Privacy Policy

Sets by Vii provides online nail appointment booking and appointment management. This policy explains what information the website processes and why.

Information we collect

• Booking details such as your name, phone number, service, appointment date and time, notes, inspiration images, quotes, payments and appointment status.
• SMS records used for verification codes, booking updates and reminders, including provider status. Verification codes are temporary.
• Basic website analytics such as anonymous session identifiers, page activity, approximate device category, referring website and time of activity. We do not store raw IP addresses in the analytics records.
• Owner-authorized Google Calendar credentials and calendar information when the admin enables calendar sync.

How we use information

We use this information to schedule and manage appointments, prevent double bookings, provide customer support, send requested operational messages, protect the booking system, improve the website and maintain business records.

Google Calendar data

The admin may authorize Sets by Vii to create and maintain a separate “Sets by Vii” Google Calendar. The website uses Google data only to create that calendar and add, update or remove appointment events. Events can contain the client name, service, appointment status and time, duration, client and owner notes, quote details, inspiration and result links, and an admin booking link. The website does not read or modify unrelated calendars or events.

Google refresh credentials are encrypted at rest and used only for unattended calendar synchronization. Google user data is not sold, used for advertising or transferred to third parties except as necessary to provide this calendar-sync feature. Use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Service providers

Information is processed by providers needed to operate the service, including Railway for application and database hosting, Twilio for SMS delivery, Cloudflare R2 for uploaded images, Google for optional calendar sync, and the client’s mobile push provider for optional admin notifications. Each provider processes information under its own terms and privacy practices.

Retention and security

Booking and business records are retained for as long as reasonably needed to provide services, maintain records, resolve issues and meet legal obligations. Expired verification challenges are deleted automatically. We use access controls, encrypted HTTPS connections and restricted admin pages, but no online system can guarantee absolute security.

Your choices

Clients can use the booking-management page to review or update supported appointment information. They can reply STOP to opt out of SMS where applicable. The admin can disconnect Google Calendar through the Website tab and can also revoke access in Google Account settings. Disconnecting stops future Google API use but does not automatically delete calendar events already created.

Contact

For privacy questions or requests concerning your information, email [email protected].