Privacy Policy

1. Who We Are

Tailro is a B2B SaaS appointment scheduling and business management platform designed for appointment-based businesses including boutiques, tailoring studios, salons, spas, clinics, and consultants.

Contact: [email protected]

Data Controller Roles: Tailro acts as the data controller for merchant account data (store owners and staff). Merchants act as data controllers for their customers' booking data — in that relationship, Tailro is the data processor acting on the merchant's instructions.

2. What Data We Collect

2a. From Merchants & Staff (B2B Users)

Account data: First name, last name, email address, phone number
Authentication data: OTP codes (6-digit, 2-minute TTL), Google OAuth sub-ID, OAuth tokens
Business data: Entity name, store name, store slug, store address, timezone, logo (stored in Cloudflare R2)
Calendar data: Google Calendar OAuth access token and refresh token, calendar email, linked calendar ID (stored encrypted)
Subscription & billing data: Plan name, billing cycle, payment status, Razorpay Order ID, Razorpay Payment ID — card/UPI details are never stored by Tailro; they are held by Razorpay
Staff availability data: Working hours, break times, leave dates, per-store role (Owner, Manager, Staff)
Usage logs: Feature usage metrics (appointments created, staff count, services count) used for plan enforcement

2b. From End Customers (Booking Users)

Identity: First name, last name, email address, phone number
Authentication data: Email OTP, Google OAuth sub-ID, Shopify Customer Account ID (if 'Login with Shopify' is used at a store's booking page)
Booking history: Appointment date/time, service, staff, status, location, online meeting URL, notes, payment status, price paid
Payment records: Amount paid, currency, payment method type (not card details), Razorpay transaction ID
Store relationship: Which stores the customer has booked at

2c. From Shopify Integration

Shop domain (e.g. my-store.myshopify.com)
OAuth access token (permanent, stored server-side, never exposed in API responses)
Granted OAuth scopes (e.g. write_customers, read_orders)
Navigation menu GIDs (Shopify internal GraphQL IDs for the booking link in the merchant's store menu)
Shopify Customer Account API credentials (client ID and client secret) for 'Login with Shopify' on the booking page
Shopify customer records synced from/to Shopify: name, email, phone

2d. Files & Media

Store logos uploaded by merchants — stored in Cloudflare R2
Staff profile pictures — stored in Cloudflare R2
Store gallery images — stored in Cloudflare R2
Invoice documents — stored in Cloudflare R2
All files are served via Cloudflare R2 public CDN URL

2e. Technical / Automatic Data

HTTP request logs: timestamp, HTTP method, URL path, response status, latency
IP addresses (implicit in HTTP request handling)
Request headers including User-Agent

3. How We Use the Data

Data	Purpose	Legal Basis
Merchant email & name	Account creation, login OTP, transactional email	Contract performance
Google OAuth token	Sync appointments to merchant's Google Calendar	Explicit consent
Shopify access token	Manage booking link in merchant's Shopify store navigation	Contract performance
End customer email	Appointment confirmation and reminder emails	Legitimate interest / consent
End customer booking history	Display to merchant and customer, power analytics dashboard	Contract performance
Payment IDs (Razorpay)	Reconciliation, dispute resolution	Legal obligation
Subscription data	Plan enforcement, feature gating	Contract performance
Feature usage logs	Enforce plan limits (appointment quotas, staff limits)	Contract performance
File uploads	Display in booking pages and merchant dashboards	Contract performance
Request logs	Debugging, security monitoring (no long-term profiling)	Legitimate interest

4. Third-Party Services We Share Data With

We share data with the following third parties only as necessary to operate the platform:

Service	What We Send	Why	Their Privacy Policy
Razorpay	Merchant subscription billing amounts; customer appointment payments	Payment processing	razorpay.com/privacy
Google (Calendar API)	Appointment details (title, time, staff, meeting URL)	Sync to merchant's Google Calendar	policies.google.com/privacy
Google (OAuth)	Email address, name	Merchant & customer login	policies.google.com/privacy
Shopify	Customer name, email, phone (sync on new booking)	Merchant requested customer sync	shopify.com/legal/privacy
Cloudflare (R2 Storage)	Uploaded files (logos, images, invoices)	Object storage & CDN	cloudflare.com/privacypolicy
Cloudflare (Custom Domains)	Merchant's custom domain hostname	SSL/DNS management for branded booking pages	cloudflare.com/privacypolicy
SMTP Email Provider	Recipient email, appointment details	Transactional emails	Provider's own policy

5. Data Retention

Data	Retention Period
Merchant account data	Duration of account + 90 days after deletion request
Staff records	Duration of account
End customer data	As long as their merchant relationship exists; customers can request deletion via merchant or [email protected]
Appointment records	Duration of merchant account (needed for merchant's business records)
Payment records	7 years (financial/tax legal requirement)
Shopify integration tokens	Deleted immediately on disconnect or app uninstall (hard delete)
PendingShopifyInstall records	Deleted on completion or shop/redact webhook
OTP codes	2 minutes TTL + swept by automated cron job
Google Calendar tokens	Deleted on calendar disconnection
Request logs	30 days rolling
Uploaded files (R2)	Deleted when merchant deletes them or account is closed

6. Your GDPR Rights (EU Users)

If you are located in the European Economic Area (EEA), you have the following rights:

Right to access — email [email protected] to request a copy of your data
Right to rectification — update your data via the dashboard or by emailing [email protected]
Right to erasure ('right to be forgotten') — email [email protected]; we respond within 14 working days
Right to data portability — request a CSV export of your appointment history via [email protected]
Right to object or restrict processing — email [email protected]
Right to withdraw consent (Google OAuth) — disconnect your calendar from the Tailro dashboard at any time
Right to lodge a complaint with your supervisory authority — you may contact your local EU Data Protection Authority (DPA)

7. Security

Data in transit: TLS/HTTPS enforced on all connections
Passwords: Not stored — Tailro uses OTP-only authentication; there is no password system
OAuth tokens: Stored server-side only; never returned in API responses
Encryption: Sensitive tokens (e.g. Google Calendar tokens) are encrypted at rest
Access control: Role-Based Access Control (RBAC) — staff can only access data for their own store
Shopify HMAC verification on all incoming webhook requests

8. Cookies

We use strictly necessary cookies to maintain your authenticated session. Please see our Cookie Policy for full details.

9. Children's Privacy

Tailro is not directed at children under the age of 13 (or 16 in certain EU jurisdictions). We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us at [email protected] and we will delete it promptly.

10. Changes to This Policy

We will notify merchants by email of any material changes to this Privacy Policy. The effective date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Tailro

Email: [email protected]