you found us. We record the date you accepted these terms and whether you opted in to marketing email.
While you use the platform: your client and appointment records, and a log of significant account actions such as signing in, connecting an integration or changing a password.
Passwords are hashed with scrypt and a per-account random value. We cannot read your password, and we will never ask you for it.
The platform runs on third-party hosting and database infrastructure, and uses a customer-relationship provider to deliver messaging and booking features. These providers process data on our instructions. We do not sell personal data.
Name each processor here, and their location, before launch. This is a requirement under GDPR and similar laws.
A single cookie keeps you signed in. It is not used for advertising.
You can ask for a copy of your data, ask for it to be corrected, or ask for your account and data to be deleted. You can withdraw marketing consent at any time without affecting your subscription.
Add the contact address for these requests and the response deadline your jurisdiction requires.
Retention periods must be stated here — how long an account survives after cancellation, and how long logs are kept.
Add the data controller name, address and contact email.