About Slotsync

Slotsync is a scheduling and booking platform that helps businesses manage appointments, services, and client communications. Slotsync is a venture by Tech Heimer. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use our platform at slotsync.co.

1. Information We Collect

We collect the following personal data:

Name — Collected during signup (service providers) and during booking (clients).
Email address — Collected during signup and booking for account management and transactional communications.
Phone number — Collected (with country code) when clients provide it during the booking process. Used solely for WhatsApp notifications if the client has opted in.
Booking details — Service name, date, time, duration, notes, and status of appointments.
Business information — Business name, category, website URL, and referral source collected during signup.
Profile information — Profile picture, timezone, and booking page preferences.
Calendar data — We access your calendar events (via Google Calendar or Outlook) solely to check availability and prevent double bookings. We do not store the content of your calendar events.
Usage data — Basic analytics such as pages visited and features used to improve the product (via Vercel Analytics).

2. How We Use Your Information

To provide and maintain the Slotsync scheduling and booking service.
To send booking confirmations, reminders, and cancellation notifications via email.
To send transactional WhatsApp messages such as booking confirmations, reminders, and updates. Users only receive these messages after providing explicit consent during the booking process.
To sync with your connected calendars and prevent scheduling conflicts.
To process payments through our payment provider (Razorpay).
To improve our product and user experience.

3. WhatsApp Messaging

We use WhatsApp to send transactional messages such as booking confirmations, reminders, and updates. Users only receive these messages after providing explicit consent during the booking process.

Consent: WhatsApp messages are only sent to clients who explicitly opt in by checking the "I agree to receive updates on WhatsApp" checkbox when booking. No messages are sent without prior consent.
Message types: Booking confirmations, appointment reminders, cancellation notices, and pending booking alerts. All messages are transactional and booking-related only.
Data shared with Meta: Only the client's phone number and message template parameters (name, service name, date, time) are transmitted to Meta for message delivery via the WhatsApp Business Cloud API.
Opt-out: Users can opt out of WhatsApp communications at any time by contacting support@slotsync.co or by not selecting the opt-in checkbox on future bookings. Service providers can disable WhatsApp notifications from their account settings.
No marketing: We do not send promotional, marketing, or advertising messages via WhatsApp.

4. Data Sharing

We do not sell your personal data. We may share data with trusted third-party service providers such as Supabase (database services), Vercel (hosting), and Meta (WhatsApp messaging) to operate our platform. Specifically:

Supabase — Database hosting, user authentication, and secure data storage.
Vercel — Application hosting, deployment, and web analytics.
Meta (WhatsApp Business Cloud API) — Sending WhatsApp booking notifications to clients who have opted in. Phone numbers are transmitted to Meta solely for message delivery.
Resend — Transactional email delivery (booking confirmations, reminders, welcome emails).
Google & Microsoft — Calendar APIs for availability sync and preventing double bookings.
Razorpay — Payment processing for subscription plans.
Your clients: Your public booking page displays your name, services, and availability to anyone with the link.

5. Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure authentication (OAuth 2.0), and access-controlled databases. Your calendar tokens are stored encrypted and are never exposed to third parties.

6. Data Retention

We retain user data only as long as necessary to provide our services and comply with legal obligations. When you delete your account, all personal data — including bookings, services, team settings, contacts, and your public booking page — will be permanently deleted within 7 days.

7. Data Deletion

Users can request deletion of their data by contacting support@slotsync.co or through account settings. You can also visit our data deletion page for more information. All personal data will be deleted within 7 days of the request.

8. Your Rights

You can:

Access, update, or delete your account data from the Settings page.
Permanently delete your account and all associated data directly from Settings.
Disconnect calendar integrations at any time.
Request a full export of your data by contacting us.
Opt out of WhatsApp messages by not selecting the opt-in checkbox during booking, or by contacting support@slotsync.co.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notice.

11. Contact

If you have questions about this privacy policy or wish to exercise any of your rights, contact us at:

Email: support@slotsync.co

Website: slotsync.co

Company: Tech Heimer