AppointMe Privacy Policy

1. Introduction

This Privacy Policy explains how Syncworx Ltd ("Syncworx", "we", "us", "our") collects, uses, and protects personal data in connection with the AppointMe platform ("AppointMe" or the "Service").

Syncworx Ltd is an Irish VAT-registered company operating in compliance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
• Irish Data Protection Act 2018

Supervisory Authority: Irish Data Protection Commission (DPC)

2. Company Information

3. Roles Under GDPR

For data protection purposes:

Customers using AppointMe act as Data Controllers for their end-customer booking data.

4. Description of Service

AppointMe is a SaaS booking facilitation platform that allows users to:

• Configure their own ElevenLabs AI agent
• Connect their own Twilio number
• Integrate Stripe, PayPal, Square, or Adyen
• Manage appointment bookings

AppointMe does not:

• Provide telecommunication services
• Provide AI voice services
• Store call recordings or voice data

Voice data is processed directly by Twilio and ElevenLabs under customer accounts.

5. Personal Data We Collect

6. International Transfers

Data may be processed outside the EEA via service providers (e.g., AWS).

Safeguards include:

• EU Standard Contractual Clauses
• Adequacy decisions
• Encryption and technical safeguards

7. Data Retention

• Account data: duration of subscription + 6 years (Irish tax law)
• Booking data: retained per customer configuration
• Logs: 30–90 days

Upon termination, personal data is deleted or anonymised unless legally required.

8. Data Subject Rights

Under GDPR, individuals have the right to:

• Access
• Rectification
• Erasure
• Restriction
• Portability
• Objection
• Lodge complaint with the Irish DPC

Requests: privacy@appointme.ie

For booking data, requests may be redirected to the relevant customer.

9. Security Measures

We implement:

• Encryption in transit (TLS)
• Encrypted AWS hosting
• Role-based access control
• Logging and monitoring
• Incident response procedures

10. Meta Platform Data (Facebook & Instagram)

AppointMe integrates with Meta Platforms, Inc. (Facebook and Instagram) to allow businesses to connect their social media accounts and schedule, publish, and monitor content directly from the AppointMe platform.

When you connect your Facebook Page or Instagram Business account to AppointMe, we access the following data via the Meta Graph API:

• Your Facebook profile name and profile picture (public_profile)
• A list of Facebook Pages you manage (pages_show_list)
• The ability to read and create posts on your Facebook Page (pages_manage_posts, pages_read_engagement)
• Page insights and engagement data (read_insights, pages_manage_engagement)
• Your Instagram Business account profile, media, and follower data (instagram_business_basic)
• The ability to publish content to your Instagram Business account (instagram_business_content_publish)
• Instagram post comments (instagram_manage_comments)
• Instagram Direct Messages for your business inbox (instagram_business_manage_messages)

How we use this data: Meta Platform Data is used solely to provide the social media scheduling and publishing features of AppointMe. We do not sell, transfer, or use Meta Platform Data for advertising, profiling, or any purpose unrelated to providing the AppointMe service.

Data retention: Access tokens are stored encrypted and are deleted when you disconnect your social account. Post content and engagement metrics are retained for the duration of your AppointMe subscription.

Revoking access: You can disconnect your Facebook or Instagram account at any time from the AppointMe dashboard under Settings → Social Accounts. You can also revoke access directly via your Facebook App Settings.

AppointMe's use of Meta Platform Data complies with the Meta Platform Policy and Meta Platform Terms.

11. Updates

We may update this policy. Updated versions will be published on our website.