01 Summary
- We never sell or rent personal data.
- Your clients' booking data belongs to you; we process it only to deliver your bookings.
- Calendar access is limited to reading busy times and writing the events Slotwise creates.
- You can export or delete your data at any time.
02 Who is responsible
For account, billing and website data, Slotwise Ltd. is the data controller. For data your clients enter when booking with you, you are the controller and Slotwise acts as your processor under our Data Processing Addendum, available on request by email.
03 What we collect
From account holders
- Name, email address, business name, time zone and password hash.
- Billing details processed by Stripe; we store only the card brand, last four digits and expiry.
- Services, availability rules, booking page content and settings.
From people who book
- Name, email, optional phone number for SMS reminders, and answers to any intake questions you add.
- Appointment time, service and payment status.
Automatically
- Log data such as IP address, browser type and pages visited, used for security and reliability.
- Privacy-friendly, cookie-less product analytics in aggregate form.
04 How we use it
- To provide the Service: show availability, create bookings, send confirmations and reminders.
- To bill you and prevent fraud.
- To answer support requests and send important service notices.
- To improve the product using aggregated, de-identified usage statistics.
- To send product updates, only if you opt in. You can unsubscribe in one click.
Our legal bases are performance of a contract, our legitimate interests in running a secure service, compliance with legal obligations and, for marketing, your consent.
05 Calendar data
When you connect Google Calendar, Microsoft 365 or iCloud, Slotwise reads free/busy information to prevent double bookings and writes the events it creates. We do not read event descriptions or attendee lists of other events, and we do not use calendar data for any purpose other than scheduling. Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect a calendar at any time, which revokes our access immediately.
07 Retention
We keep account data while your account is active. After you close your account, data is deleted within 30 days, and removed from backups within a further 60 days. Invoices are kept as long as tax law requires.
08 Security
Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access to production systems is limited to staff who need it, protected by multi-factor authentication and logged. If we become aware of a breach affecting your data, we will notify you without undue delay.
09 Your rights
Depending on where you live, including under the GDPR and the CCPA, you can request access to, correction, deletion or a portable copy of your personal data, and object to or restrict certain processing. Email support@slotwise.us.ci and we will respond within 30 days. If you booked with a Slotwise customer, please contact that business first; we will help them fulfil your request. You may also complain to your local data protection authority.
11 Changes
If we make material changes to this policy we will email account holders at least 14 days before they take effect and update the date at the top of this page.
12 Contact
For any privacy question or request, write to support@slotwise.us.ci.
Still have questions?
Email our support team at support@slotwise.us.ci. A real person replies within one business day.
Hours: Monday to Friday, 9:00 to 18:00 (UTC+7)