Privacy Policy

Schedulr is an appointment booking and scheduling platform for service businesses. This policy explains what information we handle when you use our website, dashboard and embeddable booking widget.

For business account holders (people who sign up for Schedulr), we are the data controller. For a business's clients (people who book through a widget), the business is the controller and Schedulr acts as a processor on its behalf. Clients should contact the business directly about their booking data.

• Account data: name, email, hashed password, business name, phone, branding and settings.
• Security data: if you enable two-factor authentication, an encrypted TOTP secret and recovery codes.
• Client and booking data: client name, phone, optional email, service, date and time, status and invoices.
• Billing data: plan, payment references and status. Card and mobile-money details are entered on Paystack and are not stored by Schedulr.
• Technical data: IP address, browser type and session cookies, used for security, rate limiting and sign-in.

• Provide scheduling, availability, invoicing and client management.
• Send booking confirmations and appointment reminders by SMS.
• Process subscription payments and booking deposits.
• Secure accounts, prevent abuse and troubleshoot problems.

We do not sell personal information.

• Paystack – payment processing for subscriptions, invoices and deposits.
• Hubtel (or the configured SMS gateway) – delivery of SMS; the recipient's phone number and message text are shared.
• Hosting and infrastructure providers that store data on our behalf.

We may also disclose information where required by law.

We use essential cookies only: a session cookie to keep you signed in and a CSRF token to protect forms. No advertising cookies.

We keep account and booking data while your account is active. When an account is closed, data is deleted or anonymised within a reasonable period, except records we must keep for legal, tax or fraud-prevention reasons.

Passwords are hashed, login and booking endpoints are rate limited, and optional two-factor authentication is available for every account. No system is perfectly secure, so please use a strong, unique password.

You may request access to, correction of, or deletion of your personal information, and may object to certain processing, as permitted by applicable data protection law, including Ghana's Data Protection Act, 2012.

We may update this policy. Changes are reflected by the date at the top of this page.