1. Data controller
Appointrdy is the data controller for the personal data we process about you as a website visitor and as a contact person at a customer. When you, as a customer, upload data about your employees and end-customers, you are the data controller — and Appointrdy is the data processor. See our data processing agreement.
Contact: hello@appointrdy.com
2. What data do we process?
As a website visitor
- IP address and browser information
- Cookies (see cookie policy)
- Any contact form data (name, email, message)
As a customer / user of Appointrdy
- Name, email, phone, company name, tax ID
- Login credentials (encrypted)
- Billing details (handled by Stripe)
- Usage data: which features you use, session data
Data you upload about employees and end-customers
- Employee details: name, email, phone, role, time entries
- Customer details: name, address, phone, email
- Job data: photos, notes, materials, time spent
- Vehicle and equipment data, including any GPS positions for Business plans
3. Why do we process data?
- To deliver the Appointrdy service (contractual performance)
- To bill and meet bookkeeping obligations
- To improve the service and provide support
- To comply with the law
4. How long do we keep data?
- Active customer data: as long as the subscription is active
- Bookkeeping material: 5 years per applicable law
- After cancellation: data is deleted or anonymised within 90 days, unless law requires longer retention
- Marketing cookies: max 12 months
5. Third parties (sub-processors)
We use the following sub-processors:
- Supabase (database, auth, file storage) — hosted in EU
- Stripe (payment processing)
- Resend / email provider (transactional email)
- Cloudflare (operations and DDoS protection)
All sub-processors are bound by written agreements ensuring GDPR compliance.
6. Transfers outside the EU/EEA
Our primary data is hosted in the EU. Where individual sub-processors may access data outside the EU/EEA, this happens on the basis of the EU Commission's Standard Contractual Clauses (SCCs).
7. Cookies
We use essential cookies and — with your consent — analytics cookies. See our cookie policy for details and how to withdraw consent.
8. Your rights
- Access to the data we process
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Objection to processing
- Withdrawal of consent
Send a request to hello@appointrdy.com. You may also lodge a complaint with your national data protection authority.
9. Security
We use encryption in transit (TLS) and at rest, role-based access control, backups and ongoing security monitoring. See our security page.
10. Changes
We may update this policy. Material changes are notified by email or in the app. The current version is always available here.