Information used by the service
Business users provide a name, email address and password to create and access an account. Workspaces store business, location, team, service and schedule information. Guests provide their name and email address, and may provide a phone number, when confirming an appointment. The business receives the appointment details needed to deliver its service.
Why it is used
The current application uses this information to authenticate users, maintain separate business workspaces, show available times, create appointments and maintain subscription records. Password reset and email verification require the account email address. Appointment details are visible to authorised members of the relevant business.
Payments and providers
Customers may pay the service business at the venue. A business can also connect its own Stripe account for online deposits and full payments through the booking page provided by AppointSurge. Test payments do not take real money; real payments need a verified Stripe account. Appointment card details are not collected by AppointSurge. Subscription checkout is being prepared separately. Payment-provider privacy terms still need review before this draft is published.
Your choices and rights
People may have rights to access, correct, erase or restrict use of their personal data, and to object to certain uses, depending on the circumstances. A verified privacy contact and a specific request process must be added before launch. The appropriate privacy authority and complaint route for each launch market must also be identified.
Still required before launch
The operator must confirm the legal controller, postal and electronic contact details, lawful bases, provider list, international transfers, retention periods and request process. Those details cannot be inferred from the application code.