Privacy Policy | Flexxy Scheduler

1. Introduction

Flexxy Scheduler ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our application and services. It applies to all users, including residents of California and the European Economic Area (EEA).

By using Flexxy Scheduler, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.

2. Information We Collect

We may collect the following categories of personal information:

Identifiers: Name, email address, phone number, account username.
Professional Information: License number, company name, job title.
Client & Business Data: Client contact details, appointment records, and related notes you input.
Usage Data: Pages visited, features used, session duration, device type, browser type, and IP address.
Communications: Messages sent through the platform's messaging features.
Payment Information: Transaction records processed through our payment provider (we do not store full card numbers).
Device Information: Operating system, device identifiers, and mobile network information.

3. How We Use Your Information

We use personal information for the following purposes:

To provide, operate, and improve our services.
To process transactions and manage subscriptions.
To send service-related communications (e.g., appointment reminders, system notifications).
To respond to support requests and inquiries.
To enforce our Terms of Service and protect against fraud or misuse.
To comply with legal obligations.
To analyze usage patterns and improve app performance.

4. Legal Bases for Processing (GDPR)

If you are located in the EEA or UK, we process your personal data under the following legal bases:

Contract Performance: Processing necessary to provide our services to you.
Legitimate Interests: Improving services, security, fraud prevention, and analytics.
Legal Obligation: Compliance with applicable laws and regulations.
Consent: Where you have provided explicit consent (e.g., marketing emails). You may withdraw consent at any time.

5. Sharing of Personal Information

We do not sell your personal information. We may share information with:

Service Providers: Third-party vendors who assist in operating our platform (e.g., hosting, analytics, payment processing), bound by confidentiality agreements.
Legal Authorities: When required by law, court order, or to protect our legal rights.
Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate notice to you.

6. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources, purposes of use, and third parties we share it with.
Right to Delete: You may request deletion of personal information we have collected, subject to certain exceptions.
Right to Correct: You may request correction of inaccurate personal information we maintain about you.
Right to Opt-Out of Sale/Sharing: We do not sell or share personal information for cross-context behavioral advertising. If this changes, we will provide a "Do Not Sell or Share My Personal Information" link.
Right to Limit Use of Sensitive Personal Information: You may request that we limit the use of sensitive personal information to what is necessary to provide our services.
Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

To exercise these rights, contact us at privacy@flexxyscheduer.com or use the contact method below. We will respond within 45 days as required by law. We may need to verify your identity before processing requests.

California residents may also designate an authorized agent to submit requests on their behalf.

7. European Privacy Rights (GDPR)

If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation (GDPR):

Right of Access: Obtain a copy of your personal data.
Right to Rectification: Request correction of inaccurate data.
Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data under certain conditions.
Right to Restriction of Processing: Request that we limit how we process your data.
Right to Data Portability: Receive your data in a structured, machine-readable format.
Right to Object: Object to processing based on legitimate interests or direct marketing.
Rights Related to Automated Decision-Making: Not be subject to decisions made solely by automated processing that significantly affects you.

To exercise your GDPR rights, contact us at privacy@flexxyscheduer.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK or your EU Member State's data protection authority).

8. California Online Privacy Protection Act (CalOPPA)

In compliance with CalOPPA, we agree to the following:

Users can visit our platform anonymously where applicable.
This Privacy Policy link is clearly visible and accessible from our main interface.
We will notify users of any material changes to this policy.
Do Not Track (DNT): We honor Do Not Track signals. When a DNT signal is detected, we do not track, plant cookies, or use advertising for users.

9. Data Retention

We retain personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we securely delete or anonymize it.

10. Data Security

We implement industry-standard technical and organizational measures to protect your personal information, including encryption in transit (TLS), access controls, and secure data storage. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Flexxy Scheduler is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us and we will promptly delete it.

12. International Data Transfers

If you are accessing our services from outside the United States, your information may be transferred to and processed in the United States. For EEA/UK users, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required by GDPR for international transfers.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by sending you an in-app notification or email. Your continued use of Flexxy Scheduler after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or wish to exercise your privacy rights, please contact us:

Flexxy Scheduler

Email: privacy@flexxyscheduer.com

For California residents: You may also submit requests via email with "California Privacy Request" in the subject line.
For EEA/UK residents: You may also contact our designated EU/UK representative if applicable.