Privacy Policy

Last updated: April 2026

1. Introduction

Swanky Tools™ (“we”, “us”, “our”) operates Swanky Tools™ Booking (the “Service”), accessible at https://booking.swankytools.com. This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and your rights in relation to it. It applies to coaches, freelancers, consultants, and their clients who use our platform globally.

By accessing or using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please discontinue use of the Service.

2. Information We Collect

2.1 Account Information

When you create a coach or business account, we collect:

• Full name and email address
• Password (stored as a secure, irreversible hash — never in plain text)
• Business or practice name, handle/slug, and timezone
• Branding preferences (logo, colors, bio)
• Social media links and website settings

2.2 Booking & Client Information

When a client makes a booking through the Service, we collect:

• Client name, email address, and phone number (if provided)
• Service selected, date, time, and timezone
• Meeting link preferences and notes
• Payment status and transaction reference ID (we do not store full card numbers)

2.3 Email Marketing & Contact Data

If you use our email marketing features, we collect and store:

• Contact lists uploaded by coaches (name, email, optional metadata)
• Audience segments (leads, clients, all contacts)
• Email open/click events (coming soon — when implemented, coaches will be notified)
• Unsubscribe requests, which we honour immediately and permanently

Coaches are responsible for having lawful grounds (consent or legitimate interest) for the contacts they upload. We process this data on the coach’s behalf as a data processor.

2.4 Payment Information

Payments are processed by Stripe and/or Razorpay — both PCI-DSS compliant third parties. We do not receive, store, or have access to your full card number, CVV, or bank account details. We only receive confirmation of payment success/failure and a transaction reference ID.

2.5 Digital Products

When a client purchases a digital product, we record the purchase and generate a time-limited, token-protected download link. Tokens are hashed before storage and expire after a set number of uses or time period.

2.6 Technical & Usage Data

We may collect anonymised technical data including:

• Browser type, device type, and operating system
• Pages visited and features used (for improving the product)
• IP address (for fraud prevention and abuse detection)
• Session activity related to authentication

We do not use third-party advertising trackers, Google Analytics, or behavioural profiling tools.

3. How We Use Your Information

• To create and manage your account and booking page
• To process bookings, payments, and digital product purchases
• To send booking confirmations, calendar invites (.ics), and automated reminders
• To deliver secure download links for digital products
• To send email broadcasts on behalf of coaches (with unsubscribe on every email)
• To send review request emails to clients
• To detect and prevent fraud, spam, and abuse
• To provide customer support and respond to enquiries
• To improve, maintain, and develop the Service
• To send you important product and service updates (opt-out available)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data under the following legal bases:

• Contract performance — processing necessary to deliver the Service you have signed up for
• Legitimate interests — fraud prevention, security, product improvement, and transactional communications
• Consent — marketing communications, where we have obtained your explicit consent
• Legal obligation — retention of records required by applicable law

5. Data Sharing

We do not sell your personal information. We share data only with the following trusted service providers, under data processing agreements:

• Stripe — payment processing (PCI-DSS compliant). Stripe Privacy Policy
• Razorpay — payment processing for Indian transactions. Razorpay Privacy Policy
• Supabase — database hosting, authentication, and file storage (hosted on AWS)
• Vercel — platform hosting and edge delivery (hosted on AWS)
• SMTP email provider — transactional and broadcast email delivery
• Zoho Desk — customer support ticket management

Coaches have access to the name and email of clients who book their services. This is necessary to fulfil bookings and is disclosed to clients at the time of booking.

We may disclose your information if required by law, court order, or to protect the rights, property, or safety of Swanky Tools™, our users, or the public.

6. International Data Transfers

Swanky Tools™ operates globally. Your data may be processed in countries other than your own, including the United States. Where required, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses) to protect your data during international transfers.

7. Data Security

We implement industry-standard security measures including:

• All connections secured with HTTPS/TLS encryption
• Passwords hashed using bcrypt — never stored in plain text
• Row Level Security (RLS) on our database so users only access their own data
• Time-limited, token-protected download links for digital products (tokens hashed before storage)
• Regular security reviews and dependency updates

Despite these measures, no system is perfectly secure. We cannot guarantee absolute security and are not liable for unauthorised access beyond our reasonable control.

8. Data Retention

We retain your personal data for as long as your account is active and as necessary to provide the Service. If you delete your account, your personal data will be removed within 30 days, except:

• Booking and payment records, which may be retained for up to 7 years for legal and accounting purposes
• Anonymised usage statistics that cannot identify you
• Data required to be retained under applicable law

9. Your Rights

Depending on your location, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your data (“right to be forgotten”)
• Portability — request your data in a structured, machine-readable format
• Objection — object to processing based on legitimate interests
• Restriction — request we restrict processing of your data in certain circumstances
• Withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, email us at support@predintel.zohodesk.in. We will respond within 30 days. We may ask you to verify your identity before fulfilling the request.

If you are in the EEA or UK and are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.

10. Cookies

We use essential cookies only — for authentication, session management, and security. These are strictly necessary for the Service to function and cannot be disabled without breaking core features.

We do not use advertising cookies, marketing cookies, or third-party behavioural tracking cookies. We do not participate in cross-site tracking.

11. Email Communications

We may send you transactional emails (booking confirmations, reminders, purchase receipts) and service-related updates. These are necessary to provide the Service and cannot be opted out of while your account is active.

Broadcast marketing emails sent by coaches to their contact lists include a one-click unsubscribe link on every email. Unsubscribes are processed immediately and permanently. We comply with CAN-SPAM, CASL, and GDPR requirements for email communications.

12. Children’s Privacy

The Service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data through our Service, contact us immediately at support@predintel.zohodesk.in and we will delete it promptly.

13. Third-Party Links

The Service may contain links to third-party websites (e.g., Zoom, Google Meet). We are not responsible for the privacy practices of third-party sites and encourage you to review their privacy policies independently.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. We will notify you of material changes via email or a prominent notice within the Service at least 14 days before changes take effect. The date at the top of this page reflects the most recent revision. Continued use of the Service after changes constitutes acceptance of the updated Policy.

15. Contact & Data Controller

Swanky Tools™ is the data controller for personal data processed through the Service. For any privacy-related questions, requests, or complaints:

• Email: support@predintel.zohodesk.in
• Contact form: https://booking.swankytools.com/contact