Effective July 15, 2026
GoSlotify Privacy Policy
How personal information moves through scheduling, payment, calendar, email, and support workflows.
Document version 2026-10-02. Last updated July 15, 2026.1. Who operates GoSlotify
GoSlotify is operated by AliveMind Tech Pvt. Ltd. (AliveMind, we, us, or our). This Privacy Policy explains how GoSlotify collects, uses, discloses, and protects personal information when individuals visit the public website, create or use a workspace, connect a calendar, book a meeting, receive transactional email, request support, or interact with platform administration.
Questions and privacy requests may be sent to info@alivemind.com. We may need to verify identity and account authority before completing a request.
2. Scope and roles
This Policy applies to GoSlotify websites, booking pages, dashboards, support tools, and related transactional communications. It does not govern an external website linked from GoSlotify or a customer's independent handling of information outside the platform.
A company workspace may determine why and how it uses invitee and team-member information. In that context, the company may be the business or controller and GoSlotify acts as its service provider or processor. GoSlotify also processes information for its own account, security, billing, legal, and product-operation purposes.
3. Information we collect
Account and workspace information includes names, work email addresses, usernames, password hashes, company names, websites, public profile slugs, roles, timezone, biography, profile image reference, team membership, availability, meeting types, blocked time, reminder settings, onboarding progress, and configuration status.
Booking information includes invitee name, email, optional phone number, timezone, meeting selection, scheduled time, notes, cancellation or reschedule status, calendar event reference, and the host profile associated with the booking.
Technical and security information may include IP-derived request information, browser or device information, cookie and session identifiers, timestamps, rate-limit events, authentication activity, provider delivery status, audit records, and diagnostic logs. We minimize these records and do not intentionally place credentials in logs.
Support information includes questions, AI assistant messages, redacted conversation content, optional follow-up email, conversation status, and the signed-in role or company identifier when support is used from a dashboard.
4. How we use information
We use information to provide booking and account features, verify email ownership, authenticate users, enforce role and company boundaries, calculate availability, coordinate meetings, send transactional communications, process subscriptions, provide support, prevent abuse and fraud, diagnose reliability issues, maintain audit history, comply with law, and improve implemented product workflows.
We do not use private calendar event content to advertise unrelated services. We do not permit the public support assistant to retrieve tenant records or developer credentials.
5. Payments and billing
Stripe processes payment details through Stripe-hosted Checkout. GoSlotify does not store a full payment card number or card security code. We store Stripe customer, Checkout, subscription, invoice, payment-status, refund, and dispute references needed to provide access and billing history.
Stripe may process information as a processor for GoSlotify and may also act as an independent controller for fraud prevention, regulatory, network, and legal obligations. Stripe's own privacy notices govern those independent activities.
6. Calendar and email integrations
When a user connects Google Calendar, GoSlotify may receive an authorization token, connected email address, calendar identifier, token expiration, availability information required for conflict checks, and event identifiers required to create, update, or remove a scheduled event. OAuth tokens are stored separately from ordinary profile settings and protected by platform encryption.
Resend or another configured transactional provider processes recipient address, subject, message content, attachments, and delivery metadata to send email verification codes, booking confirmations, reminders, cancellations, activation links, and billing notices.
7. AI-assisted support and Zoom meetings
When AI support is configured, a support question and limited product context may be sent to OpenAI to generate a GoSlotify-related answer. Public AI support does not receive authenticated account data. Authenticated support receives only the signed-in role, company-safe product context, and the submitted question.
Credential-like strings are redacted where practical before storage. Users should not submit passwords, API keys, payment-card information, Social Security numbers, tax records, health records, or other sensitive regulated data to support chat. AI responses may be incomplete or incorrect and should be verified before acting on account or billing guidance.
When a host connects Zoom, GoSlotify reads meeting details and participants for that host's GoSlotify meetings through the host's Zoom connection, as described in the Zoom integration guide. GoSlotify does not record meetings and does not collect Zoom recordings, transcripts or meeting summaries. GoSlotify also reads the host's upcoming Zoom meetings so clients cannot book over them; only their times are used, and they are not stored beyond a short cache.
9. Service providers and disclosures
We disclose information to providers only as needed for platform operations. Current or expected providers include Vercel for application hosting and delivery; Nile and PostgreSQL infrastructure for database services; Stripe for payment processing; Resend for transactional email; Google when a user connects Google Calendar; Zoom for meeting creation and tracking when a host connects Zoom; OpenAI when AI support is enabled; and security, monitoring, or professional advisers used to protect and operate the service.
We may disclose information to comply with valid legal process, enforce agreements, investigate fraud or abuse, protect users or the public, complete a corporate transaction subject to appropriate safeguards, or act with the user's direction. We do not disclose one customer's workspace data to another customer.
10. Retention
We retain active account, booking, support, and configuration information while needed to provide the service. After account closure, information may remain for a limited period in backups and may be retained longer when required for security investigations, payment reconciliation, tax or accounting records, dispute resolution, legal obligations, or enforcement of agreements.
Authentication codes and activation links expire quickly. Rate-limit and diagnostic records are retained only as long as reasonably needed for security and reliability. A customer should export required business records before closing an account.
11. US privacy rights and choices
Depending on residence and whether a law applies to AliveMind's processing, a person may request access, correction, deletion, or portability of personal information and may appeal a denied request. We may need to verify identity, email ownership, residency, and authority over a company workspace. Authorized agents may be required to provide proof of authority.
California residents may have rights to know, correct, or delete personal information, receive information about collection and disclosure, limit certain sensitive-information uses, opt out of sale or sharing if those practices occur, and receive nondiscriminatory treatment for exercising applicable rights. Exceptions may apply for security, billing, legal, and service-delivery records.
GoSlotify does not currently sell personal information or share it for cross-context behavioral advertising. If this practice changes, we will provide legally required notice and opt-out controls, including recognition of applicable preference signals.
12. Security
GoSlotify uses administrative, technical, and organizational safeguards designed for the information handled, including bcrypt password hashing, email one-time codes, one-way token digests, tenant-scoped server authorization, encryption for supported provider credentials, rate limits, signed Stripe webhooks, CSRF protection, restricted error output, and audit records.
No system can guarantee absolute security. Users must protect passwords, email accounts, devices, booking-management links, and connected provider accounts and should report suspected unauthorized access promptly.
13. International processing
AliveMind and its providers may process information in the United States, India, and other countries where operations or providers are located. Those countries may have different data-protection laws. We use contractual and operational safeguards appropriate to the service and applicable obligations.
14. Children
GoSlotify is a business scheduling service and is not directed to children under 13. We do not knowingly collect personal information directly from a child under 13 without legally required authorization. Contact info@alivemind.com if you believe a child has submitted information so we can review and take appropriate action.
15. External links
GoSlotify links to AliveMind network companies, calendar providers, payment pages, and other external services. Their privacy practices and content are governed by their own notices. A link does not make GoSlotify responsible for an external service's handling of information.
16. Policy changes
We may update this Policy to reflect product, provider, legal, or operational changes. The page displays an effective date and version. Material changes may also be communicated through email or the dashboard when appropriate. Continued use after an effective change is subject to applicable law and any required renewed consent.
17. Contact and requests
Send privacy questions or requests to info@alivemind.com with the subject Privacy Request. Describe the request, the relevant GoSlotify account or booking, state of residence, and a safe method for follow-up. Do not email passwords, one-time codes, API keys, or full payment-card information.