Privacy Policy

1Introduction

SkedAI ("we", "us", or "our") provides an AI-powered booking service via WhatsApp for multi-industry businesses — including barbershops, salons, art studios, restaurants, and hotels — as well as an AI concierge service for hotel guests. We are committed to protecting your personal data and complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable national data protection law.

This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and what rights you have in relation to it. Please read it carefully before using our platform.

2Data Controller

The data controller responsible for your personal data is:

If you have any questions or concerns about how we handle your personal data, please contact us at the email address above.

3Personal Data We Collect

We collect the minimum personal data necessary to provide our service. Specifically, we collect only:

• Email address — used as your account identifier and to communicate service-related information.
• Password — stored in encrypted (hashed) form to authenticate you securely.

We do not collect names, phone numbers, payment card details, browsing data, location data, or any other categories of personal data beyond those listed above. We do not collect or process any special categories of sensitive personal data.

4Legal Basis for Processing

We process your personal data on the following legal basis under GDPR:

We do not rely on consent as a legal basis for processing your authentication data, as processing is strictly necessary to fulfil our contractual obligations to you.

5How We Use Your Data

Your personal data is used solely for the following purpose:

• Authenticating your identity when you log in to your SkedAI account.
• Sending transactional communications directly related to your account (e.g. password reset emails).

We do not use your data for any of the following:

• Marketing or promotional communications.
• Profiling or automated decision-making.
• Behavioural analytics or advertising.
• Any purpose beyond account authentication and service delivery.

6Data Retention

We retain your personal data only for as long as necessary to provide the service. Specifically:

• Your email address and hashed password are retained for the duration of your account.
• Upon closure of your account, your personal data will be permanently deleted within 30 days.

To request account closure and deletion of your data, contact us at support@skedai.net.

7Data Sharing and Third Parties

We do not sell, rent, or trade your personal data to any third party. We may share your data with trusted service providers (data processors) who assist us in operating our platform — for example, database hosting providers. Any such processors:

• Act only on our documented instructions.
• Are bound by GDPR-compliant data processing agreements.
• Implement appropriate technical and organisational security measures.

We do not share your data with advertisers, data brokers, or any party for commercial purposes.

8International Data Transfers

Your personal data is stored and processed within the European Economic Area (EEA). We do not transfer your personal data to countries outside the EEA. If this position changes, we will update this policy and implement appropriate safeguards (such as Standard Contractual Clauses) before any transfer takes place.

9Data Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures, including:

• Password hashing — passwords are never stored in plain text; they are encrypted using industry-standard hashing algorithms (bcrypt).
• HTTPS encryption — all data transmitted between your browser and our servers is encrypted in transit via TLS/SSL.
• Access controls — access to personal data is restricted to authorised personnel only, on a need-to-know basis.

While we take all reasonable steps to protect your data, no method of transmission or storage is 100% secure. If you become aware of any security vulnerability, please notify us immediately at support@skedai.net.

10Your Rights Under GDPR

As a data subject under GDPR, you have the following rights regarding your personal data:

• Right of access — to obtain a copy of the personal data we hold about you.
• Right to rectification — to have inaccurate personal data corrected.
• Right to erasure ("right to be forgotten") — to request deletion of your personal data, subject to applicable legal obligations.
• Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object — to object to processing of your personal data where we rely on legitimate interests.
• Right to restriction of processing — to request that we limit how we use your data in certain circumstances.
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@skedai.net. We will respond to your request within one calendar month.

11Right to Lodge a Complaint

If you believe we have not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local supervisory authority (data protection authority). In the EU, you can find your national authority through the European Data Protection Board: edpb.europa.eu.

We would, however, appreciate the opportunity to address your concern directly before you contact a supervisory authority — please reach out to us first at support@skedai.net.

12Cookies and Tracking

We do not use cookies, tracking pixels, web beacons, or any other tracking technologies on our platform. We do not use analytics tools that collect personal data (such as Google Analytics). No data is collected about your browsing behaviour.

13Children's Privacy

Our platform is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at support@skedai.net and we will delete it promptly.

14Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of the SkedAI platform after any changes constitutes your acceptance of the updated policy.

15Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us: