Privacy Policy

1. Introduction

Welcome to Shagazem ("we," "our," or "us"). Shagazem is operated by PsycheVibes, a company registered in the United Kingdom. We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our WhatsApp business management platform.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, phone number, and business details
• Customer Data: Information about your customers including names, contact details, appointment history, and payment records
• Business Information: Business profile, operating hours, services offered, and pricing
• Communication Data: Messages, quick replies, and customer interactions

2.2 Automatically Collected Information

• Usage Data: How you interact with our platform, features used, and time spent
• Device Information: Browser type, operating system, IP address, and device identifiers
• Cookies: We use cookies and similar technologies to enhance your experience
• Session Recordings: We use Microsoft Clarity to record user sessions for UX improvement (see Section 6.1)

2.3 Third-Party Integrations

• Google Calendar: With your permission, we access your Google Calendar to sync appointments
• OAuth Data: Authentication tokens and profile information from connected services

3. How We Use Your Information

We use your information to:

• Provide and maintain our services
• Manage your account and customer relationships
• Process appointments, payments, and bookings
• Sync with Google Calendar and other integrated services
• Send notifications about appointments and system updates
• Improve our platform and develop new features
• Ensure security and prevent fraud
• Comply with legal obligations

4. Data Isolation and Security

Strict Multi-Tenant Isolation: Your data is completely isolated from other users. You can only access your own customers, appointments, and business information. We implement technical and organizational measures to ensure no user can view or access another user's data.

Security Measures: We use industry-standard encryption, secure authentication, and regular security audits to protect your information. All data is transmitted over HTTPS and stored securely.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data only in these circumstances:

• With Your Consent: When you authorize integrations like Google Calendar
• Service Providers: Third-party vendors who help us operate our platform (hosting, analytics, payment processing)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

6. Analytics and Session Recording

6.1 Session Recording (Microsoft Clarity)

We use Microsoft Clarity, a session recording and analytics tool, to understand how users interact with our platform. This helps us identify usability issues and improve your experience.

What Clarity collects:

• Mouse movements, clicks, and scrolling behavior
• Page views and navigation patterns
• Session duration and interaction heatmaps

Privacy protections we have in place:

• All sensitive data (names, phone numbers, emails, payment amounts) is automatically masked in recordings
• Form inputs and text fields are hidden to protect your privacy
• No passwords or financial information is ever captured
• Recordings are used solely for UX improvement and are not shared with third parties

For more information about Microsoft Clarity's privacy practices, visit: Microsoft Clarity Terms

6.2 Google Calendar Integration

When you connect your Google Calendar, we request permission to:

• View and create calendar events
• Sync appointments between Shagazem and Google Calendar
• Receive notifications about calendar changes

You can disconnect Google Calendar at any time from your Settings page. We only access your calendar data for the purpose of syncing appointments and do not share this data with third parties.

7. Your Rights

Under UK GDPR and data protection laws, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data
• Restriction: Request limitation of processing
• Withdraw Consent: Revoke consent for data processing at any time

To exercise these rights, contact us at [email protected]

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymize your data within 30 days, except where we are required to retain it for legal or regulatory purposes.

9. International Data Transfers

Your data may be transferred to and processed in countries outside the UK. We ensure appropriate safeguards are in place to protect your data in accordance with UK GDPR requirements.

10. Children's Privacy

Shagazem is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of Shagazem after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: