Privacy policy
This policy explains how VAYNTO collects, uses, stores, and protects information when you visit the website, create an account, operate an organization, or use public booking features.
01Who this policy covers
VAYNTO is a multi-tenant appointment-management service for appointment-based businesses. This policy covers account holders, organization members, visitors, and people whose information is entered through a VAYNTO booking page. A business using VAYNTO controls the customer and appointment information it enters; VAYNTO processes that information to provide the service.
02Information we collect
We may process account identity and authentication data; organization, staff, service, availability, customer, appointment, queue, and booking data; support communications; language and theme preferences; security and request metadata such as IP address, browser, timestamps, and device information; and billing metadata such as Paddle customer, transaction, subscription, plan, and status identifiers. VAYNTO does not receive or store full card details.
03How we use information
We use information to create and secure accounts, provide booking and management features, synchronize organizations and subscriptions, enforce plan limits, prevent abuse, respond to support requests, diagnose reliability issues, comply with legal obligations, improve the service, and measure the effectiveness of VAYNTO advertising campaigns when the visitor permits optional measurement. We do not sell personal data.
04Service providers and sharing
VAYNTO uses specialized providers to operate the service, including Supabase for database and authentication infrastructure, Vercel for hosting, Paddle as merchant of record for paid subscriptions, Cloudflare Turnstile for abuse prevention, Google for optional sign-in, and Google Ads for campaign and conversion measurement when permitted by the visitor. Information is shared only as needed for those services, legal compliance, fraud prevention, or protection of users and the platform.
05Cookies and local storage
The service uses necessary cookies and browser storage for authentication, security, language, theme, and application continuity. With the visitor’s choice, VAYNTO may also use Google measurement and advertising storage to measure campaign visits and sign-up conversions. Consent Mode communicates granted or denied choices to Google. Visitors can reject optional storage or change their choice later through Cookie settings. Third-party checkout or authentication flows may set their own necessary cookies under their policies.
06Advertising measurement and consent
When Google Ads measurement is enabled, the Google tag may process technical information about visits and advertising interactions, including consent status and ad-click identifiers. Optional analytics and advertising storage remain denied until the visitor grants them. A visitor can accept all, reject optional technologies, choose categories separately, or reopen Cookie settings to change the decision. Conversion reporting is used to understand whether VAYNTO advertising leads to account creation and is not used to sell personal data.
07Retention and deletion
Operational records are retained while an account or organization is active and for a reasonable period afterward where needed for security, billing, dispute resolution, legal compliance, and audit integrity. Account deletion removes or anonymizes eligible account data through the application workflow, while records that must be retained by law or by Paddle as merchant of record may remain for the required period.
08Security
VAYNTO applies tenant isolation, row-level database security, access controls, encrypted transport, signed webhook verification, rate limits, and other technical and organizational safeguards. No internet service can guarantee absolute security. Users must protect their credentials and report suspected unauthorized access promptly.
09International processing
Infrastructure and service providers may process information in countries other than the user’s country. Where applicable, the providers and VAYNTO rely on appropriate contractual, organizational, or legal safeguards for international processing.
10Your choices and rights
Depending on applicable law, you may request access, correction, export, restriction, objection, or deletion of personal information. Organization customers should first contact the business that collected their booking data. Account holders can use available account controls or contact support. Requests may require identity verification and may be limited by legal retention duties.
11Children
VAYNTO is intended for businesses and adults capable of entering a contract. It is not directed to children. Businesses must not use the service to collect children’s information unless they have a lawful basis and any required guardian authorization.
12Changes and contact
We may update this policy to reflect product, legal, or operational changes. The revision date on this page identifies the current version. Privacy questions and rights requests can be sent to the support email shown on this page.
Questions about this document?
Contact us for clarification on any section of this document.