Privacy Policy.

Introduction

SpadeChat ("we," "us," or "our") operates an AI booking platform that makes businesses discoverable by AI assistants. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at spadechat.com.

By using SpadeChat, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the platform.

Information We Collect

We collect information that you provide directly and information generated through your use of the platform:

Business Information

• Business name, description, and category
• Services offered, pricing, and availability
• Business address and operating hours
• Contact information (email, phone number)

Account Information

• Name and email address
• Authentication credentials (managed securely via Supabase)
• Google Calendar connection data (via OAuth, for scheduling)

Booking Data

• Customer name and contact details submitted during bookings
• Appointment dates, times, and service selections
• Booking status and history

Usage Data

• Pages visited and features used
• Device and browser information
• Referral sources

How We Use Your Information

We use the information we collect to:

• Make your business discoverable by AI assistants such as ChatGPT, Claude, and Gemini
• Facilitate bookings between customers and your business
• Generate your AI booking link and directory listing
• Sync appointments with your Google Calendar
• Process payments through Stripe
• Send transactional emails (booking confirmations, notifications)
• Improve and maintain the platform
• Respond to inquiries and provide support

Third-Party Services

SpadeChat integrates with the following third-party services to operate the platform. Each has its own privacy policy governing how they handle data:

• Supabase — Authentication and database hosting. Manages user accounts and stores platform data securely.
• Stripe — Payment processing. Handles subscription billing and payment information. We do not store credit card details on our servers.
• Google Calendar — Calendar integration via OAuth. We request only the permissions needed to read and write calendar events for booking synchronization.
• Resend — Transactional email delivery. Used to send booking confirmations, notifications, and other platform communications.

We do not sell your personal information to third parties.

Cookies and Tracking

SpadeChat uses minimal cookies. We use authentication cookies managed by Supabase to keep you logged in and maintain your session. We do not use third-party advertising or tracking cookies.

Data Retention and Deletion

We retain your data for as long as your account is active or as needed to provide the services. Booking records are retained to maintain appointment history for both businesses and customers.

You may request deletion of your account and associated data at any time by contacting us through the contact form on our website. We will process deletion requests within 30 days, except where we are required to retain certain information by law.

Data Security

We implement reasonable security measures to protect your information, including encryption in transit (HTTPS), secure authentication via Supabase, and secure payment processing via Stripe. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

• The right to know what personal information we collect about you
• The right to request deletion of your personal information
• The right to opt out of the sale of personal information (we do not sell your data)
• The right to non-discrimination for exercising your privacy rights
• The right to access and receive a copy of your personal information

California residents have additional rights under the California Consumer Privacy Act (CCPA). To exercise any of these rights, please contact us through the contact form on our website.

Children's Privacy

SpadeChat is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of SpadeChat after changes constitutes acceptance of the updated policy.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please reach out through the contact form on our website.