Legal
Privacy Policy
This policy describes how Focuslyne handles personal data when you use our website, app, public booking pages, and connected services.
Last updated:
Where this policy refers to features (Stripe, calendars, WhatsApp, analytics, error reporting), it reflects the product direction and codebase at a high level only; it does not guarantee a feature is enabled in your environment.
1. Who is the data controller
Focuslyne, based in Portugal. Contact for any privacy matter: info@focuslyne.com.
2. What personal data we collect
- Account holders (professionals/businesses using Focuslyne): name, email, password (encrypted), business name, public details you choose to show (logo, description, contacts), Google/Outlook Calendar connection tokens (encrypted).
- End clients (people booking through your public page): name, email, phone when provided, answers to custom booking-form fields, booking history.
- Technical data: IP address and usage data collected for abuse/spam prevention and aggregate service-performance metrics.
3. Purposes and legal basis
| Purpose | Data involved | Legal basis |
|---|---|---|
| Create and manage your account | Name, email, password | Contract performance |
| Process and confirm bookings | End-client data, service, time | Contract performance / professional's legitimate interest |
| Send confirmation, verification and reminder emails | End-client email | Contract performance |
| Sync availability with Google/Outlook Calendar | Calendar tokens, availability events | Consent (integration enabled by the user) |
| Prevent spam, abuse and fraudulent bookings | IP, usage patterns | Legitimate interest |
| Support and service communication | Email, support request content | Legitimate interest / contract performance |
4. Who we share data with (subprocessors)
| Subprocessor | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | EU (Ireland) |
| Vercel | Application hosting | EU/Global (CDN) |
| Resend | Transactional email delivery | USA |
| Stripe | Payment processing (not active during Beta) | USA/EU |
| Sentry | Technical error detection and diagnostics | EU (eu-west-1) |
| Upstash | Rate limiting / abuse protection | EU or US, depending on active infrastructure region |
| Meta (WhatsApp Cloud API) | WhatsApp notifications, when enabled by the professional | USA |
Where a subprocessor is outside the EEA, the transfer relies on the European Commission's Standard Contractual Clauses or an equivalent safeguard offered by that provider.
5. Retention periods
We keep account data while the account is active. Booking data is kept for the duration of the relationship with the professional and for a reasonable additional period after account cancellation, for support and applicable legal obligations. You may request earlier deletion via info@focuslyne.com.
6. Your rights
You have the right to access, rectify, erase, restrict processing, port, and object to the processing of your personal data, and to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise these rights, contact info@focuslyne.com. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.
7. Security
We use appropriate technical and organisational measures (encryption of sensitive data, access control, per-account isolation) to protect your data. No system is fully secure; in the event of a data breach posing a risk to data subjects, we will notify the CNPD and affected individuals within the legal deadlines.
8. Children
Focuslyne is not intended for account holders under 18. We do not knowingly collect data from minors.
10. Changes to this policy
We may update this Policy. Material changes will be communicated by email or an in-app notice.
11. Contact
info@focuslyne.com