Effective 25 August 2026
Privacy notice
This Privacy Notice explains how AppointLane, operated by Datthatreya Bhatt ("AppointLane", "we", "us", or "our"), handles personal data. Businesses and organizations using AppointLane generally control the personal data relating to their customers, including appointment, queue, communication, payment-reference, and intake information. AppointLane processes this information to provide the service. AppointLane separately controls account, security, billing, support, analytics, and product-feedback information required to operate and improve the platform.
Data we handle
Depending on how AppointLane is used, we may process account identity and session information; organization settings and staff permissions; customer names, contact details, consent records, appointments and queue activity; private visit messages; payment and subscription status identifiers; intake answers and documents requested by an organization; support communications; and product feedback.
AppointLane does not intentionally store full payment-card details for payments processed by third-party payment providers. Technical logs may contain request identifiers, routes without sensitive query strings, status information, timing information, device or browser information, IP-related security information, and safe error categories.
How we use personal data
We use personal data to provide appointments, queues, communications, secure intake and account functionality; authenticate users; protect accounts and prevent abuse or fraud; administer subscriptions; provide customer support; send service-related or consented communications; maintain reliability and security; comply with legal obligations; and improve AppointLane.
Analytics choices
Google Analytics and Microsoft Clarity are optional and load only after a visitor permits analytics where consent is required. These services may measure pages viewed, approximate location, device information, usage events, heatmaps, and consented session interactions so that we can understand and improve AppointLane.
Advertising storage and advertising personalization are disabled through AppointLane's analytics configuration. Sensitive form content is intended to be excluded or masked from analytics and session-recording tools. Visitors can reject optional analytics or change their choice at any time using the Privacy choices control.
Payments and billing
AppointLane may use Paddle and other supported payment providers. For AppointLane subscriptions purchased through Paddle, Paddle acts as the Merchant of Record and processes the transaction, applicable taxes, billing information, payment-method information, refunds, and related payment support under Paddle's own terms and privacy notices. AppointLane generally receives transaction identifiers, subscription status, customer or business identifiers, plan information, and other information necessary to administer the subscription rather than full card details.
Organizations using AppointLane may separately connect supported payment providers such as Stripe or Razorpay to collect payments from their own customers. Those organizations and payment providers are responsible for their respective processing activities.
Service providers and integrations
Personal data may be processed by providers supporting infrastructure, database hosting, email, Paddle, Stripe, Razorpay, Twilio, Google Analytics, Microsoft Clarity, Google Calendar, Microsoft services, malware scanning, monitoring, security, and customer support, but only where the relevant service or integration is used.
Third-party integrations operate under their own privacy terms. Organizations are responsible for determining whether the integrations they enable are appropriate and lawful for their customers and region.
International processing
Some service providers may process information outside India or outside the country in which a user or organization is located. Where required, we and our service providers use appropriate contractual, technical, or legal safeguards for international transfers.
Retention and deletion
We retain personal data only for as long as reasonably necessary for the purposes described in this notice, contractual requirements, security, fraud prevention, dispute resolution, and applicable law. Secure intake documents default to deletion after 90 days unless an organization configures or lawfully requires another retention period. Deleted organizations generally have a 30-day recovery period before permanent deletion processes begin.
When a free trial expires, product access is restricted while billing, trial-data export, and early deletion controls remain available. We normally retain the trial's organization, appointment, customer, file, and other operational data for 30 days after expiry, then delete it. We send service emails before trial expiry, at expiry, and before scheduled deletion where an account email is available. Starting a paid plan before deletion restores access and stops the scheduled trial-data deletion.
After trial data is deleted, we may retain the minimum account identity, email, security, billing, and trial-used records reasonably needed to let the account holder return and purchase later, prevent repeated free trials, protect the service from abuse, and meet legal or accounting obligations. Retained information is not used to grant another free trial. Residual copies in protected backups may remain until those backups expire under their normal retention cycle.
If a paid subscription is scheduled for cancellation, access continues through the current paid billing period. Once paid access ends, we normally retain operational data for 30 days while billing, export, and early deletion controls remain available. We send an access-ended notice and reminders before scheduled deletion where an account email is available. Purchasing a new plan before deletion restores access and stops the scheduled deletion. A failed payment by itself does not start this deletion period.
Other retention periods may depend on an organization's settings, contractual requirements, backups, security requirements, and applicable law. Organizations should collect and retain only the information they reasonably require.
Your choices and rights
If you are a customer of an organization using AppointLane, you should normally contact that organization first regarding access, correction, deletion, restriction, withdrawal of consent, or other requests relating to information the organization controls.
AppointLane account holders and other individuals may contact us at [email protected]. Depending on applicable law, you may have rights relating to access, correction, updating, deletion, consent, or grievance redressal. We may verify identity before fulfilling a request and may retain information where required for legal obligations, fraud prevention, security, disputes, or the establishment or defence of legal claims.
Security
AppointLane uses safeguards such as tenant-level authorization, expiring guest links, access controls, rate limits, encryption for configured secrets and documents, malware scanning, security logging, audited state changes, and third-party payment providers that keep payment-card details outside AppointLane where applicable.
No internet service or method of electronic storage can guarantee absolute security.
Children
AppointLane is intended for businesses and organizations and is not directed to children for the purpose of creating independent AppointLane accounts. Organizations using AppointLane are responsible for obtaining any consent or authorization required when processing information about minors through their services.
Changes to this notice
We may update this Privacy Notice when AppointLane, applicable law, or our service providers change. The effective date displayed above will be updated when material revisions are made.
Contact
AppointLane is operated by:
Datthatreya Bhatt
Near Vidyodaya School Road
Yedabettu Post, Saligrama Village
Udupi District, Karnataka 576226
India
Email: [email protected]