1. Introduction

MeetVault is a product operated by DIGITALQUOTIENT SOLUTIONS LLC, a Texas limited liability company (“Company”, “we”, “us”, “our”). This Privacy Policy explains how we collect, use, store, share, and protect information when you use our Service — whether you are a shop owner (merchant) or a customer booking through a shop's booking page.

2. Information We Collect

Account Information (Shop Owners)

Name, email address, phone number
Shop name, address, logo, and branding preferences
Authentication data via Clerk (our identity provider)
Subscription and billing information (processed by Stripe)

Customer Information (Collected by Shops)

Name, email address, phone number (provided during booking)
Appointment history, visit frequency, and service preferences
Notes added by the shop owner
Payment method details (card last 4 digits, brand — stored by Stripe, not by us)

Automatically Collected Information

IP address (used for rate limiting and security, not tracking)
Browser type and device information
Pages visited and usage patterns (anonymized analytics)

3. How We Use Your Information

Provide the Service: Process bookings, send appointment reminders, manage customer records, and handle payments.
Communicate with you: Send transactional emails (booking confirmations, reminders, cancellations), trial reminders, and essential service updates.
Improve the Service: Analyze usage patterns (in aggregate) to improve features and fix issues.
Protect the Service: Detect and prevent fraud, abuse, and security threats (rate limiting, anomaly detection).
Comply with the law: Respond to legal requests and meet regulatory obligations.

We do not sell, rent, or share your personal data with third parties for advertising or marketing purposes. Ever.

4. Third-Party Services

We use the following third-party services to operate MeetVault:

Stripe — Payment processing and subscription billing. Stripe stores card details; we only receive the last 4 digits and card brand. See Stripe's Privacy Policy.
Clerk — Authentication and user management. See Clerk's Privacy Policy.
Resend — Transactional email delivery (booking confirmations, reminders).
Twilio — SMS reminders (only if configured by the shop owner). Phone numbers are shared with Twilio solely for message delivery.
Vercel — Hosting and infrastructure. See Vercel's Privacy Policy.
Neon — Database hosting (PostgreSQL). Data is encrypted at rest and in transit.

5. Data Storage & Security

Data is stored in secure, encrypted PostgreSQL databases hosted on Neon (US-East region).
All data in transit is encrypted via TLS/HTTPS.
Payment card data is never stored on our servers — it is handled entirely by Stripe (PCI DSS compliant).
Access to production systems is restricted to authorized personnel only.
We use rate limiting, CRON_SECRET protection, and webhook signature verification to prevent unauthorized access.

6. Data Ownership & Control

For Shop Owners

You own your customer data. MeetVault is a data processor acting on your behalf.
You can export all customer data at any time via CSV export.
You can delete individual customer records from the dashboard.
Upon account deletion, all shop data (customers, appointments, payments) will be permanently deleted within 30 days, except where retention is required by law.

For Customers (Booking Through a Shop)

Your data is controlled by the shop you booked with. Contact the shop directly for data access, correction, or deletion requests.
MeetVault does not use your booking data for any purpose other than providing the Service to the shop you booked with.
You can request deletion of your data by contacting privacy@meetvault.app.

7. Email & SMS Communications

Transactional messages (booking confirmations, reminders, cancellations) are sent automatically as part of the Service and cannot be opted out of.
Marketing messages (broadcast, win-back campaigns) are only sent by shop owners to their own customers. Shops are responsible for obtaining appropriate consent.
SMS messages are only sent if the shop owner has configured Twilio and the customer provided a phone number during booking.

8. Cookies

MeetVault uses cookies and similar technologies to operate and improve the Service. These include essential cookies for authentication (via Clerk) and session management. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. You can control cookies through your browser settings, though disabling essential cookies may prevent you from using the Service.

9. Data Retention

Active accounts: Data is retained for the duration of the subscription.
Canceled accounts: Data is retained for 30 days after cancellation to allow reactivation, then permanently deleted.
Financial records: Payment and transaction records may be retained for up to 7 years for tax and legal compliance.
Audit logs: Retained for 12 months for security and debugging purposes.

10. Children's Privacy

MeetVault is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

11. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Object to or restrict processing of your data
Data portability (receive your data in a structured format)

To exercise any of these rights, contact privacy@meetvault.app. We will respond within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions or requests, contact us at privacy@meetvault.app.

For general support, contact support@meetvault.app.