Privacy Policy

This Privacy Policy explains how Hayzr collects, uses, shares, and protects information when you use our landing page builder and booking management platform, including our website, dashboard, and any connected calendar integrations. By using Hayzr, you agree to the collection and use of information as described here. If you don't agree, please don't use the Service.

Account information: name, email address, password (hashed, never stored in plain text), business name, and profile details you provide when signing up. Landing page content: any text, images, branding, and configuration you upload or create using our landing page builder. Booking and client data: information submitted by your clients when they book an appointment through your Hayzr page - name, email, phone number, appointment time, and any custom fields you've configured. Calendar data: if you connect an external calendar, we access event times and busy/free status to check availability and prevent double-booking, and the ability to create, update, and delete calendar events to keep your connected calendar in sync. We do not read the content, guests, or descriptions of unrelated personal events beyond what's needed to determine availability, and we don't use this data for advertising. Payment information: transactions are processed by Fonepay, Khalti, and/or eSewa. We do not store your full card, wallet PIN, or banking credentials; we may retain transaction metadata (amount, date, status, reference/transaction ID) for accounting and support. Newsletter signups: if you subscribe to updates, we store your email for that purpose. Usage and device data: IP address, browser type, pages visited, and similar analytics data collected automatically via cookies or similar technology.

Hayzr's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google Calendar data to provide and improve the calendar-sync features you've enabled (availability checking, booking creation, rescheduling, and cancellation). We do not use Google Calendar data for advertising. We do not allow humans to read this data unless: (a) we have your affirmative consent for a specific support request, (b) it's necessary for security purposes, (c) it's required to comply with applicable law, or (d) the data has been aggregated and de-identified. You can revoke Hayzr's access to your Google Calendar at any time via your Google Account permissions page or from Hayzr's Settings > Integrations page. Revoking access stops all future sync; previously created events are not automatically deleted.

We use collected information to: provide and operate the landing page builder and booking system; check calendar availability and prevent double-booking; send booking confirmations, reminders, and notifications to you and your clients; process payments and manage subscriptions; send you product updates or newsletters you've opted into; monitor, secure, and improve the Service; and comply with legal obligations.

We do not sell your personal information. We share data only with: service providers who help us operate Hayzr (hosting, email delivery via Resend, payment processing via Fonepay, Khalti, and eSewa), bound by confidentiality obligations; calendar providers (Google, Microsoft, Apple) as necessary to perform the sync you've enabled; legal authorities, if required by law, subpoena, or to protect the rights and safety of Hayzr or others; and a successor entity, if Hayzr is involved in a merger, acquisition, or asset sale - you'll be notified before your data becomes subject to a different privacy policy.

We retain account and booking data for as long as your account is active, plus a reasonable period afterward for legal, tax, and dispute-resolution purposes. You can request deletion of your account and associated data at any time. We use industry-standard measures - encryption in transit (HTTPS/TLS), encryption of stored credentials and calendar tokens, and access controls - to protect your data. No system is 100% secure, and we cannot guarantee absolute security.

Under Nepal's Individual Privacy Act, 2075 (2018) and its 2020 Regulation, and depending on your location, you may have the right to: be informed of the purpose, method, and duration of data collection; access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; export your data in a portable format; and withdraw consent for calendar sync or newsletter emails at any time. To exercise these rights, contact us at legal@hayzr.com.

We use the following third-party services: Google Calendar API (calendar sync), Fonepay, Khalti, and eSewa (payment processing), Resend (transactional and newsletter email), and SparrowSms (transactional SMS). Each third party has its own privacy policy governing how it handles data on our behalf.

Hayzr is not directed at individuals under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we'll delete it. We may update this Privacy Policy from time to time. Material changes will be notified via email or an in-app notice. Continued use of Hayzr after changes take effect constitutes acceptance.

Questions about this Privacy Policy: legal@hayzr.com