Privacy Policy

Overview

This Policy explains what personal data Palistr collects, why we collect it, and what you can do about it. It covers visitors to our marketing pages, trial and paying tenants, and the staff those tenants add.

Who controls client data

The business that runs a Palistr account owns its client records and decides who may see and change them. Palistr processes that data to run the platform and only acts on the business's instructions, except where the law requires otherwise.

What we collect

Account and billing: name, email address, a hashed password, payment method details for subscriptions, and contact preferences.

Business data: the clients, appointments, queue entries, payments, ledger, and files that you and your staff add while running the business.

Usage and device: IP address, browser and device type, pages visited, and error logs. Error logs are used to diagnose problems, not to track you as an individual.

Payments: full card details are handled by PayMongo, our payment provider. Palistr never sees or stores full card numbers.

How we use data

To run the platform: create your account, hold your records, send booking confirmations and reminders, and record charges and payments.

To keep the service secure: enforce permissions, keep an audit log of financial and client data changes, and detect abuse.

To support and improve: answer support requests and measure platform performance in the aggregate. We do not sell your data.

Email and SMS

We send transactional email, including booking confirmations and reminders, to you and, on your behalf, to your clients. SMS reminders go out only when your account has SMS enabled.

We do not send marketing email unless you opt in. Booking reminders are transactional and are tied to a specific appointment.

Where data is processed

Palistr stores data on Neon, a hosted Postgres database. The app runs on Cloudflare, which also serves our public pages and edge requests. Email reminders go through Resend. Optional SMS goes through Twilio. Subscription payments go through PayMongo.

Each processor only handles the data needed for its role and operates under its own data-processing terms.

Retention and deletion

We keep your business data while your account is active. You can export it at any time and delete it from Settings. When an account closes, active data is removed and backups are purged over time.

Reminder and audit records may be kept as required by law or for security.

Your rights

You may access, correct, export, and delete the data tied to your account, mostly from within the app or by asking us.

If you are a client of a business that uses Palistr, contact that business first. They control the record about you.

Security

Data is encrypted in transit, passwords are stored as hashes, and each tenant's data is isolated from other tenants. Financial and client data changes write an audit log you can review in Settings.

Children's data

Palistr is for businesses and their adult staff. If a business keeps records of minors, it enters them under its own responsibility and in line with the law.

Changes to this policy

We may update this Policy. Material changes are surfaced in the app or by email, and the status at the top of this page is updated when it takes effect.

Contact

Questions about this Policy? Open the Help section in the app or reply to any email we send you.