Privacy Policy

Last Updated: July 31, 2026

How we collect, use, and protect your personal information when you use our website and booking platform.

1. Data Controller

Slotio is operated from Greece ("we", "us", or "our"). If you have any questions about this Privacy Policy or how your data is handled, you can reach us at:

2. Information We Collect

We collect personal data that you voluntarily provide to us when using Slotio:

  • Account & Contact Information: Name, email address, and optional phone number when you create an account or schedule an appointment.
  • Booking Details: Information regarding appointments made through the platform (e.g., date, time, notes provided to the business).
  • AI Chatbot Interactions: Questions or messages you submit to our AI chatbot feature.

3. How We Use Your Data & Legal Basis

We process your personal data under the General Data Protection Regulation (GDPR) for the following purposes:

  • To Provide and Facilitate Bookings: Managing appointment schedules between clients and registered businesses (Legal basis: Performance of a Contract).
  • Communication: Sending appointment confirmations, updates, and transactional emails (Legal basis: Performance of a Contract).
  • Service Improvement & Support: Responding to inquiries and maintaining platform functionality (Legal basis: Legitimate Interests).

4. Third-Party Service Providers (Sub-processors)

We do not sell, rent, or trade your personal data. To provide our service, we share necessary data with trusted third-party providers who adhere to strict data security standards:

  • Database & Authentication: Supabase (Stores user profiles, booking data, and secure account logins).
  • Hosting & Infrastructure: Vercel (Hosts the website application).
  • Email Delivery: Resend (Sends transactional and notification emails).
  • AI Processing: Google Gemini API (Processes queries submitted directly to our interactive chatbot). Note: Please do not submit sensitive personal identifiers into the AI chatbot.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or until you request its deletion.

6. Your GDPR Rights

Because you are protected under EU data protection laws, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request that we correct inaccurate or incomplete data.
  • Deletion: Request that we erase your personal data ("Right to be Forgotten").
  • Restriction & Objection: Object to or restrict certain processing activities.

To exercise any of these rights, please email us at support@slotio.gr. You also have the right to lodge a complaint with your local data protection authority (such as the Hellenic Data Protection Authority - HDPA).

7. Updates to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date.