Privacy Policy

1. Information we collect

From Business Users and staff:

• Name, email address, phone number
• Password — stored as a one-way cryptographic hash; we never store or can see your actual password
• Role (admin or staff) and working hours

From Customers booking an appointment:

• Name and phone number (required to book)
• Email address (optional, if you provide it)
• The appointment details you select (service, staff member, time)

Booking as a Customer does not create a password or account — this information is tied to the Business you booked with, for the purpose of that booking.

Automatically:

Staff accounts use a single session cookie to stay logged in. We don't use advertising or analytics tracking cookies today.

2. How we use this information

• To operate the booking calendar and prevent double-booking
• To send appointment confirmations, reminders, and cancellation notices (by email today; SMS is planned but not active yet)
• To let a Business maintain its own customer and appointment history
• To secure accounts, including rate-limiting repeated login attempts

3. How we share information

We do not sell your information. We share it only with:

• Service providers who help us run the Service: our database host, our application hosting provider, and our email delivery provider (used to send appointment notifications). We'll add an SMS delivery provider once SMS notifications are active.
• If required by law or to protect our rights or safety.

MyEasyScheduler is a multi-tenant platform — each Business's data is kept separate from every other Business. A Customer's information is only visible to the Business they booked with, never to other businesses on the platform.

4. Data retention

We retain appointment and customer records to preserve a Business's own history. A canceled appointment is marked canceled rather than deleted, so it remains part of that Business's records unless you request deletion (see below).

5. Your choices

To request access to, correction of, or deletion of your information, contact us at the email below. If you're a Customer, we'll need to confirm your identity with the Business you booked with. Deletion may be limited where a Business has a legitimate record-keeping need (for example, a completed appointment history).

6. Security

Passwords are stored using industry-standard one-way hashing, login attempts are rate-limited, and the system is built to prevent one Business from accessing another Business's data. No system is perfectly secure, and we can't guarantee absolute security.

7. Children's privacy

The Service isn't directed at children under 13, and we don't knowingly collect information from them.

8. Changes to this policy

We may update this policy from time to time. We'll post the updated policy here with a new "Last updated" date.

9. Contact

Questions about this policy, or a request about your data? Email samuel.sternstein@gmail.com.