1. Information We Collect
We collect information you provide directly to us, such as when you create an account, configure a booking page, or contact our support team. This includes:
- Account information: name, email address, and password
- Profile information: photo, bio, and custom booking page content
- Calendar lists, event titles, event start/end times, and availability information needed to identify availability, prevent scheduling conflicts, and create booking events.
- Payment information: processed securely by Stripe; we never store card numbers
- Booking data: the names, email addresses, and form responses of your bookers
- Usage data: pages viewed, features used, and actions taken within the platform
2. Google Sign-In and Google Calendar
If you choose to sign in with Google, ServiceLeo receives basic Google Account information such as your email address and, where authorized, your name and profile information. This information is used to create and authenticate your ServiceLeo account.
When you connect Google Calendar, ServiceLeo accesses your available calendars, calendar event information, and availability information. This allows you to select a calendar for bookings, identify availability periods, check for scheduling conflicts, and create calendar events for confirmed bookings.
ServiceLeo uses Google Calendar data only to provide and operate its scheduling features. We do not sell Google user data or use it for advertising.
Google data is transmitted using encrypted connections and protected using appropriate security measures. You can revoke ServiceLeo's access at any time through your Google Account settings. Google Calendar connection data is deleted when you delete your ServiceLeo account, subject to applicable legal retention requirements.
2.1. Google User Data & Limited Use Disclosure
ServiceLeo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
- We only request access to the minimum necessary Google Calendar permissions (such as free/busy availability) required to operate our booking services.
- We never use, share, or disclose information received from Google APIs to serve third-party advertisements, retargeting ads, or personalized marketing.
- Data obtained through Google APIs is never used to train, improve, or fine-tune general artificial intelligence (AI) or machine learning (ML) models.
- No human at ServiceLeo reads your Google user data unless:
- You explicitly consent to data access for support or troubleshooting purposes
- It is strictly required for security purposes (e.g., investigating abuse or fraud); or
- It is necessary to comply with applicable law or legal process.
3. How We Use Your Information
We use the information we collect to:
- Provide, maintain, and improve the ServiceLeo platform
- Process bookings and send email notifications on your behalf
- Send product updates, security alerts, and support messages
- Analyze usage trends to improve our product (using anonymized, aggregated data)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations
We do not sell your personal information to third parties, ever.
4. How We Share Your Information
We share your information only in the following circumstances:
- Service Providers: We work with vetted third-party vendors (e.g., Stripe for payments, Brevo for email) who process data on our behalf under strict data protection agreements.
- Legal Requirements: We may disclose information if required by law or to protect the rights, property, or safety of ServiceLeo, our users, or the public.
- Business Transfers: In the event of a merger or acquisition, your information may be transferred to the new entity, subject to the same privacy commitments.
5. Data Retention
We retain your account data for as long as your account is active. If you cancel your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer.
Booking records may be retained for up to 7 years for accounting and legal compliance purposes.
6. Security
We implement industry-standard security measures to protect your information, including:
- Encryption in transit (TLS 1.2+) and at rest (AES-256)
- Role-based access controls and least-privilege principles
- Regular testing and vulnerability scanning
7. Your Rights (GDPR / PIPEDA)
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Request portability of your data in a machine-readable format
- Withdraw consent at any time (where processing is based on consent)
To exercise these rights, email us at [email protected].
8. Cookies
We use cookies and similar tracking technologies to operate our platform, analyze usage, and improve your experience. See our Cookie Policy for details.
9. Children's Privacy
ServiceLeo is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We'll notify you of material changes via email or a notice within the platform. Continued use of ServiceLeo after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy, contact at: Email: [email protected]