Privacy Policy

1. Our role

SlotNest operates the booking and business-management platform. A listed business also receives and uses information for its own appointments, customer relationships, staff scheduling, services, legal duties, and business operations. The business's own privacy notice may also apply to information it controls outside SlotNest.

2. Information we collect

• Account and identity: name, email, phone number, password credentials in protected form, profile photo, pronoun or review-avatar choice, and account role.
• Booking details: selected business, service, staff member, date, time, notes, status, accepted policy, price, discounts, cancellation activity, and review eligibility.
• Family and friends: names, relationships, email addresses, and phone numbers supplied by an account holder booking for another person.
• Business and staff: business profile, address, categories, services, prices, photos, social links, hours, staff profiles, shifts, permissions, inventory, policies, coupons, and calendar data.
• Content: reviews, owner replies, reports, customer-support messages, uploaded photos, and information submitted through forms.
• Preferences: favorite services, preferred times, saved businesses, saved coupons, notification choices, deal distance, and marketing choice.
• Referral activity: customer-specific referral links, share status, link opens, attributed bookings, appointment completion, reward eligibility, and information used to prevent duplicate or self-referral rewards.
• Payment information: transaction, deposit, refund, cancellation-fee, and payment-status information. A payment processor may collect card or bank details directly when payments are enabled.
• Technical information: device and browser type, IP address, session identifiers, pages and features used, approximate location derived from an address or IP, timestamps, errors, and security events.
• Connected services: calendar events, connection identifiers, map listing information, and other data you direct a connected provider to share.

3. Where information comes from

We collect information directly from users, from businesses and staff acting on an account, from someone booking for a family member or friend, automatically from the app and device, and from services a user chooses to connect, such as calendars, maps, payment providers, and social platforms.

4. How we use information

• Create and secure accounts, authenticate users, and apply staff permissions.
• Search for businesses, display availability, create appointments, prevent conflicts, and manage changes or cancellations.
• Send confirmations, reminders, review requests, invitations, security notices, and support messages.
• Display business profiles, staff profiles, services, promotions, public reviews, and owner replies.
• Attribute referral visits and qualifying bookings, issue earned rewards, and prevent referral misuse.
• Process payments, deposits, refunds, cancellation fees, and no-show charges when payment features are enabled.
• Sync connected calendars and help businesses publish booking links to maps and social platforms.
• Provide dashboards, revenue and appointment reporting, inventory tools, audit records, fraud prevention, moderation, and support.
• Improve reliability, accessibility, performance, safety, and user experience.
• Comply with law, enforce agreements, resolve disputes, and protect users and the platform.

5. How information is disclosed

• Selected businesses and staff: appointment and contact details needed to deliver and manage the service.
• Customers and recipients: appointment details, business information, policy information, and changes relevant to them.
• Public visitors: business listings, staff information marked public, promotions, reviews, review photos, and owner replies.
• Service providers: hosting, security, analytics, communications, customer support, payment processing, mapping, and calendar providers working for us.
• Connected platforms: information you direct us to send to a calendar, map, social, or other connected account.
• Legal and safety recipients: regulators, courts, law enforcement, advisers, or affected parties when reasonably necessary to comply with law or protect rights and safety.
• Business transfers: a buyer, investor, lender, or successor in a merger, financing, reorganization, or sale, subject to appropriate safeguards.

SlotNest does not currently sell personal information for money or share personal information for cross-context behavioral advertising. If that practice changes, we will update this policy and provide legally required choices before the change applies.

6. Cookies, sessions, and similar technology

SlotNest uses cookies, local storage, and similar technology to keep users signed in, remember preferences, protect accounts, operate features, diagnose errors, and understand platform performance. Browser controls may limit these technologies, but some account and booking features may stop working correctly.

7. Payments

When online payments are enabled, payment providers may process card, bank, identity, and fraud-prevention information under their own privacy policies. SlotNest should receive transaction identifiers and payment status rather than full card numbers. Businesses may also handle payment information independently for in-person transactions.

8. Retention

We retain information for as long as reasonably needed to operate the account and platform, provide bookings, maintain transaction and audit records, resolve disputes, prevent abuse, and meet legal obligations. Retention depends on the type of record, account status, business needs, legal requirements, and whether a dispute or investigation is active. We may de-identify information and retain it when it can no longer reasonably identify a person.

9. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including authentication, role-based access, protected password storage, and restricted business and staff access. No system can guarantee absolute security. Users should use a unique password, protect devices, and promptly report suspicious activity.

10. Your choices and privacy rights

Account settings let users update profile information, notification and marketing choices, family or friend contacts, preferences, saved items, and connected features. Depending on where you live and subject to legal exceptions, you may also request access, correction, deletion, or a portable copy of personal information; opt out of certain targeted advertising, sale, or profiling; withdraw consent; or appeal a denied privacy request. We will not discriminate against a person for exercising an applicable privacy right.

Submit a request through the SlotNest contact page. We may verify identity and authority before completing a request. A business may need to handle requests for data it controls independently.

11. Children

SlotNest is not directed to children under 13, and children under 13 may not create their own accounts. An adult may provide limited information to arrange an appointment for a child when legally permitted. If we learn that a child provided personal information directly without appropriate authorization, we will take reasonable steps to delete it.

12. International use

SlotNest may process information in the United States and other locations where service providers operate. Privacy protections may differ from those in your country. Where required, we use recognized safeguards for cross-border transfers.

13. Changes and contact

We may update this policy as SlotNest, our providers, or legal requirements change. We will update the effective date and provide additional notice when required. Questions, privacy requests, and complaints can be sent through the contact page.