Privacy Policy — MySched

Last updated: January 16, 2025

MySched ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our scheduling, billing, and messaging platform ("Service"). By using the Service, you consent to the data practices described in this policy.

1. Information We Collect

1.1. Personal Information You Provide

When you register for and use the Service, we collect:

  • Account information: name, email address, password
  • Company/organization information: company name, business type
  • Payment information: billing address, payment method details (processed securely through third-party payment processors)
  • Profile information: phone number, role, preferences
  • Messaging identifiers: Telegram ID, WhatsApp phone number (when you connect these services)

1.2. Information Collected Automatically

When you use the Service, we automatically collect:

  • Usage data: pages visited, features used, actions taken, session duration
  • Device information: IP address, browser type, operating system, device identifiers
  • Cookies and similar technologies: see Section 8 for details
  • Log data: timestamps, error messages, performance metrics

1.3. User-Generated Content

You may provide additional information through your use of the Service:

  • Session data: session titles, descriptions, dates, times, participant information
  • Payment records: charges, refunds, balances
  • Messages: content of messages sent through Telegram and WhatsApp integrations
  • Client information: names, contact details, attendance records

2. How We Use Your Information

We use your information for the following purposes:

  • To provide, maintain, and improve the Service
  • To process payments and manage subscriptions
  • To facilitate communication through Telegram and WhatsApp
  • To send transactional emails (account notifications, receipts, service updates)
  • To provide customer support and respond to your inquiries
  • To analyze usage patterns and improve user experience
  • To detect, prevent, and address fraud, security issues, and technical problems
  • To comply with legal obligations and enforce our Terms of Service
  • To send marketing communications (with your consent, where required)

3. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

  • Contract: Processing is necessary to perform our contract with you (providing the Service)
  • Legitimate interests: We have a legitimate interest in improving the Service, preventing fraud, and ensuring security
  • Consent: For marketing communications and certain optional features, we rely on your explicit consent
  • Legal obligation: We may process data to comply with legal requirements

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1. Service Providers

We share information with third-party vendors who perform services on our behalf:

  • Cloud hosting providers (infrastructure)
  • Payment processors (Stripe or similar)
  • Email service providers (Resend)
  • Analytics providers (Mixpanel)
  • Messaging platforms (Telegram, WhatsApp)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2. Messaging Platforms

When you use Telegram or WhatsApp integration, your messages and identifiers are transmitted through these platforms. Please review Telegram's Privacy Policy and WhatsApp's Privacy Policy for information on how they handle your data.

4.3. Legal Requirements

We may disclose your information if required by law, court order, or government request, or if we believe disclosure is necessary to:

  • Comply with legal obligations
  • Protect our rights, property, or safety
  • Prevent fraud or security threats
  • Enforce our Terms of Service

4.4. Business Transfers

If MySched is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change and any choices you may have.

5. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:

  • Account data: Retained while your account is active and for 90 days after account closure (to allow for reactivation)
  • Session and payment records: Retained for 7 years for accounting and legal compliance purposes
  • Usage logs: Retained for 12 months for security and analytics purposes
  • Marketing consent records: Retained until you withdraw consent or for 3 years of inactivity

After the retention period, we will delete or anonymize your information. You may request earlier deletion by contacting us (see Section 10).

6. International Data Transfers

MySched operates globally, and your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. When we transfer data internationally, we implement appropriate safeguards, such as:

  • Standard Contractual Clauses approved by the European Commission
  • Ensuring third-party providers are certified under recognized frameworks (e.g., EU-U.S. Data Privacy Framework)
  • Implementing technical and organizational security measures

7. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Secure password hashing (bcrypt)
  • Regular security audits and vulnerability assessments
  • Access controls and role-based permissions
  • Monitoring and logging of security events

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Essential Cookies: Essential cookies: Required for the Service to function (e.g., authentication, security)
  • Analytics Cookies: Analytics cookies: Help us understand how users interact with the Service (e.g., Mixpanel)
  • Marketing Cookies: Marketing cookies: Used to deliver relevant advertising (only with your consent)

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

  • Access: Request a copy of the personal information we hold about you
  • Rectification: Request correction of inaccurate or incomplete information
  • Erasure: Request deletion of your personal information ("right to be forgotten")
  • Restriction: Request that we limit how we use your information
  • Portability: Request a copy of your data in a machine-readable format
  • Objection: Object to our processing of your information based on legitimate interests
  • Withdraw consent: Withdraw consent for processing based on consent (e.g., marketing)
  • Complain: Lodge a complaint with your local data protection authority

To exercise these rights, please contact us at help@mysched.app. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

10. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete it.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. The "Last updated" date at the top of this policy indicates when it was last revised. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: help@mysched.app

For GDPR-related inquiries, you may also contact our Data Protection Officer at the same email address.