1. Introduction

Kentroi ("we," "our," or "us") operates the kentroi.com website and Kentroi service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Kentroi, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

Name and email address
Authentication credentials (managed securely by Clerk)
Profile information you choose to provide

2.2 Calendar Data

If you connect your Google Calendar, we access:

Calendar events (to check availability and prevent double-booking)
Calendar metadata (calendar names and IDs)

We only read calendar data to determine availability. We create events only when appointments are booked through your widget.

2.3 Booking and Form Data

When visitors use your widget, we collect:

Visitor name and email address
Appointment details (date, time, type)
Form submissions and responses
Chat messages with the AI chatbot

2.4 Usage Data

We automatically collect:

Log data (IP address, browser type, pages visited)
Device information
Performance and error data

3. How We Use Your Information

We use collected information to:

Provide and maintain our service
Process appointments and form submissions
Send appointment confirmations and reminders
Power the AI chatbot to answer visitor questions
Process payments and manage subscriptions
Improve and optimize our service
Communicate with you about updates and support
Detect and prevent fraud or abuse

4. Third-Party Services

We use the following third-party services that may collect and process your data:

4.1 Clerk (Authentication)

We use Clerk for user authentication. Their privacy policy: clerk.com/legal/privacy

4.2 Stripe (Payments)

We use Stripe to process payments. We do not store your payment card details. Stripe's privacy policy: stripe.com/privacy

4.3 Google (Calendar Integration)

We use Google Calendar API to sync appointments. Google's privacy policy: policies.google.com/privacy

Google User Data: Sharing, Transfer, and Disclosure

We do not share, transfer, or disclose your Google user data to any third parties except as necessary to provide the calendar synchronization functionality you have authorized.

Specifically, regarding your Google Calendar data:

We do not sell your Google user data to anyone
We do not share your Google user data with advertisers or marketing companies
We do not transfer your Google user data to third parties for purposes unrelated to the calendar functionality
We do not use your Google user data for any purpose other than checking availability and creating/managing appointments
We only access the minimum data necessary: calendar event times (to check availability) and the ability to create events (when appointments are booked)

Your Google Calendar connection can be disconnected at any time from your Kentroi dashboard settings. Upon disconnection, we immediately invalidate the stored access tokens. You can also revoke access directly from your Google Account permissions.

4.4 Anthropic (AI Chatbot)

Our AI chatbot is powered by Claude (Anthropic). Chat messages are processed by Anthropic's API. Anthropic's privacy policy: anthropic.com/privacy

4.5 Vercel (Hosting)

Our service is hosted on Vercel. Vercel's privacy policy: vercel.com/legal/privacy-policy

5. Data Security

We implement appropriate security measures including:

Encryption of data in transit (HTTPS/TLS)
Encryption of sensitive data at rest
Secure token storage for calendar connections
Regular security assessments

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You can request deletion of your account and associated data at any time.

Appointment and form submission data is retained according to your subscription plan and can be exported or deleted upon request.

7. Your Rights

Depending on your location, you may have the following rights:

Access: Request a copy of your personal data
Correction: Request correction of inaccurate data
Deletion: Request deletion of your data
Portability: Request export of your data
Objection: Object to certain processing of your data
Withdraw consent: Withdraw consent for calendar access at any time

To exercise these rights, contact us at privacy@kentroi.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or sell your data to advertisers.

9. Children's Privacy

Kentroi is not intended for use by children under 13. We do not knowingly collect data from children under 13. If you believe we have collected such data, please contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: privacy@kentroi.com
Website: kentroi.com