Privacy Policy
Last updated: February 22, 2026
1. Introduction
SlotSync ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS booking and business management platform ("Service").
By using SlotSync, you agree to the collection and use of information in accordance with this policy.
2. Information We Collect
2.1 Account Information
When you register, we collect your name, email address, business name, and optionally your phone number. If you sign in with Google, we receive your name, email, and profile picture from Google.
2.2 Business Data
As a business user, you may store client records, appointment data, service details, staff information, invoices, and other business information within the platform. You are the data controller for your client data; we act as a data processor on your behalf.
2.3 Usage Data
We automatically collect information about how you interact with the Service, including pages visited, features used, browser type, IP address, and device information. This helps us improve the platform.
2.4 Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising cookies.
3. How We Use Your Information
- To provide, operate, and maintain the Service
- To authenticate your identity and manage your account
- To send appointment reminders and notifications on your behalf
- To process payments and manage billing
- To provide customer support and respond to inquiries
- To improve and develop new features for the platform
- To send important service updates and security alerts
- To comply with legal obligations
4. Data Sharing & Third Parties
We do not sell your personal data. We may share data with:
- Supabase — our database and authentication provider, which hosts your data securely
- Vercel — our hosting provider, which serves the application
- Stripe — for payment processing (if enabled by the business)
- Email providers — to deliver transactional emails such as appointment confirmations and reminders
- Law enforcement — if required by law or legal process
5. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption in transit (TLS/HTTPS) and at rest
- Row-level security (RLS) for strict tenant data isolation
- AES-256-GCM encryption for sensitive credentials (e.g., SMTP passwords)
- Regular security audits and updates
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete your data within 30 days, except where retention is required by law.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access, correct, or delete your personal data
- Export your data in a portable format
- Object to or restrict certain processing activities
- Withdraw consent where processing is based on consent
To exercise any of these rights, please contact us at privacy@slotsync.app.
8. GDPR Compliance
For users in the European Economic Area (EEA), we process personal data under the following legal bases: performance of a contract, legitimate interest, compliance with legal obligations, and consent where applicable. Data is stored in secure EU or US data centres operated by our infrastructure providers.
9. Children's Privacy
SlotSync is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
Email: privacy@slotsync.app