Privacy Policy

1. Who we are

Plainslot is operated by Novpix LLC, a Delaware limited liability company, 131 Continental Dr, Suite 305, Newark, DE 19713, United States (“we”, “us”). Contact: info@novpix.com.

For the account data of businesses and their staff, we are the data controller. For the data of clients who book with a business, that business is the controller and we process it on its behalf, following its instructions and this policy.

2. What we collect

Account data: name, email address, password (stored only as a secure hash), business details, logo and page content, and billing status. Card details are entered on Stripe’s checkout and never reach our servers.

Booking data: the name, email address, optional phone number and any extra questions a business adds to its booking form, together with the appointment details and notes.

Messages: confirmation, reminder, cancellation and review-request emails, and text messages if a business turns on SMS reminders.

Technical data: IP address, browser type and request logs, used to keep the service secure, prevent abuse and fix problems.

3. How we use it

To provide the service: showing availability, creating and changing bookings, and sending the confirmations and reminders a business has switched on.

To run our business: billing, customer support, security, fraud prevention and improving the product.

We do not sell personal data, and we do not use booking data for advertising.

4. Legal bases

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (providing the service to businesses and handling bookings clients request); legitimate interests (security, fraud prevention, support and improving the product); legal obligations (tax and accounting records); and consent where it is required, for example for optional marketing emails.

5. Sharing and sub-processors

We share data only with providers that help us run Plainslot, under contracts that protect it: Hetzner Online GmbH (hosting, Germany), Stripe, Inc. (subscription payments), our transactional email provider (delivery of booking emails), and Google LLC (Google Analytics, only on our own marketing website, never on your booking pages).

If a business connects its own SMS provider, messages to clients are sent through that provider’s account. If a business connects Plainslot to an AI assistant such as ChatGPT or Claude, the data the assistant requests is sent to that service on the business’s instructions.

We may disclose data if the law requires it. Where data is transferred outside the European Economic Area or the UK, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

6. Retention

We keep account and booking data while an account is active. When a business asks us to close its account, we delete its data within 30 days, except records we must keep by law (such as invoices). Database backups are kept for up to 30 days. Server logs are kept for up to 14 days.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, and to object to or restrict certain processing. Clients of a business should contact that business first; we will help it respond. You can also email us at info@novpix.com, and you may lodge a complaint with your local data protection authority.

8. Cookies

We use the cookies needed to keep you signed in and to protect forms against misuse, and a cookie that remembers the language you chose on our website. On our marketing website (not on booking pages) we use Google Analytics to understand which pages are useful; in the EEA, UK and Switzerland it only sets cookies after you accept, and everywhere you can choose "Only necessary". We do not use advertising cookies.

9. Security

Data is encrypted in transit (HTTPS). Passwords are hashed, access is limited to what each person needs, and every business’s data is kept separate from every other’s.

10. Changes

We will post any changes here and update the date above. Significant changes will be communicated by email.