Privacy

01

Two kinds of person, and it matters which you are

A business owner or a member of their team is our customer. We decide what we collect about them and we answer to them directly.

A client of that business is not our customer. Their name, their contact details, their appointments, and the notes kept about them belong to the business that entered them. That business decides what to collect and how long to keep it. We hold those records on its behalf and act on its instructions.

If you are a client of a business that uses Turnexify and you want to see, correct, or delete what is held about you, ask that business. They can do all three from their dashboard. If you cannot reach them, write to us and we will help you find the right contact.

02

What we collect

• Account details: your name, your email address, and a password that we never store in a readable form.
• Business details: the business name, its web address, its location, opening hours, services, prices, and booking policy.
• Client records entered by the business: name, contact details, appointment history, and any notes or tags the business chooses to keep.
• Bookings: what was booked, with whom, when, at what price, and whether it was kept, moved, or cancelled.
• Payment records: amounts, dates, status, and a reference to the transaction at our payment processor. We never see or store full card numbers.
• Content you upload: photographs of your work, your logo, and the words on your public page.
• Messages we send on your behalf: confirmations, reminders, and whether they were delivered or failed.
• Device details for notifications: if you switch on push notifications, the subscription your browser gives us.
• Technical records: sign-in times, IP address, browser, and error logs. We keep these to run the service and to investigate abuse.
• Messages you send us: if you use the contact form on this site, the name, email address, phone number, type of business, and message you type. We keep them for twelve months so a follow-up has its history, then delete them. Sending the form lets us contact you by email or phone about your message and about Turnexify, including news and offers, until you ask us to stop.

03

What we do not collect

We do not run advertising, we do not embed advertising trackers, and we do not build profiles of you for anyone else. There is no analytics vendor watching visitors on this site.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have never done either and this notice would have to change before we could.

04

Why we hold it

• To run the service you signed up for: showing your page, taking bookings, sending confirmations, and recording payments.
• To keep the service working: backups, error investigation, and preventing abuse.
• To bill you for the plan you chose, and to answer you when you write to us.
• To meet legal obligations, including keeping records of transactions for the period the law requires.

05

Cookies

We use as few as the product can work with, and none of them are for advertising.

• A session cookie that keeps you signed in. Without it the dashboard cannot know who you are.
• Preference cookies that remember your theme, your language, and whether the sidebar is open. They exist so the page renders correctly on the first paint instead of flickering after it loads.
• Nothing else. This marketing site sets no cookies at all, and its contact form does not need one.

06

Who else touches it

We use a small number of companies to run the service. Each one only receives what it needs to do its job, and none of them may use it for their own purposes.

• Supabase — the database, sign-in, and file storage. Hosted in the United States.
• Stripe — card payments and payouts to your bank, for businesses that connect Stripe. Stripe handles card details directly; they do not pass through us.
• Square — card payments and payouts to your bank, for businesses that connect Square. Square handles card details directly, including in the card form on a business’s booking link; they do not pass through us.
• Resend — sending the confirmation and reminder emails.
• Vercel — hosting the applications and issuing certificates for custom domains.

07

Where it is held

Our systems run in the United States. If you or your clients are elsewhere, using Turnexify means the information described here is transferred to and stored in the United States.

08

How long we keep it

Business and client records stay for as long as the business keeps its account, and are deleted when the business asks us to delete them or closes the account.

Records of completed transactions are kept longer where tax and accounting law requires it.

Technical logs are kept for a short period and then discarded.

09

Your rights

You can ask us to show you what we hold about you, correct it, delete it, or hand it to you in a portable form. We will not charge you and we will not treat you differently for asking.

Most of it you can do yourself from the dashboard without writing to anyone. If you want an account deleted entirely, write to us and we will confirm before we act, because deletion is not reversible.

10

Security

Every business is isolated from every other at the database level, not merely in the application, so one business cannot read another’s records even if the application has a bug. Passwords are hashed. Connections are encrypted in transit. Card numbers never reach our systems.

No system is perfect. If something goes wrong that affects you, we will tell you.

11

Children

Turnexify is a tool for running a business and is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has given us information, write to us and we will remove it.

12

Changes

When this notice changes, the date at the top changes with it. If a change materially affects what we do with your information, we will tell account holders by email before it takes effect.

13

Contact

Write to hello@turnexify.com. Turnexify is a product of AxionLabs. Readers in the European Union or the United Kingdom will find the detail that applies to them in the GDPR notice.