Privacy
Privacy policyWhat Slot keeps and why.
Who is responsible for your data on Slot, what is kept, why, for how long, who receives it, and how you use your rights.
Who we are and how to reach us
Slot (bookonslot.com) is a booking marketplace and business software for beauty and wellness, made in Latvia. It is operated by SIA Slot Booking (company details beside this text). For anything about your data write to [email protected]; we answer within one month.
This policy covers the Slot website, the booking pages and widget, the client account, the business console and the platform administration. It is available in English and Latvian; both say the same.
Who is responsible for what
Slot is the controller (decides why and how data is used) of: client accounts (sign-in, profile, favourites, notices), the sign-ins of salon owners, administrators and specialists, specialist profiles, the platform’s security, billing and support records, the contact and support messages, the visit reliability summary, and the anonymous site statistics.
The salon is the controller of its own client cards and bookings (the client list, notes, tags, bonus points, the visits, consent to its offers). Slot is the processor for that data: it stores it for the salon and does what the salon asks, under the Data Processing Agreement. A salon decides on which legal basis it keeps its client cards and tells its clients about it.
A review is written by a client about a salon and shown publicly: Slot publishes it, and the salon may reply.
A salon may write the text of the e-mails Slot sends its clients about their bookings and after a visit, and is responsible for what it writes. Slot adds the visit’s details, the links and its own details to every such e-mail, and sends no links or addresses from a salon’s text.
Whose data we process, and where it comes from
| Whose data | What | Where it comes from |
|---|---|---|
| Visitors of the website | The page, the country, the device type and the channel you came by: a campaign tag such as utm_source in the link, or the name of the site that sent you, never a full address (the statistics store no IP address; the technical logs do, see section 5); in the contact form your name, e-mail address, message and the page you wrote from. | Your browser, when you open a page or send the form. |
| Clients (people who book) | Account: e-mail address, name, phone number for the salons you book, language, password (stored only as a hash), sign-in sessions, favourites, waiting-list requests, notices in your account, ‘rebook reminders’ choice. Bookings: salon, service, time, price, your note, the status. Reviews you write. Support messages. The visit reliability summary (see section 9). | You, when you create the account, book, review or write to us; the salon, when it marks a visit (completed, no-show) or books for you. |
| Clients on a salon’s card | Name, phone, e-mail, birthday if the salon enters it, the salon’s private notes, tags, bonus points, consent to offers, the visits. | The salon, or you when you book; a salon can also import its client list. |
| Salon owners, administrators and specialists | Name, e-mail address, password (as a hash), role, sign-in times, the console’s audit trail (who did what, with the IP address for 12 months), the salon’s profile and pages, billing details (see below), the record that the owner accepted the Terms, the DPA and the Privacy Policy, and the addresses that get e-mails about bookings, with their language, the kinds of e-mail and their state (waiting for confirmation, on, stopped by the recipient). | You, when you sign up or use the console; the salon owner, who invites administrators and specialists; for an address that gets e-mails about bookings, the owner or administrator who added it, or the specialist themself. |
| Specialists with a Slot account | A public profile (name, photo, ‘about’ text, up to 12 work photos, an address of the form /m/name), the salons you work in, and, if you connect it, the Telegram chat that receives your booking notices. | You. |
| Salon owners as payers | Stripe customer and subscription ids, subscription status, the card’s brand, last four digits and expiry month (never the card number), Stripe’s fingerprint of the card used for the setup week (a code that tells whether the same card was used before; it does not reveal the number), the e-mail for invoices you choose, amounts and dates. | Stripe, and you, when you pay or change billing details. Card data is entered on Stripe’s own page; Slot never sees or stores the card number. |
Do you have to give this data? To create a Slot account and to book, an e-mail address, a name and a phone number for the salon are needed: without them Slot cannot offer the account or the booking. The phone number is there so that the salon can reach you; Slot does not verify it and you do not sign in with it. A salon owner’s name, e-mail address and payment are needed to open and keep the console. A birthday, a photo, a note and consent to offers are always your choice. The contact form needs your name, e-mail address and message, so that we can answer.
Why we use data, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Run your account and your bookings: e-mail codes, confirmations, reminders, changes, cancellation links | Account and booking data | Contract (Art. 6(1)(b)): the account with Slot, and the booking with the salon, for which Slot acts on the salon’s behalf. |
| Sell and run the salon subscription: payment, invoices, access to the console | Owner and billing data | Contract (Art. 6(1)(b)); legal obligation (Art. 6(1)(c)) for the accounting records Stripe and the operator must keep. |
| Keep Slot secure and stop abuse: rate limits, the audit trail, blocking a misused account, backups | Technical request data, IP address in logs, audit trail | Legitimate interest (Art. 6(1)(f)): protecting the platform and its users. |
| Give one setup week per business, owner e-mail and card | The owner’s e-mail, the card fingerprint from Stripe | Legitimate interest (Art. 6(1)(f)): stopping the same business from signing up again and again for another free week. |
| Help salons plan around missed visits: the visit reliability summary | Counts of completed visits and no-show marks | Legitimate interest (Art. 6(1)(f)); see section 9, including how to object. |
| Show honest ratings: publishing, moderating and answering reviews | Review, rating, reply, reports | Legitimate interest (Art. 6(1)(f)): honest ratings for clients and salons; the author wrote the review under the account contract. |
| The e-mail after a visit, when the salon switches it on: thanks and, where the salon wants it, a request for a review | E-mail address, the visit (salon, service, time), the first name on the salon’s card | Legitimate interest (Art. 6(1)(f)) of the salon and Slot in thanking for a visit and asking about it; every such e-mail stops with one click (section 8). If the salon’s text holds an offer, only clients whose consent to offers the salon recorded get it. |
| Answer questions and fix problems | Support and contact messages | Legitimate interest (Art. 6(1)(f)); contract, when you are a customer. |
| Understand how the site is used | Page views without IP address or cookies | Legitimate interest (Art. 6(1)(f)). |
| Messages you asked for beyond the booking: ‘time to rebook’ reminders, the city waiting list | E-mail address, visit history for the reminder | Consent (Art. 6(1)(a)); you can withdraw it at any time (section 8). A salon’s offers rest on the salon’s own basis. |
| Comply with the law and answer authorities | What the law requires | Legal obligation (Art. 6(1)(c)). |
Slot does not sell personal data, does not use it for advertising and does not build profiles of visitors.
How long we keep data
These terms are what the daily cleanup of the system does. Where a salon is the controller, the salon’s own rules also apply. Records the law requires may be kept longer.
Client accounts
| What | How long |
|---|---|
| Account: e-mail, name, phone, language, password hash, favourites | Until you delete the account. Inactive accounts are not deleted automatically. |
| Sign-in sessions on your devices | 90 days from signing in; removed with the account. |
| Sign-up and password-reset codes | A code works for 10 minutes; its record is deleted after 1 day. |
| Notices in your account | 12 months. |
| Waiting-list requests | Until booked, expired or cancelled; finished ones for 12 months. |
| Support messages and questions from the Contact page | 2 years after they were sent. |
| ‘Slot is coming to my city’ e-mails | Waiting: 730 days; after the e-mail is sent: 90 days; after you unsubscribe: 30 days. |
A salon’s client cards and bookings
| What | How long |
|---|---|
| A client card: name, phone, e-mail, birthday, notes, tags, points, consent to offers | While the salon uses Slot. A card nobody has touched, with no visit, for 730 days is anonymised automatically. The salon can erase a card’s personal data at any time. |
| Bookings: time, service, price, notes | While the salon uses Slot (they are the salon’s books). Your own note on a booking is cleared 730 days after the visit. |
| The saved answer to a booking form (it holds contacts and the cancel link) | 7 days. |
| The links in e-mails (‘Manage booking’, ‘Add to calendar’): a hash of a random code | 180 days after the e-mail, and at least until a month after the visit. |
| The log of a booking (ids, counts and the kind of event; no names, phones or e-mail addresses) | 36 months; events of sign-in codes 90 days. |
| The queue of messages to salons (Telegram, e-mail; ids only) | 180 days. |
| Reviews: rating, comment, reply | While the salon uses Slot, unless the author deletes the review sooner. When an account is deleted the review stays without the author’s name, unless the author chooses to delete it too. |
| Salon reports about a review, and the journal of decisions (no names, no texts) | 24 months after the decision; the e-mails about them 400 days. |
Salon owners, administrators and specialists
| What | How long |
|---|---|
| Logins: name, e-mail, password hash | While the salon uses Slot. |
| Console sessions | 14 days (the platform administrator: 7 days). |
| Addresses for e-mails about bookings | Until removed in the console, or with the specialist or the salon. An address its owner stopped is kept, so that the stop holds. |
| The console’s audit trail | The IP address is cleared after 12 months and routine entries are deleted after 24 months. The platform administrator’s actions and money-related entries are kept 5 years. |
| Unfinished sign-up drafts | 60 days after the last change. |
| Subscription and billing records at Slot (Stripe ids, status, card brand, last four digits, expiry, invoice e-mail, the card fingerprint of the setup week) | While the salon uses Slot. Stripe keeps its own records, such as invoices, under its rules and the law. |
| The e-mails about billing (the kind, amounts, dates; no address) | 400 days. |
| The record that the owner accepted the Terms, the DPA and the Privacy Policy | While the salon uses Slot. |
| A salon’s data after its subscription ends | The owner and administrators can read and export for 30 days; after that the console closes. Nothing is deleted automatically: Slot deletes the salon’s data on request or on its own initiative, no sooner than 30 days after the end. |
The site and the servers
| What | How long |
|---|---|
| Page views: page, country, device type, channel; no IP address | 400 days. |
| Counts of e-mails sent (no addresses) | 400 days. |
| The server’s request log (technical: time, page, answer and the IP address; secret parts removed; no query string) | 1 month; the web server’s access log, which also holds the IP address, 14 days. |
| Database backups | Up to about 6 months: 14 daily, 8 weekly and 6 monthly copies, and copies taken before an update for 30 days. The last 14 nightly copies are also kept, encrypted, with GitHub (see the providers below). A deleted record leaves the backups when its copy expires; backups are used for nothing but recovery. |
| The journal of data requests we answered (counts only, no names) | 3 years. |
When you delete your Slot account, the salons keep their own records of past visits without any link to your account, reviews stay without your name unless you delete them too, and an address that bounced or opted out stays on a list so that we do not write to it again. Details: section 8.
Retention period for client cards: 730 days (set by the operator).
Who receives data
Data is shared only as far as needed for the purposes above:
- The salon you book with sees your name, phone number and e-mail address, your bookings with it and the reliability summary (section 9). Other salons never see which salons you visit, or when.
- Specialists of that salon see their own bookings with the client’s name, phone and note for the salon: in the console and in the Slot app inside Telegram, which loads them from Slot’s server. A message in a specialist’s Telegram chat names a client only by first name and the initial of the surname.
- An address a salon or a specialist named for e-mails about bookings, once its owner has confirmed it with the link in the first e-mail: it gets the salon, the client’s name, the service, the specialist and the time of a booking — never the client’s phone, e-mail address or note. Every such e-mail can stop them with one click.
- The calendar app a salon or a specialist chooses (for example Google or Apple), if they subscribe it to their private Slot calendar link: it receives the bookings of that calendar with the time, the service, the client’s name and the client’s note for the salon.
- Service providers (processors) of Slot, listed below.
- Visitors of a salon’s page see what the salon publishes: its profile, services, prices, specialists, photos, and reviews with the first name and the initial of the author.
- Authorities, only where the law requires.
| Provider | What it does for Slot | What data it can see |
|---|---|---|
| Hetzner Online GmbH (Germany) | Hosts the servers, the database and its backups, in the European Union. | Everything stored on the servers. |
| Cloudflare, Inc. (USA; EU entities) | DNS and the proxy in front of the site (so it passes every request, with the IP address); sends Slot’s e-mails (Cloudflare Email Service). | Requests to the site and the e-mails Slot sends: the recipient’s address and the text, including booking details. |
| Stripe Payments Europe, Ltd. (Ireland) and Stripe, Inc. (USA) | Takes salons’ subscription payments and keeps invoices. Slot has no payments between clients and salons. | Owner’s name, e-mail, billing address and tax ID, card data, payment history. Stripe is also a controller for its own fraud-prevention and legal duties. |
| GitHub, Inc. (USA) | Keeps an encrypted copy of the last 14 nightly database backups, so that data can be restored if the servers are lost. | Only encrypted files: the key to open them is kept by the operator, not by GitHub and not on the servers. |
| Telegram | Delivers booking notices to a salon’s or a specialist’s own Telegram chat and opens the Slot app inside Telegram, only if they connect it; sends the operator’s own chat a copy of support and contact messages, when that is switched on. | The text of the notice: the client’s name, phone, e-mail and note for the salon; first name and initial for a specialist; for the operator, the sender’s name, e-mail and message. The app inside Telegram loads its data straight from Slot’s server. |
| Photon (Komoot GmbH, Germany) | Suggests addresses while an owner types a salon’s address. | The text typed in the address field. Slot asks on its server: your IP address and identity are not sent. |
| OpenFreeMap (openfreemap.org) | Map tiles for the map on /explore and on salon pages. | Your browser asks OpenFreeMap for the map directly, so it sees your IP address and which part of the map is shown. |
Slot does not use advertising networks or analytics services of other companies. Fonts, scripts and the map’s files are served by Slot, except what is listed above.
Transfers outside the European Economic Area
Hetzner keeps the data in the European Union. Cloudflare, Stripe and GitHub belong to groups with a parent company in the USA (GitHub receives only encrypted backups), and Telegram and OpenFreeMap may process data outside the EEA. Where personal data is transferred outside the EEA, it relies, where applicable, on an adequacy decision (such as the EU–US Data Privacy Framework) or on the standard contractual clauses of the European Commission, together with the providers’ own security measures. Telegram is used only when a salon or specialist connects it, and the notices it carries are limited to what is needed for the booking.
You can ask us at [email protected] for more about these safeguards.
Your rights, and how to use them
You have the right to access your data, to have it corrected, erased or restricted, to receive it in a portable form, to object to processing based on legitimate interest, and to withdraw a consent you gave (Art. 15–21 GDPR). Where to do it:
| You want to… | Do this |
|---|---|
| See or take all your data (access, portability) | Sign in, open your account → Privacy & data → download everything Slot keeps about your account, as one file. |
| Delete your account | Your account → Privacy & data → delete the account (you confirm with your password). Your upcoming visits are cancelled, and your sign-in, favourites, waiting list and notices are removed. The salons keep their own record of your past visits, with no link to your account; reviews stay without your name unless you also choose to delete them. |
| Correct your details | Change your name, phone and language in your account. A salon’s own client card (its notes, tags, visits) is corrected by the salon. |
| Know, correct or erase what a salon keeps about you | Ask the salon: it is the controller. It can export a client card and erase its personal data. If a salon cannot or will not answer, write to us and we will pass your request on or carry it out on the salon’s written request. |
| Stop reminders and offers | Use the ‘stop’ link in the e-mail, or switch ‘rebook reminders’ off in your account. ‘Stop e-mails like this’ ends the e-mails after a visit from every salon; ‘Stop e-mails from this salon’ ends a salon’s e-mails to that address. |
| Object to the visit reliability summary, or have a mark corrected | Write to [email protected], or sign in and use Support (section 9). |
| Restrict or object to any other processing, or ask anything else | Write to [email protected], from the e-mail address of your account if you have one. |
| Salon owners: export or delete the salon | Export clients and bookings in the console (also for 30 days after the subscription ends). To delete the salon, cancel the subscription and write to us; see section 5. |
We answer within one month. If a request is complex or there are many, the law allows two more months; we will tell you why. We may ask you to prove it is you, and a request from your account’s e-mail address is the easiest proof. We keep a journal of the requests we answered, with counts only, no names, for 3 years.
Complaints. If you think we handle your data unlawfully, you may complain to the supervisory authority: the Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, dvi.gov.lv, [email protected]. You may also go to the supervisory authority of the EU country where you live or work. We would be glad if you wrote to us first.
Visit reliability (an automated assessment)
Slot keeps one client account per e-mail address across salons. So that salons can plan around missed visits, Slot works out for each account, from the bookings linked to it: how many visits were completed, how many were marked as no-shows, and a level derived from them. With Slot's standard thresholds the level is at risk (two or more no-shows or, from three visits on, more than a quarter of the visits missed); otherwise new (fewer than three visits), trusted (at most one no-show and at least nine visits in ten attended) or regular (the rest). A salon may set its own thresholds for how it sees its own clients, within fixed limits (at risk from 1 to 5 no-shows, or from 10% to 50% of the visits missed, or not by share at all; trusted from 70% to 100% of the visits attended; new below 1 to 10 visits), so the level a salon sees can differ from the one shown in your account. The numbers are counted when needed, not stored as a separate score. Only clients with a Slot account have them.
Who sees it. A salon sees, for a client who books with it, the level, the counts (completed visits and no-shows across all salons, the share attended) and its own counts for that client. It never sees another salon’s name, dates or services. A salon may choose a confirmation mode in which a booking from a client at risk (or from a client who is not yet trusted) waits for the salon’s approval instead of being confirmed at once. The assessment alone never cancels or refuses a booking, and no fee, deposit or penalty is tied to it. A salon may also stop one account from booking at that salon; that is the salon’s own decision about its own business.
How a mark is made. A salon marks a visit as a no-show only when the client neither came nor cancelled. For the first 24 hours the mark is shown in your account as a missed visit and counts only for that salon, which can withdraw it; after that it counts for every salon. Your own numbers are shown in your account.
Legal basis: the legitimate interest of Slot and its salons in preventing missed appointments (Art. 6(1)(f)). Your rights: you can see your numbers in your account, ask for a wrong mark to be corrected (Art. 16), object to this processing (Art. 21) and ask for a person to look at it again; write to [email protected] or sign in and use Support. When you object, we remove the marks you show to be wrong and we consider whether your situation outweighs our interest. Deleting your account ends the Slot-wide counts. Marks are kept as long as the booking records they belong to.
No decision with a legal effect on you is made only by this assessment.
Reviews and public pages
A client can review a visit once, after the salon has marked it as completed, and within 60 days of it. A review shows the rating, the comment, the date and the author’s first name with the initial of the surname; the salon may reply in public. The author can edit or delete a review. Slot hides a review only for the reasons set out in the Terms, tells the author by e-mail which category applies, and keeps a journal of these decisions without names or texts for 24 months.
A specialist’s public page (/m/name) and a salon’s page show only what the specialist or the salon published, and published reviews; they never show phone numbers or e-mail addresses.
Cookies and similar storage
Slot sets only cookies that are strictly necessary to sign you in and to protect requests, so there is no cookie banner. There are no advertising or analytics cookies and no tracking pixels.
| Name | What it is for | How long |
|---|---|---|
| rezervo_session | Keeps a salon owner, administrator or specialist signed in to the console. Not readable by scripts. | 14 days (7 for the platform administrator), or until you sign out. |
| rezervo_csrf | Protects signed-in requests, in the console and in the client account, against requests from other sites. The page reads it to send it back. | Set at sign-in, for 14 days (7 for the platform administrator; up to 90 days where the work section of the client account renews it). Removed when you sign out of the console or delete the account. |
| slot_client | Keeps a client signed in to the Slot account. Not readable by scripts. | 90 days, or until you sign out. |
| slot_onboarding | Keeps an unfinished sign-up of a salon in /start. Not readable by scripts. | 14 days. |
| slot_reset | Ties a console password-reset code to the browser that asked for it. Sent only to the sign-in service. | 15 minutes. |
The pages also use the browser’s own storage, which never leaves your device:
- localStorage: your language choice (slot-client-locale, slot-account-locale, slot_owner_locale, slot-admin-locale), the speed setting chosen for your device so that animations are lighter on slow devices (slot-perf, valid for 14 days), the console’s display setting (slot-console-glass), the studio’s remembered choices and hints (slot_studio_keep_current_page, keys that start with slot-editor-ui), the calendar’s display choices (view, team, colour, zoom and step: keys that start with slot-calendar), and that you closed the ‘install the app’ hint (for 60 days).
- sessionStorage (this tab only): whether the loading screen was shown (slot-loader-seen), the role and the location chosen in the console, a client chosen in one console screen and carried to the next, and that you pressed ‘Later’ on the notice about updated Terms (slot.legal.later).
- The installable app (service worker): only on /account and /owner. It keeps an offline page and files that never change; it never keeps pages, API answers or uploads.
When the payment form opens in /start, Stripe’s scripts and its payment frame load from Stripe and may set Stripe’s own cookies for fraud prevention, under Stripe’s policy. The map loads tiles from OpenFreeMap (section 6). Our network provider, Cloudflare, may use technical security measures when a page is requested. Clearing your browser’s data signs you out and resets these choices.
Visit statistics
To see how the site is used, Slot counts page views without cookies. It keeps the page, the country, the device type and the channel you came by (a campaign tag such as utm_source in the link, or the name of the site that sent you; never a page address or a person). The statistics never store your IP address: a visitor is recognised only for one day, through an anonymous code that changes daily, so visits cannot be linked across days or traced back to you. (The IP address does appear in the technical logs described in section 5.) The channel is held in the page’s memory only (no cookie, nothing in your browser’s storage) so that a link to /start can carry it; when a salon signs up, the channel is kept with that sign-up, to learn which channels bring salons.
Support and contact messages
Signed-in clients and businesses can write to Slot support. Slot keeps the message, its subject, the e-mail you give for the answer and the account it came from, only to answer you and to fix what you report. Answers come by e-mail from the operator. When it is switched on, a copy (your name, the salon’s name, the phone of the account if it has one, the e-mail for the answer, the subject and the first 600 characters of the message) is also sent to the operator’s private Telegram chat. Support messages are deleted two years after they were sent.
Anyone can write to Slot from the Contact page without an account. Slot keeps the name, the e-mail address, the message and the page you wrote from, only to answer you. When it is switched on, a copy (your name, e-mail address and the start of the message) is also sent to the operator’s private Telegram chat, so that a question is not missed. The form uses no outside captcha and no cookies; to stop abuse it limits how often one network address and one e-mail address can write, and those counters are cleared regularly. These messages are deleted two years after they were sent.
How we protect data
- The servers are in the European Union, behind Cloudflare; connections are encrypted (HTTPS, with HSTS), and the database is reachable only from the server itself.
- Passwords are stored only as hashes; sign-in and reset codes are stored as hashes and expire; sessions can be ended; repeated wrong passwords lock an address for 15 minutes.
- Every salon sees only its own data: each request is checked against the signed-in person’s salon and role, and a specialist sees only their own bookings. The platform administrator’s sign-ins and actions are logged, and the administrator can protect the sign-in with a second factor.
- Servers accept SSH only with keys, use a firewall, install security updates automatically and run the application with minimal rights.
- Photos are checked and stripped of hidden metadata (such as GPS position) before they are stored.
- Backups are taken every night, kept in rotation, and are encrypted when they leave the server; the key to the copies kept outside the server is not on the server.
No system is perfectly secure. If a breach puts your rights at risk, we will tell the people and the authority concerned as the law requires.
Children
Slot is not directed to children under 13, and they must not create an account. If we learn that we hold an account of a child under 13 without a parent’s permission, we delete it.
Changes to this policy
When we change this policy in a material way, we publish the new version here with a new date and number, and signed-in salon owners see a notice in the console. Earlier versions are available on request.