At Selectzey (“Company,” “we,” “us,” or “our”), we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website at selectzey.com, use our web application at app.selectzey.com, or interact with our services (collectively, the “Service”).

By using the Service, you consent to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide

We collect information you voluntarily provide when you:

Create an account: Name, email address, password, phone number.
Set up a shop: Business name, address, business type, operating hours, branding preferences.
Use the Service: Appointment details, client records, staff information, service catalogs, products, invoices, payments, memberships, marketing campaign content.
Contact us: Name, email, subject, and message content when you reach out via our contact form or email.
Subscribe or pay: Payment method details (processed securely by third-party payment processors; we do not store full credit card numbers).

1.2 Information Collected Automatically

When you access the Service, we may automatically collect:

Device & Browser Information: IP address, browser type and version, operating system, device type, screen resolution.
Usage Data: Pages visited, features used, time spent, click patterns, referring URLs.
Cookies & Tracking Technologies: We use cookies, local storage, and similar technologies for session management, authentication, preferences, and analytics. See Section 7 for details.

1.3 Information from Third Parties

We may receive information from:

Authentication providers (e.g., Google) when you sign in using third-party login.
Payment processors regarding transaction status.

2. How We Use Your Information

We use the collected information to:

Provide the Service: Operate, maintain, and deliver the features of the platform, including appointment management, invoicing, CRM, marketing, and reporting.
Create & manage your account: Authenticate you, manage sessions, and enforce role-based access control.
Process payments: Handle billing, subscriptions, and financial transactions.
Communicate with you: Send transactional emails (confirmations, reminders, invoices), respond to inquiries, and provide customer support.
Improve the Service: Analyze usage patterns, diagnose issues, conduct research, and develop new features.
Send marketing communications: With your opt-in consent, send newsletters, product updates, tips, and promotional offers. You can unsubscribe at any time.
Enforce our Terms: Detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms of Service.
Comply with legal obligations: Meet applicable legal, regulatory, and compliance requirements.

3. Data Sharing & Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

Service Providers: With trusted third-party vendors who perform services on our behalf (hosting, email delivery, payment processing, analytics), bound by contractual data protection obligations.
Within Your Shop: Shop staff, managers, and administrators can access customer and business data within their own tenant, based on their assigned roles and permissions.
Legal Requirements: When required by law, subpoena, court order, or governmental regulation, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, your data may be transferred as part of that transaction, subject to applicable data protection laws.
With Your Consent: With your explicit consent for any purpose not described here.

4. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit (TLS/SSL) and at rest.
Secure password hashing (bcrypt).
Role-based access control and multi-tenant data isolation.
Regular security reviews and monitoring.
JWT-based authentication with automatic token rotation.
Rate limiting and throttling to prevent abuse.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the security of your account credentials.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account termination or deletion:

We will retain your data for a reasonable period (currently 30 days) to allow for account recovery or legal compliance.
After the retention period, your data will be permanently deleted or anonymized.
We may retain certain aggregated, anonymized data indefinitely for analytics and product improvement purposes.
Where required by law (tax records, financial transactions), we may retain data for the legally mandated period.

6. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Rectification: Request correction of inaccurate or incomplete data.
Erasure: Request deletion of your personal data (subject to legal retention requirements).
Restriction: Request restriction of processing of your data in certain circumstances.
Data Portability: Request your data in a structured, machine-readable format.
Object: Object to processing of your data for direct marketing purposes.
Withdraw Consent: Withdraw previously given consent at any time.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days (or as required by applicable law).

7. Cookies & Tracking Technologies

7.1 What We Use

Essential Cookies: Required for authentication, session management, and security. Cannot be disabled.
Functional Cookies: Remember your preferences (language, theme, timezone).
Analytics Cookies: Help us understand how you use the Service to improve the user experience. We may use third-party analytics services.

7.2 Managing Cookies

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

8. Children's Privacy

The Service is not directed to children under the age of 16 (or the applicable age in your jurisdiction). We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected] and we will take steps to delete such information.

9. International Data Transfers

Your data may be processed and stored in countries other than your country of residence. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your data to such countries. We take appropriate measures to ensure your data is protected in accordance with this Privacy Policy, regardless of where it is processed.

10. Third-Party Links & Integrations

The Service may contain links to or integrate with third-party websites and services. This Privacy Policy does not apply to those third-party services. We encourage you to review their privacy policies before providing any personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date above. For material changes, we will notify you through the Service interface or via email. Your continued use of the Service after the updated policy takes effect constitutes your acceptance of the changes.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Privacy Inquiries: [email protected]
General Support: [email protected]
Website: selectzey.com/contact