Privacy Policy

1. What we collect

When you use SlotSync we collect:

• Your email address and display name when you register
• Booking information (times, status, intake answers you provide)
• Profile information you choose to add (bio, avatar, brand colour)
• Usage data such as booking page views and booking counts
• Payment records via Stripe (we never store card numbers)

2. How we use it

We use your data to:

• Create and manage your account and bookings
• Send booking confirmations, reminders, and notifications
• Process subscription payments through Stripe
• Provide analytics on your booking page performance
• Improve the service and diagnose technical problems

3. Who we share it with

We do not sell your personal data. We share it only with:

• Supabase — database and file storage (Singapore region)
• Resend — transactional email delivery
• Stripe — payment processing
• Vercel — hosting and infrastructure

When a client books a session, their name and booking details are shared with the freelancer they booked.

4. Data retention

We keep your account data for as long as your account is active. If you delete your account, your email is anonymised immediately and booking history is retained in aggregate form for 90 days before permanent deletion.

5. Your rights

You may at any time:

• Access the personal data we hold about you
• Correct inaccurate data via your account settings
• Delete your account from the app (Account → Delete account), or request deletion without the app — see deleting your account
• Request a copy of your booking data (CSV export available on PRO+)

6. Sensitive data and intake questions

Freelancers can add their own pre-booking questions, and clients' answers are stored with the booking. Freelancers are not permitted to ask for:

• NRIC or FIN numbers, or images of identity documents
• Health, medical, or biometric information
• Bank account, card, or other financial credentials

This is stated in our Terms and shown to freelancers when they create a question. If you are ever asked for any of the above through a SlotSync booking page, do not answer it and tell us at privacy@slot-sync.com — we will remove the question.

The freelancer you book with chooses these questions and decides what to do with your answers, so for that information they act as the data controller and SlotSync stores it on their behalf.

7. Singapore compliance

SlotSync is operated from Singapore and your data is stored in Supabase's Singapore region. The following applies in addition to the rest of this policy.

Personal Data Protection Act (PDPA)

• We have designated a Data Protection Officer, reachable at privacy@slot-sync.com
• We collect personal data only for the purposes set out above, and ask for consent where consent is the basis we rely on
• You may request access to, or correction of, the personal data we hold about you
• If a data breach occurs that is likely to cause significant harm or is of significant scale, we will notify the PDPC and affected individuals as required

NRIC numbers

Under the PDPC's advisory guidelines, organisations may only collect NRIC numbers where required by law or where identity must be verified to a high degree of accuracy. Neither applies to booking a session, so SlotSync never asks for your NRIC and prohibits freelancers from doing so. We do not use NRIC numbers for authentication anywhere in the product.

Spam Control Act

Operational messages — booking confirmations, reminders, cancellations, password resets, and verification — are sent because you have an account or a booking, and are needed to deliver the service. Any message we send that promotes SlotSync itself will identify us as the sender and give you a one-step way to opt out, which we honour permanently. Opting out of marketing does not stop the operational messages your bookings depend on.

Do Not Call Registry

We do not make telemarketing calls or send marketing SMS. A phone number given as a PayNow payee identifier is used only to generate payment references, never for marketing.

8. Payments

SlotSync is a scheduling platform, not your service provider and not a bank. Where a freelancer charges for a session, payment is handled one of two ways:

• PayNow QR — you transfer directly to the freelancer through your own bank. SlotSync generates the QR code and reference; the money never passes through us.
• Stripe — collected by Stripe and settled to the freelancer's connected Stripe account automatically. We never see or store your card or bank details.

Subscription payments for Pro and Team plans are processed by Stripe on our own website. Refunds, service quality, and any dispute about a session itself are between you and the freelancer.

9. Cookies

SlotSync does not use tracking or advertising cookies. The web app uses a session token stored in localStorage solely to keep you signed in.

10. Security

All data is encrypted in transit (HTTPS/TLS). Passwords are hashed with bcrypt. API keys and secrets are stored as environment variables and never exposed to clients.

11. Contact

For privacy questions, access or correction requests, or to reach our Data Protection Officer, email privacy@slot-sync.com, or use our contact form. To delete your account, see deleting your account.