Privacy Policy

We collect information you provide directly to us, such as when you create an account, configure a booking page, or contact our support team. This includes:

• Account information: name, email address, and password
• Profile information: photo, bio, and custom booking page content
• Calendar data: event availability (we only read free/busy status — never event details)
• Payment information: processed securely by Stripe; we never store card numbers
• Booking data: the names, email addresses, and form responses of your bookers
• Usage data: pages viewed, features used, and actions taken within the platform

We use the information we collect to:

• Provide, maintain, and improve the ServiceLeo platform
• Process bookings and send email/SMS notifications on your behalf
• Send product updates, security alerts, and support messages
• Analyze usage trends to improve our product (using anonymized, aggregated data)
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell your personal information to third parties, ever.

We share your information only in the following circumstances:

• Service Providers: We work with vetted third-party vendors (e.g., Stripe for payments, Postmark for email) who process data on our behalf under strict data protection agreements.
• Legal Requirements: We may disclose information if required by law or to protect the rights, property, or safety of ServiceLeo, our users, or the public.
• Business Transfers: In the event of a merger or acquisition, your information may be transferred to the new entity, subject to the same privacy commitments.

We retain your account data for as long as your account is active. If you cancel your account, we will delete your personal data within 30 days, except where we are required by law to retain it longer.

Booking records may be retained for up to 7 years for accounting and legal compliance purposes.

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS 1.2+) and at rest (AES-256)
• Annual SOC 2 Type II audits by independent third parties
• Role-based access controls and least-privilege principles
• Regular penetration testing and vulnerability scanning

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Request portability of your data in a machine-readable format
• Withdraw consent at any time (where processing is based on consent)

To exercise these rights, email us at support@serviceleo.com.

We use cookies and similar tracking technologies to operate our platform, analyze usage, and improve your experience. See our Cookie Policy for details.

ServiceLeo is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We'll notify you of material changes via email or a notice within the platform. Continued use of ServiceLeo after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, contact our Data Protection Officer at: