Privacy Policy

Slotit is a business operations and appointment-management platform offered by Ummku’s Ventures Private Ltd in India. This Policy applies when you visit our website, request early access, use a business or service-provider account, use a customer booking page, or otherwise interact with the Services.

The Services may be used by business owners, administrators, receptionists, service providers and customers. References to “you” mean the individual using the relevant part of the Services.

For information collected directly for Slotit accounts, our website, early-access requests, support and our own communications, Ummku’s Ventures Private Ltd generally acts as the Data Fiduciary.

A business using Slotit generally decides why and how its customer and workforce records are processed. For that business-managed information, the business is normally the Data Fiduciary and Ummku’s processes the information on its behalf as a Data Processor. Please contact the relevant business first if your request concerns a booking or record controlled by that business.

Depending on how you use Slotit, we may collect the following categories of personal data:

• Account and business information, such as name, mobile number, email address, profile photograph, business name, category, logo, address, working hours and assigned role.
• Customer profile information, such as a unique mobile number and, where provided, name, email address, date of birth, gender, referral source and preferred service providers.
• Service-provider information, such as name, mobile number, email address, photograph, business association, skills, schedules, check-in and check-out records, assignments and work history.
• Appointment and service information, including selected services, date, time, duration, booking source, assigned provider, status, preparation details, cancellations, no-shows and service history.
• Customer records created during service delivery, including consents, service notes and optional before-and-after photographs.
• Location information used at provider check-in, including whether the provider is near or away from the business location.
• Early-access, support and communication information that you choose to provide.
• Technical information, such as device type, browser, IP address, cookie identifiers, diagnostic logs and security events.
• Payment metadata, payment status and transaction references when payment features are enabled. Sensitive payment credentials are handled by the selected payment gateway.

We collect personal data directly from you, from a business or authorised user acting on your behalf, through customer booking pages and service-provider workflows, automatically from your device, and from service providers that support the Services.

If you provide information about another person, you must be authorised to do so and must give that person any notice required by applicable law.

We use personal data only for specified purposes connected with operating, protecting and improving Slotit, including to:

• Create and secure accounts, verify access and administer business roles.
• Create, schedule, assign, reschedule, manage and complete appointments.
• Match services with appropriately skilled and available providers.
• Support provider check-in, presence and service-delivery workflows.
• Maintain customer profiles, service history, consents and optional photographs.
• Process or record payments through payment partners and produce billing records.
• Send operational messages about bookings, assignments, payments and account activity.
• Provide support, respond to requests and manage early-access enquiries.
• Detect misuse, prevent fraud, troubleshoot errors and protect the Services.
• Measure performance and improve product reliability, usability and features.
• Comply with legal obligations and enforce our agreements.

Where consent is the basis for processing, you may withdraw it through the available product controls or by contacting us. Withdrawal does not affect processing already completed lawfully.

Businesses control access to customer and provider records within their Slotit workspace. A service provider may view information needed for assigned work and relevant history for customers they have previously served. Customer mobile numbers and email addresses may be masked in the provider experience.

Before-and-after photographs are optional and are intended as private service records for the business and its authorised providers. They are not automatically shown to the customer or made public. We do not use customer photographs to train a general-purpose artificial-intelligence model unless we provide a separate notice and obtain any consent required by law.

We do not sell or rent personal data. We may share it only as needed with:

• The business and authorised users responsible for the relevant account, booking or service.
• Cloud hosting, authentication, communications, analytics, support and security providers acting under contractual safeguards.
• Payment gateways, banking partners and related service providers when payment features are used.
• Professional advisers, auditors, insurers, investors or transaction counterparties subject to appropriate confidentiality obligations.
• Government authorities, regulators, courts or law-enforcement bodies when required by law or necessary to protect rights and safety.
• A successor organisation in connection with a merger, restructuring, financing or sale, subject to applicable legal requirements.

Where a business enables payment features, customers may pay before or after a service, through a payment link, dynamic QR code or another method supported by the selected payment gateway. The gateway may offer UPI, cards, net banking or other payment methods.

The payment gateway processes sensitive payment credentials under its own privacy notice and terms. Slotit may retain limited transaction information such as the amount, payment method category, status, time, gateway reference, refund status and the user who recorded collection.

We may use necessary cookies and similar technologies to keep you signed in, maintain security, remember preferences and operate the Services. With appropriate notice or choice, we may also use analytics technologies to understand product usage and improve performance.

You can control many cookies through your browser settings. Blocking necessary cookies may prevent parts of the Services from working correctly.

Provider location may be collected when a provider checks in so that Slotit can show whether check-in occurred near or away from the business location. Check-in is not automatically blocked when the provider is away. We do not use this feature for continuous background tracking unless we provide a separate notice.

Photographs and other media should be captured only when relevant to the service and with any consent required by the business or applicable law. Businesses and providers must avoid uploading information that is unnecessary, unlawful or unrelated to service delivery.

We retain personal data only for as long as needed for the purposes described in this Policy, to provide the Services, maintain business and transaction records, resolve disputes, prevent fraud and meet legal obligations. Retention periods may vary by record type and by the instructions of the relevant business.

When an account or customer record is deleted or deactivated, some information may remain in restricted backups or records that must be kept for legal, security, accounting or dispute-resolution purposes. We will delete or anonymise information when it is no longer required.

We use reasonable technical and organisational safeguards designed to protect personal data, including access controls, authentication, role-based permissions, logging, encryption where appropriate and controls for trusted service providers.

No system is completely secure. You are responsible for protecting your mobile number, PIN, passwords and devices, and for promptly notifying us or the relevant business if you suspect unauthorised access.

Some service providers may process or store information outside India. Where this occurs, we take reasonable steps to use providers and contractual arrangements that support appropriate protection and we comply with restrictions or requirements applicable under Indian law.

Slotit is not directed to children. A business must not knowingly create or process a child’s personal data through the Services unless it has a lawful basis and has obtained verifiable consent from a parent or lawful guardian where required. If you believe a child’s information has been processed improperly, please contact us.

Subject to applicable law and the role of the relevant business, you may ask for information about processing, request correction, completion or updating of personal data, request erasure, withdraw consent, raise a grievance and nominate another individual to exercise rights in the event of death or incapacity.

You may opt out of promotional email using the unsubscribe option in the message or by contacting us. Operational messages required for bookings, security, payments or account administration may continue. We may need to verify your identity before acting on a request.

For questions, privacy requests or grievances concerning Slotit, email our Privacy and Grievance Officer at hi@getslotit.com. Please describe your request and the relevant business or account, if applicable.

If the relevant information is controlled by a business using Slotit, we may refer the request to that business or assist it in responding. We aim to acknowledge and resolve grievances within the periods required by applicable law.

We may update this Policy to reflect changes to the Services, our practices or applicable law. We will update the “Last updated” date and, where required, provide additional notice or request fresh consent.

Contact us at hi@getslotit.com and we’ll help you understand or address your concern.