Privacy Policy

0. Data Controller

The data controller responsible for your personal data is ZenSched Technologies(sole proprietorship), the operator of ZenSched. You can contact the controller at support@zensched.app. Payment processing is carried out by Paddle.com Market Limited as Merchant of Record, who acts as an independent controller for payment, billing, and tax data.

1. Information We Collect

• Account data: name, email, password hash, business name, role, and preferences.
• Booking data: services, staff assignments, appointment times, notes, and end-customer contact details that you or your customers submit.
• Billing data: processed by Paddle (our Merchant of Record). We receive limited metadata such as plan, country, last four digits of the card, and invoice history. We never see full card numbers.
• Usage data: IP address, device, browser, pages viewed, and timestamps, used for security and product improvement.
• Cookies: strictly necessary cookies for authentication and session management, plus optional analytics cookies.

1a. Analytics and Cookies

On our public marketing website we use two analytics providers, and only after you consent to the Analytics category in our cookie banner. Nothing loads before that, and we do not run analytics on customer-facing booking pages.

• Google Analytics 4 — aggregated page and traffic measurement with IP anonymisation and Google Consent Mode. Not used for advertising or remarketing.
• Microsoft Clarity — anonymised heatmaps and session replays, with text and form inputs masked by default so typed content is not captured.

The legal basis is your consent, which you can withdraw at any time from the Cookie Preferences link in our footer. For the full list of cookies, their purposes and durations, see our Cookie Policy.

2. How We Use Information

• Operate, maintain, and secure the service.
• Process subscriptions, renewals, and refunds through Paddle.
• Send transactional messages (booking confirmations, reminders, receipts).
• Provide customer support.
• Detect, prevent, and respond to fraud or abuse.
• Comply with legal obligations and enforce our Terms.

3. Legal Bases (GDPR)

Where GDPR applies, we process personal data on the bases of contract performance (delivering the service you subscribed to), legitimate interests (security, product improvement), legal obligation (tax, accounting), and consent (where required, e.g. marketing emails).

4. Sharing of Data

We do not sell personal data. We share it only with:

• Paddle — payment processing and tax compliance.
• Resend — transactional email delivery.
• Supabase — managed database, authentication, and storage infrastructure.
• Cloudflare — DNS, CDN, and DDoS protection.
• Authorities when legally required, and successors in the event of a corporate transaction.

5. Data Retention

We retain account and booking data for as long as your account is active. After cancellation we keep data for up to 90 days to allow reactivation, then delete or anonymize it unless we are legally required to keep it longer (e.g. invoices for tax purposes).

6. Security

We use industry-standard safeguards including TLS in transit, encryption at rest, row-level security in the database, and least-privilege access controls. No system is completely secure; we encourage strong, unique passwords and prompt reporting of any suspected breach to support@zensched.app.

7. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, restrict, or delete your personal data, and to object to or withdraw consent for certain processing. Submit requests to support@zensched.app; we respond within 30 days.

8. International Transfers

Data may be processed in countries other than your own. Where required, we use appropriate safeguards such as Standard Contractual Clauses for transfers outside the EEA/UK.

9. Children

ZenSched is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notice. The "Last updated" date above always reflects the current version.

11. Contact

Privacy questions or requests: support@zensched.app.