Privacy Policy

Effective October 16, 2026

1. Who this applies to

This policy covers two kinds of people: businesses that sign up for Nearbooked to manage their appointments ("you," when you're the account holder), and the end customers who book appointments through a business's public booking page. If you're an end customer booking an appointment, the business you're booking with is the one deciding what to do with your information — Nearbooked is the platform they're using, similar to how a payment processor works on behalf of a merchant. Questions about how a specific business uses your booking information should go to that business first.

Nearbooked is operated by SODLANTECH PRIVATE LIMITED ("we," "us"). You can reach us about this policy at [email protected].

2. What we collect

Account information: name, email address, phone number (optional), and a hashed password (we never store your actual password) when you sign up. If you sign in with Google, we receive your name and email from Google instead.

Business information: business name, description, industry, contact details, timezone, and any locations, services, staff, and working hours you configure.

Customer and booking data: when your customers book through your public booking page, we collect their name, email, phone number, and appointment details — and store them so you can manage your bookings. This data belongs to your business; we process it as your service provider.

Usage and log data: IP address, browser/device information, and actions taken in the dashboard, retained in an audit log for security and support purposes.

Support communications: anything you send us through a support ticket or by email.

3. How we use it

  • To provide, maintain, and secure the Service
  • To send account-related emails: email verification, password resets, booking confirmations, team invitations, and support replies
  • To respond to support requests
  • To detect and prevent fraud, abuse, and security incidents — including rate-limiting and monitoring for suspicious login activity
  • To comply with legal obligations

We don't sell your data or your customers' data, and we don't use it for advertising.

4. Who we share it with

We share data with a small number of service providers who help us run Nearbooked, each only to the extent needed to provide their part of the Service:

  • Our hosting provider, to run the application and store the database
  • Our email delivery provider, to send transactional emails on our behalf
  • Google, if you choose to sign in with Google — solely to authenticate your identity

We don't share your data with anyone else except: when you direct us to (e.g. you ask us to look into an issue that requires it), to comply with a legal obligation, or to protect the rights, safety, or property of Nearbooked, our users, or the public.

5. Data retention

We keep account and business data for as long as your account is active. If you close your account, we retain data for a reasonable period afterward in case you want to reactivate or export it, then delete it. Audit log entries are retained longer for security purposes, since a record of what happened matters most exactly when something has gone wrong.

6. Your rights

You can access and update most of your account and business information directly in the dashboard. You can request a copy of your data, ask us to correct inaccurate data, or ask us to delete your account and associated data by emailing [email protected]. Depending on where you're located, you may have additional rights under laws like the GDPR or CCPA — we'll honor requests made under those laws to the extent they apply.

7. Security

Passwords are hashed, never stored in plain text. Every business's data is isolated from every other business's data at the database level. We use rate-limiting on authentication endpoints, log security-relevant actions, and monitor for suspicious activity. No system is perfectly secure, but we treat data protection as a foundational requirement, not an afterthought.

8. Cookies

We use a session cookie to keep you signed in — it's essential to how the Service works and isn't used for advertising or cross-site tracking. We don't currently use analytics or marketing cookies.

9. Children's privacy

The Service is intended for business use and isn't directed at children. We don't knowingly collect personal information from anyone under 18.

10. Changes to this policy

If we make a material change to how we handle your data, we'll notify you by email or through the dashboard before it takes effect.

11. Contact

Questions about this policy or your data? Reach us at [email protected].