Privacy Policy

1. Information We Collect

Information You Provide

When you create an account or use our Services, you may provide:

• Account Information: Name, email address, phone number, password
• Business Information: Business name, address, operating hours, services offered
• Staff Information: Staff names, contact details, schedules, roles
• Customer Information: Names, contact details, appointment history, preferences
• Payment Information: Billing address, payment method details (processed by Stripe)

Information Collected Automatically

When you use our Services, we automatically collect:

• Usage Data: Pages visited, features used, actions taken
• Device Information: Device type, operating system, browser type
• Log Data: IP address, access times, referring URLs
• Location Data: General location based on IP address

Information from Third Parties

We may receive information from:

• Payment Processors: Transaction status and payment confirmation from Stripe
• Authentication Providers: Account verification information
• Communication Services: Delivery status for SMS and email notifications

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Services
• Process appointments and manage your bookings
• Send transactional communications (confirmations, reminders, notifications)
• Process payments and prevent fraud
• Provide customer support
• Analyze usage patterns to improve user experience
• Ensure security and prevent abuse
• Comply with legal obligations
• Send marketing communications (with your consent)

3. How We Share Your Information

We do not sell your personal information. We may share your information with:

Service Providers

Third parties that help us provide our Services:

• Stripe: Payment processing
• Twilio: SMS notifications
• Resend: Email delivery
• Supabase: Authentication and database hosting
• Vercel: Application hosting
• Google (Reserve with Google): Online booking integration (when enabled by business owner)

Reserve with Google

If you enable Reserve with Google for your business, we share the following information with Google:

• Business Information: Business name, address, phone number, hours of operation
• Service Information: Service names, descriptions, pricing, and duration
• Availability Data: Real-time appointment availability
• Booking Information: Appointment details for bookings made through Google

This sharing is necessary to enable customers to discover and book appointments with your business through Google Search, Google Maps, and other Google surfaces. You can disable this integration at any time through your SMEE dashboard.

Business Transfers

If SMEE is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required by law, legal process, or government request, or to protect our rights, privacy, safety, or property.

4. Your Customers' Data

When you use SMEE to manage your business, you collect and store data about your customers. You are responsible for:

• Obtaining appropriate consent to collect customer data
• Providing your own privacy notice to your customers
• Responding to customer requests regarding their data
• Complying with applicable privacy laws

We process your customers' data on your behalf as a service provider and will not use it for our own purposes.

5. Data Retention

We retain your information for as long as your account is active or as needed to provide our Services. After account termination:

• Account data is retained for 30 days to allow for reactivation
• Transaction records are retained as required by law (typically 7 years)
• Aggregated, anonymized data may be retained indefinitely

You may request deletion of your data by contacting us. We will comply unless retention is required by law.

6. Data Security

We implement appropriate security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Regular security assessments
• Access controls and authentication
• Monitoring for suspicious activity

While we strive to protect your information, no method of transmission or storage is 100% secure. Please notify us immediately if you believe your account has been compromised.

7. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Understand how you use our Services
• Improve our Services

You can control cookies through your browser settings. Disabling cookies may affect the functionality of our Services.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal information
• Portability: Request your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Restrict Processing: Request limitations on how we use your data

To exercise these rights, please contact us using the information below.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information we collect and how it's used
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell your data)
• Right to non-discrimination for exercising your privacy rights

10. International Data Transfers

Our Services are hosted in the United States. If you are accessing our Services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using our Services, you consent to such transfer and processing.

11. Children's Privacy

Our Services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website or sending you an email. Your continued use of the Services after changes become effective constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

For data protection inquiries in the European Union, you may also contact your local data protection authority.