Privacy Policy

1. Introduction

SlotSwift ("we", "our", or "us") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Croatian law.

2. Data Controller

SlotSwift is the data controller for personal data processed through this service. For privacy-related inquiries, contact us at privacy@slotswift.com.

3. Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, business name, and phone number provided during registration.
• Business data: Business hours, services, staff information, and location details you enter in the dashboard.
• Appointment data: Customer names, email addresses, phone numbers, and appointment details entered by you or your customers when booking.
• Payment data: Billing information and subscription details. Payment card data is processed by Stripe and is never stored on our servers.
• Usage data: IP address, browser type, pages visited, and actions taken within the app, collected via analytics tools.
• Cookie data: See Section 8 for details.

4. How We Use Your Data

• Providing and operating the SlotSwift service
• Sending appointment confirmation and reminder emails to your customers
• Processing payments and managing your subscription
• Communicating with you about your account, updates, and support
• Improving our service through usage analytics
• Complying with legal obligations

5. Legal Basis for Processing

• Contract performance: Processing necessary to provide the service you signed up for.
• Legitimate interests: Improving our service, preventing fraud, and ensuring security.
• Consent: Analytics and marketing cookies, where you have given consent via our cookie banner.
• Legal obligation: Retaining transaction records as required by law.

6. Third-Party Services

We share data with the following third-party processors:

• Clerk (clerk.com): Authentication and user management
• Convex (convex.dev): Database and backend infrastructure (EU region)
• Polar (polar.sh): Payment processing and subscription management
• Resend (resend.com): Transactional email delivery
• PostHog (posthog.com): Product analytics (EU region, consent-based)
• Google Tag Manager / Analytics: Website analytics (consent-based)

All processors are contractually bound to handle your data in compliance with GDPR.

7. Data Retention

We retain your personal data for as long as your account is active. After account deletion, we retain data for up to 30 days before permanent deletion, except where longer retention is required by law (e.g., financial records retained for 5 years under Croatian law).

8. Cookies

We use three categories of cookies:

• Necessary: Required for the service to function (authentication sessions, preferences). These cannot be disabled.
• Analytics: Used to understand how users interact with our service (Google Analytics via GTM, PostHog). Only set with your consent.
• Marketing: Used for targeted advertising. Only set with your consent.

You can manage your cookie preferences at any time via the cookie banner.

9. Your Rights

Under GDPR, you have the right to:

• Access a copy of your personal data
• Rectification of inaccurate data
• Erasure of your personal data ("right to be forgotten")
• Portability - receive your data in a machine-readable format
• Object to processing based on legitimate interests
• Restrict processing of your data

To exercise any of these rights, contact privacy@slotswift.com. You also have the right to lodge a complaint with the Croatian Data Protection Agency (AZOP) at azop.hr.

10. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encrypted connections (HTTPS), access controls, and regular security reviews.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or via an in-app notice. Continued use of the service after such notification constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or to exercise your rights, contact us at privacy@slotswift.com.