Privacy Policy

1. Introduction

This Privacy Policy describes how spotaslot.com ("we," "us," or "our") collects, uses, and protects your personal information when you use our scheduling and booking service ("Service"). We are committed to ensuring your privacy and protecting your personal data.

By using our Service, you agree to the collection and use of your information as described in this Privacy Policy, which, along with our Terms of Service, forms your agreement with us.

2. Data Collection

We collect the following types of information when you use our Service:

• Personal Information: Name, email address, phone number, and any other information you provide during the booking process.
• Booking Information: Details about the appointments or bookings you schedule through our Service, including dates, times, and information from third-party integrations.
• Technical Information: IP address, browser type, device type, and usage data.
• Third-party Integrations: Data from integrations like Zoom, Google Calendar, Microsoft Teams, including meeting and participant details.

3. Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: You explicitly consent to certain data uses (e.g., email notifications).
• Contractual Necessity: To fulfill obligations under our Terms of Service (e.g., managing bookings).
• Legal Obligation: To comply with applicable laws (e.g., data retention for tax and legal purposes).

4. Data Usage

We use your data for the following purposes:

• To provide, maintain, and enhance our Service.
• To manage bookings and scheduling effectively.
• To communicate with you about bookings and important updates.
• To ensure security and integrity of our Service.
• To facilitate third-party integrations strictly for scheduling purposes.

5. Data Sharing

We may employ third party companies and individuals to facilitate our Service, provide Service on our behalf, perform Service-related services or assist us in analysing how our Service is used. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

We use the following third-party services to provide our Service:

• Resend.com for email communications.
• AWS Amazon for SMS notifications.
• Third-party Integrations: Zoom, Google Calendar, Microsoft Teams, solely for booking facilitation.

We never sell or use your data for unauthorized marketing purposes. Data may be disclosed if legally required by public authorities.

6. International Data Transfers

Personal data transferred outside the European Economic Area (EEA) is protected by Standard Contractual Clauses approved by the European Commission.

7. Data Storage and Retention

We store your data securely within the EU and retain it as long as necessary to provide our Service, fulfill legal and contractual obligations, or until deletion is requested by you. Typically, booking-related data is retained for up to 12 months post-booking unless required otherwise by law.

8. Your Rights Under GDPR

If located in the EEA, you have the following rights regarding your personal data:

• Access: Request access to your personal data.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request the deletion of your data, subject to certain legal obligations.
• Objection and Restriction: Object to or restrict data processing.
• Data Portability: Request data portability.
• Withdrawal of Consent: Withdraw consent at any time.
• Complaint: Lodge a complaint with your local data protection authority.

To exercise any of these rights, please contact us at [email protected]. Identity verification may be required for processing.

9. Cookies and Tracking

We use cookies that are essential to the operation of our Service. These cookies are necessary for the basic functionality of our website and cannot be turned off in our system. They include cookies that:

• Maintain your session while you use our Service.
• Enable secure log-ins.
• Remember your preferences (e.g., language settings).

10. Security Measures

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or destruction. These measures include encryption, secure EU-based storage, regular security audits, and controlled data access.

11. Children's Privacy

Our Service is not intended for children under 16 years. We do not knowingly collect personal data from anyone under this age. If you are aware of any child providing data to us, please contact us immediately.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. All changes will be communicated clearly and posted on this page.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].