Privacy Policy

This Privacy Policy describes how scheduld ("we," "us," or "our") collects, uses, discloses, and protects personal information in connection with our marketing website, operator platform, booking experiences, APIs, demos, and related services (the "Service").

Depending on the context, we may act as a controller (for example, for our own website visitors and billing contacts) or as a processor/service provider on behalf of venue and experience operators who use scheduld to manage their guest data. Where we process guest data solely to provide the Service to an operator, that operator is typically responsible for determining the purposes of processing and for providing required notices to their customers.

We collect information in the following categories, depending on how you interact with the Service:

• Account and profile information: name, email address, phone number, business name, role, login credentials, and similar details you provide when registering or managing an account.
• Billing and payment information: subscription plan, billing address, tax details, and payment method metadata processed by our payment providers. We do not store full card numbers on our servers when cards are handled by Stripe, Square, or similar processors.
• Operator business data: location details, staff records, schedules, catalog items, pricing rules, gift vouchers, communications templates, and settings you configure.
• Guest and customer data you submit: names, contact details, booking history, waivers, notes, payment status, and other information you or your guests enter into the Service.
• Technical and usage data: IP address, device and browser type, approximate location derived from IP, pages viewed, referring URLs, timestamps, cookies, and diagnostic logs.
• Support and communications: messages, attachments, and feedback you send to us, and records of our responses.

We collect information directly from you, automatically when you use the Service, and from third parties you connect or authorize.

• Directly: account forms, checkout, support tickets, surveys, and content you upload.
• Automatically: cookies, pixels, and similar technologies; server logs; and product analytics.
• From integrations: payment processors, email/SMS providers, and other tools you connect, subject to their terms and your configuration.
• From your guests: when they book, create accounts, sign waivers, or communicate through experiences you operate on scheduld.

We use personal information for the following purposes:

• Provide, operate, maintain, and improve the Service, including bookings, scheduling, messaging, reporting, and integrations.
• Authenticate users, manage access, and protect against fraud, abuse, and security incidents.
• Process subscriptions, invoices, platform fees, and related billing events.
• Send transactional messages such as receipts, booking confirmations (when we send them on your behalf), security alerts, and service notices.
• Respond to support requests and communicate about product updates that affect your account.
• Analyze aggregated or de-identified usage to improve performance, reliability, and user experience.
• Comply with legal obligations, enforce our Terms, and establish, exercise, or defend legal claims.

If you are located in a region that requires a legal basis for processing (such as the EEA, UK, or similar jurisdictions), we rely on one or more of the following, as appropriate: performance of a contract with you; our legitimate interests in operating and securing the Service (balanced against your rights); compliance with legal obligations; and consent where we request it (for example, certain marketing cookies or optional communications).

We do not sell personal information. We share information only as described below and as needed to operate the Service.

• Service providers and subprocessors that host infrastructure, provide email or SMS delivery, analytics, customer support tooling, security monitoring, or similar functions under contractual confidentiality and data-protection obligations.
• Payment processors and financial partners that handle subscription billing and, where applicable, guest payment processing for your business.
• Integration partners you choose to connect, so that data can flow as required for those features to work.
• Professional advisors (such as lawyers, auditors, or insurers) under confidentiality obligations when needed.
• Authorities or other parties when required by law, legal process, or to protect rights, safety, and security.
• A successor or affiliate in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

If you are a business using scheduld, you control much of the guest and customer data placed in your account. You are responsible for providing appropriate privacy notices to your guests, obtaining any required consents, honoring applicable consumer rights requests directed to your business, and configuring retention and messaging settings in a manner consistent with law.

We process that guest data to provide the Service according to your instructions, our Terms, and this Policy. If a guest contacts us about data held in an operator account, we may redirect the request to the relevant operator when appropriate.

We and certain partners use cookies and similar technologies to keep you signed in, remember preferences, measure traffic, diagnose issues, and improve the Service. Categories typically include essential cookies required for core functionality, preference cookies, and analytics cookies.

You can control cookies through your browser settings. Blocking essential cookies may prevent parts of the Service from working. Where required by law, we will present cookie choices on our marketing site.

We retain personal information for as long as needed to provide the Service, maintain business and financial records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by data type and context.

After account closure or deletion requests, residual copies may remain in encrypted backups or logs for a limited period before being overwritten according to our backup cycles, except where longer retention is required by law.

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, and alteration. These measures may include access controls, encryption in transit, monitoring, and vendor diligence.

No method of transmission or storage is completely secure. You are responsible for safeguarding your credentials, restricting staff access appropriately, and promptly notifying us of suspected unauthorized access to your account.

We may process and store information in the United States and other countries where we or our service providers operate. Those countries may have data-protection laws different from those in your jurisdiction. Where required, we use appropriate transfer mechanisms (such as standard contractual clauses or equivalent safeguards) for cross-border transfers.

Depending on where you live, you may have rights to access, correct, update, delete, or export certain personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to lodge a complaint with a supervisory authority.

To exercise rights related to information we control directly (such as your operator account profile), contact us using the channels below. For guest data held in an operator's scheduld account, please contact that business first; we will assist operators as needed to fulfill valid requests.

We may need to verify your identity before fulfilling a request and may decline requests that are unlawful, excessive, or that would compromise the privacy or security of others.

The Service is directed to businesses and adults. We do not knowingly collect personal information from children under 16 (or the age required by local law) for our own marketing purposes. Operators who collect information about minors in connection with their experiences are responsible for complying with applicable children's privacy laws and obtaining any required parental consent.

We may update this Privacy Policy from time to time. The "Last updated" date indicates when the current version took effect. Material changes will be posted on this page and, where appropriate, communicated through the Service or by email. Continued use of the Service after an update becomes effective constitutes acceptance of the revised Policy to the extent permitted by law.

If you have questions about this Privacy Policy or wish to make a privacy request regarding information we control, contact us through the support options on our website or from within your scheduld account.