Privacy Policy

1. Information Collected

1.1 Information Provided by User

• Account Information: When User registers, Company collects name, email address, company name, and billing information.
• Communications: Information User provides when contacting Company.

1.2 Information Collected Automatically

• Usage Data: Information regarding User's interaction with the Service, including API requests, errors, timestamps, features used, and IP addresses.
• Device Data: Information about the device used to access the Service, including browser type, operating system, and referring URLs.
• Log Data: Server logs recording activity related to User's use of the Service.

1.3 Information Provided by Customers

Customers using the API may provide information about:

• Humans: Individuals whose availability is being managed
• Attendees: Individuals being booked into meetings
• Metadata: Additional JSON data attached to bookings

All such information is considered the property of the Customer, and Company processes it solely on Customer's behalf.

2. Use of Information

Company uses collected information for purposes including, but not limited to:

• Providing, maintaining, and improving the Service
• Developing new features and services
• Processing transactions and sending related communications
• Monitoring and analyzing usage patterns and trends
• Detecting, preventing, and addressing technical issues or fraudulent activity
• Communicating with User regarding the Service, including updates and promotional offers
• Personalizing User experience
• Complying with legal obligations

Company may use anonymized or aggregated information for any business purpose, including research, marketing, and product development.

3. Sharing of Information

Company may share information in the following circumstances:

• 3.1 With Consent. When User has given explicit consent.
• 3.2 With Service Providers. With third-party companies that assist in operating the business, including: cloud hosting providers, payment processors, analytics providers, email communication services. Such service providers are obligated not to disclose or use information for any other purpose.
• 3.3 Legal Requirements. When required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Company, users, or others.
• 3.4 Business Transfers. In connection with a merger, acquisition, financing, or sale of assets, information may be transferred. Company will notify Users of any such change.
• 3.5 Aggregated Data. Aggregated or de-identified information that cannot reasonably identify an individual may be shared for any purpose.
• 3.6 With Customers. Information provided by Customers is accessible to them through the Service and may be shared by them according to their own policies.

4. Data Retention

• 4.1 Company retains information for as long as User's account is active or as needed to provide the Service.
• 4.2 Account Data: Upon account cancellation, Company will delete account data within 90 days, except where retention is required for legal reasons (e.g., billing records, which are retained for 7 years as required by UK law).
• 4.3 Customer Data: Information provided by Customers is retained until Customer deletes it or terminates the account. Company may delete such information sooner at its sole discretion.

5. Data Security

Company implements reasonable security measures to protect information. However, no method of transmission over the Internet or electronic storage is completely secure. Company cannot guarantee absolute security and shall not be responsible for any unauthorized access, use, or disclosure beyond its reasonable control.

6. International Data Transfers

Company is based in the United Kingdom. Information may be transferred to and processed in countries other than User's country of residence. By using the Service, User consents to such transfers.

When transferring data outside the UK or EU, Company relies on appropriate safeguards such as Standard Contractual Clauses or UK International Data Transfer Agreements.

7. User Rights and Choices

Depending on jurisdiction, User may have certain rights regarding personal information, including:

• Access to information
• Correction of inaccurate information
• Deletion of information
• Restriction or objection to processing
• Data portability

To exercise such rights, User should contact Company at hello@slotflow.dev. Company will respond within a reasonable timeframe.

If information was provided to Company by a Customer (e.g., as a Human or Attendee), User must contact that Customer directly. Company will assist Customers in responding to such requests as required by law.

8. Children's Privacy

The Service is not directed to individuals under 18. Company does not knowingly collect personal information from children. If Company learns that information from a child has been collected without parental consent, such information will be deleted. If User believes Company may have such information, please contact Company.

9. Changes to This Policy

Company may update this Policy from time to time. Material changes will be posted on the website with an updated "Last updated" date. Continued use of the Service after such changes constitutes acceptance of the updated Policy.

10. Contact Information

All inquiries regarding this Privacy Policy should be addressed to: