Privacy Policy

1. Information about you

When you open and use an account we hold:

• your email address, used to sign you in and to contact you about the service;
• your business details — name, category, area, street address, phone number, and an optional Google Maps link;
• your opening hours, services, prices, staff names and roles;
• technical records created automatically when you use the service, such as request logs, IP address, approximate timing and error reports.

2. Information about your clients

You enter your clients’ names, phone numbers, email addresses, appointment history and any notes you choose to add.

We hold this only to provide the service to you. We do not sell it, we do not use it for our own marketing, and we do not contact your clients about Welbook.

You decide what to collect and why, and you are responsible for telling your clients about it. We act on your instructions.

3. How we use information

• to run the dashboard — showing your calendar, clients, services and reporting;
• to sign you in, by emailing a one-time code;
• to keep the service secure and prevent abuse, including rate limiting sign-in attempts;
• to diagnose faults and improve reliability;
• to contact you about service changes, outages or support;
• to meet legal obligations.

4. Legal basis

We process your account information because it is necessary to perform our agreement with you, and because we have a legitimate interest in keeping the service secure and working.

We process your clients’ information as a processor acting on your documented instructions, under the agreement set out in the Terms of Service.

5. Who we share it with

We do not sell personal data. We use a small number of service providers who process data on our behalf, under contract and only for the purposes below:

• Supabase — database, authentication and file storage (data hosted in Ireland);
• Google Cloud Platform — hosting for our application servers (Belgium);
• Vercel — hosting and delivery of the dashboard;
• Resend — delivery of sign-in code emails. Resend receives your email address, not your client data.

6. Where your data is stored

Your data is stored and processed in the European Union — the database in Ireland and the application servers in Belgium. If you are in Egypt, this means your data is transferred outside Egypt.

We rely on our providers’ contractual safeguards for those transfers. [CONFIRM WITH COUNSEL: the appropriate transfer mechanism under Law No. 151 of 2020, which may require a licence or permit from the Egyptian Data Protection Centre.]

7. How long we keep it

We keep your account and business data for as long as your account is open.

If you close your account we delete or anonymise your data within [RETENTION PERIOD] days, except where we must keep records longer to meet a legal obligation.

Technical logs are kept for a short period for security and fault diagnosis.

8. Security

Data is encrypted in transit. Access to your business data requires a signed token issued to your account, and the service is built so that one business cannot read another’s records.

Administrative credentials are held in a managed secret store, not in application code.

No system is perfectly secure. If a breach affects your data we will notify you, and the authorities where the law requires it.

9. Your rights

Subject to local law, you may ask us to give you a copy of your data, correct it, delete it, restrict how we use it, or object to our use of it. You can also ask for your data in a portable format.

Contact [contact@welbook.app] and we will respond within the period the law allows. You may also complain to the Egyptian Data Protection Centre.

10. Your clients’ rights

If one of your clients asks to see, correct or delete their information, that request is for you to answer — it is your record. You can do most of it yourself in the dashboard, and we will help where you need us to.

11. Cookies and local storage

We do not use advertising or tracking cookies.

The dashboard stores two things in your browser: your sign-in token, so you stay signed in, and your language preference. Clearing your browser storage signs you out.

12. Children

Welbook is for businesses and is not directed at children. We do not knowingly collect data from anyone under 18 as an account holder.

13. Changes to this policy

We may update this policy. If a change materially affects you we will give you notice in the dashboard or by email before it takes effect.

14. Contact

[LEGAL ENTITY NAME], [REGISTERED ADDRESS, EGYPT]. Privacy questions and requests: [contact@welbook.app].