Privacy Policy

This draft privacy policy describes how flippinCalendar (operated by [Business name], registration no. [Company registration number], with registered address [Physical address, South Africa]) processes personal information when you use our booking and AI concierge platform.

1. Who we are

flippinCalendar is a software-as-a-service product for businesses to manage online bookings, customer conversations, and an optional AI web concierge. Contact: [privacy@flippincalendar.co.za].

2. Information we collect

• Account data — name, email, and organisation details when you sign in via Supabase Auth.
• Booking data — customer names, contact details, and appointment information entered by your business or customers.
• AI concierge interactions — chat or voice session content processed via ElevenLabs to fulfil booking requests on your public site.
• Technical data — IP address, browser type, and usage logs for security and service improvement.

3. How we use information

We use personal information to:

• provide and secure the flippinCalendar service;
• operate AI concierge features;
• comply with law and respond to lawful requests.

4. Processors and transfers

We use trusted subprocessors, including Supabase (authentication and database hosting), ElevenLabs (voice and chat AI), and Resend (transactional email). Data may be processed outside South Africa where those providers operate; appropriate safeguards are applied contractually.

5. Retention

We retain data while your account is active and for a reasonable period afterward for backups, billing records, and legal obligations. You may request deletion subject to applicable law.

6. Your rights (POPIA)

Under the Protection of Personal Information Act 4 of 2013 (POPIA), you may request access, correction, or deletion of your personal information, and object to certain processing. Contact us at the address above. You may lodge a complaint with the Information Regulator of South Africa.

7. Security

We use encryption in transit, access controls, and row-level security in our database. No method of transmission over the Internet is fully secure; we work to protect your data proportionate to the risk.

8. Changes

We may update this policy. Material changes will be posted on this page with a revised date.