Privacy Policy

1. Two kinds of people use Timetelle

• Businesses (owners and their team) sign up to take bookings. For their own account and billing details, Timetelle decides how that information is handled.
• Clients book appointments or pay invoices with a business. The business is in charge of its clients' information, and Timetelle stores and processes it on the business's behalf. If you're a client, the business you booked with is your first contact for privacy questions, and you can always reach us too.

2. Information we collect

From businesses and their team

• Account details: name, email address and password (stored securely as a scrambled hash, never as plain text).
• Business details: business name, booking link, description, contact email and phone, address, time zone, hours, services, prices, policies, social links, logo, cover and service photos, page styles and custom CSS.
• Team details: names, email addresses and roles of people you invite.
• Billing details: your plan and subscription status. Payment cards are entered on Stripe's pages and stored by Stripe, not by us.
• Payments setup: if you turn on payments, Stripe collects your identity and bank details to verify you. We only keep your Stripe account ID and whether it can take payments.

From clients

• Booking details: name, email address, phone number, any notes you add, and the service, add-ons, time and staff member you picked.
• Payment details: amounts paid, tips, refunds and payment status for deposits, bookings and invoices. Card details are entered on Stripe's secure page and are never seen or stored by us.
• Invoice details: the name, email, items, amounts and notes on invoices a business sends you.

Automatically

• Basic technical information our hosting provider records when you visit, such as IP address, browser type and the pages requested. This is used for security and to keep the site running.
• Cookies that keep you signed in to your dashboard. These are strictly necessary. We don't use advertising or analytics cookies, and we don't track you across other websites.

3. How we use information

• To run the Service: show booking pages, prevent double bookings, hold times while clients pay, and manage calendars, invoices and teams.
• To send emails you'd expect: booking confirmations and alerts, cancellations, receipts, invoices, team invitations, password resets and account notices.
• To process payments, refunds and subscriptions through Stripe.
• To keep the Service secure, prevent fraud and abuse, and fix problems.
• To meet legal, tax and accounting duties.

We don't sell or rent personal information, we don't share it for targeted advertising, and we don't use clients' information for our own marketing.

4. Who we share it with

We share information only with the service providers that help us run Timetelle, and only for that purpose:

• Supabase: database, sign-in and file storage (photos and logos).
• Cloudflare: website hosting, security and delivery.
• Stripe: subscription billing for businesses, and card payments from clients into businesses' own Stripe accounts. See Stripe's Privacy Policy.
• Resend: sending emails.

We may also share information:

• with the business you book with or pay (that's the point of a booking);
• when the law requires it, or to protect the rights, safety or property of our users, the public or us;
• as part of a merger, sale or reorganization of our business, with notice to you.

Calendar links: if you add a booking to Google Calendar, Apple Calendar or Outlook, or a business subscribes to its calendar feed, the appointment details go to that calendar provider under its own privacy policy.

5. How long we keep it

• We keep business account information while the account is open.
• We keep booking, payment and invoice records for as long as the business's account is open, so the business can see its history.
• When an account is closed, we delete or anonymize its information within 90 days, except records we must keep longer for legal, tax or fraud-prevention reasons. Backups are overwritten on a rolling basis.

6. Security

Information is sent over encrypted connections (HTTPS). Database rules keep each business's data separate, so one business can't see another's. Passwords are hashed, and card details are handled only by Stripe. No system is perfectly secure, so please use a strong password and tell us right away at support@appointelle.com if you notice anything unusual.

7. Your choices and rights

• Businesses can view and update most of their information in the dashboard at any time.
• Anyone can email us at support@appointelle.com to ask for a copy of their information, to correct it, or to delete it. If you're a client, we may pass your request to the business you booked with, since it's in charge of your information.
• Depending on where you live, such as California (CCPA/CPRA) or the EU and UK (GDPR), you may have extra rights, including to object to or limit how your information is used. We'll respond within the time the law requires, and we won't treat you differently for using your rights.
• You can stop receiving emails about a booking by cancelling it, or by contacting the business.

8. Children

Timetelle is meant for businesses and adults. It isn't directed at children under 13, and we don't knowingly collect information from them. A parent or guardian should make bookings for a child. If you think a child has given us information, email support@appointelle.com and we'll delete it.

9. Where information is stored

Timetelle is based in the United States, and our providers may store or process information in the US and other countries. When information is moved across borders, we rely on our providers' safeguards, such as standard contractual clauses.

10. Changes to this policy

We may update this policy. If we make important changes, we'll email business owners or post a notice on the site before they apply. The date at the top always shows the latest version. See also our Terms of Service.

11. Contact

Email support@appointelle.com with any questions or requests about privacy.