1. Who We Are
Slotwise is a product developed and operated by Teamseven. We are committed to protecting the personal information of all users of slotwise.pk. For privacy questions contact us at [email protected].
2. Information We Collect
2a. Information you provide directly
- Account information: name, email address, password (hashed), profile photo
- Profile and branding: bio, brand colour, logo image URL
- Booking form responses: guest name, email, and answers to custom questions
- Session notes: clinical or meeting notes you create per booking (see section 6 for encryption details)
2b. Information from Google (if connected)
- Google Calendar event times to detect conflicts — we never read event titles or content
- Google account email address for calendar and Meet association
2c. Usage data
- IP address, browser type, and device type for security and abuse prevention
- Pages visited and actions taken within the application
3. How We Use Your Information
- Provide, operate, and improve the Slotwise service
- Send booking confirmations, reminders, and transactional emails
- Detect calendar conflicts and create events via the Google Calendar API
- Secure your account (two-factor authentication, session management)
- Respond to support requests sent to [email protected]
- Comply with legal obligations
We do not sell, rent, or trade your personal information to third parties. We do not use your data for advertising purposes.
4. Guest Data
When a Guest books through a Host's Slotwise page, we collect the Guest's name, email address, timezone, and any answers to custom questions defined by the Host. This information is used solely to create the booking, send confirmation emails, and allow the Guest to manage (reschedule or cancel) their booking via a secure manage link.
Guests can request deletion of their booking data by contacting us at [email protected].
5. Data Sharing
We share data only with the following categories of third parties, strictly to provide the Service:
- Google LLC: for Google Calendar and Google Meet integration via their published APIs
- Email service providers: to deliver transactional emails (booking confirmations, reminders)
- Cloud infrastructure: for hosting, database, and storage services
All third-party processors are bound by data processing agreements and are prohibited from using your data for their own purposes.
6. Note Encryption (End-to-End)
Slotwise offers optional client-side end-to-end encryption for session notes. When you enable this feature from Settings → Privacy:
- Key derivation happens in your browser. Your passphrase is processed with PBKDF2-SHA256 (200,000 iterations) using a random per-account salt to produce an AES-256-GCM encryption key.
- Your passphrase never leaves your device. Only the derived ciphertext, a passphrase verifier, and an encrypted recovery blob are sent to our servers. We store nothing that allows us to derive your key.
- Notes are encrypted before upload. The
titleandcontentHtmlfields of each session note are individually encrypted in your browser using AES-256-GCM with a random 12-byte IV before being transmitted or stored. - Recovery key. On activation you receive a one-time 64-character recovery key. This key is used to encrypt your derived key as a recovery blob stored on our servers. If you forget your passphrase, this key lets you regain access. If both are lost, notes cannot be recovered — by design.
- Server cannot decrypt your notes. Our database stores opaque ciphertext prefixed with
enc:. We have no way to read the content of encrypted notes.
This feature is optional. Doctors and healthcare professionals handling sensitive clinical notes are encouraged to enable it. Disabling encryption decrypts all notes locally in your browser before sending them back to the server in plaintext.
7. Data Retention
We retain your account data for as long as your account is active. Booking records are retained for 24 months after the scheduled meeting date to allow for dispute resolution. You may request earlier deletion at any time.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access a copy of the personal data we hold about you
- Rectify inaccurate or incomplete data
- Delete your account and associated data
- Restrict processing in certain circumstances
- Object to processing based on legitimate interests
- Portability — receive your data in a machine-readable format
To exercise any of these rights, email [email protected]. We will respond within 30 days.
10. Security
We implement industry-standard security measures including encrypted data transmission (HTTPS), hashed password storage, optional two-factor authentication, and — for session notes — client-side end-to-end encryption (see section 6). Despite these measures, no internet service can guarantee absolute security.
11. Children's Privacy
Slotwise is not intended for use by persons under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy periodically. We will notify registered users by email of material changes. The updated policy will always be available at slotwise.pk/privacy.
13. Contact
For any privacy concerns or requests, contact the Teamseven data team at [email protected] or visit teamseven.ltd.