Legal

Privacy Policy

Last updated: August 31, 2026

1. What We Collect

Otion LLC (otion.solutions) collects only what we need to serve you. When you use our contact form, we collect your name, business name, phone number, email address, and the service you are interested in. When you make a payment through our Stripe-powered portal, payment information is processed securely by Stripe — we do not store credit card numbers. Our website uses cookieless, first-party analytics (page views only, no personal identifiers).

2. How We Use Your Data

We use your information to respond to inquiries, deliver the services you request, process payments, provide customer support, and improve our website and offerings. Page-view analytics are used solely to understand how visitors use our site — never to build advertising profiles.

3. SMS & Text Messaging (ScheduleLink-Go)

ScheduleLink-Go uses SMS to send appointment confirmations, reminders, and facilitate two-way communication between service providers and their clients.

  • Message frequency varies based on activity. You typically receive 2–6 messages per booking.
  • Opt-out: Reply STOP, CANCEL, END, or UNSUBSCRIBE at any time. You will receive one final confirmation message.
  • Help: Reply HELP for assistance.
  • Cost: Message and data rates may apply. Contact your carrier for pricing.
  • Marketing: We do not send marketing or promotional SMS without your separate consent.

Mobile information and messaging consent will not be shared with third parties or affiliates for marketing or promotional purposes.

4. Data Sharing

We never sell your personal information. We share data only with service providers necessary to operate: Formspree (contact form), Stripe (payments), Twilio (SMS delivery), Google and Microsoft (calendar APIs for ScheduleLink-Go), Vercel (hosting), and Supabase (analytics storage).

5. Data Protection

  • Encryption in transit: All data transmitted between your device and our servers is encrypted using TLS 1.2+ (HTTPS).
  • Encryption at rest: Stored data, including calendar tokens and account credentials, is encrypted at rest using industry-standard AES-256 encryption.
  • Access controls: Access to production systems is restricted to authorized personnel only, enforced through role-based access controls and multi-factor authentication.
  • Token security: OAuth tokens for Google and Microsoft calendar access are stored securely, scoped to minimum permissions, and never exposed client-side.
  • Regular audits: We periodically review our data access patterns and security practices to ensure compliance.

6. Data Retention & Deletion

  • Account data is retained for the duration of your active account; permanently removed within 30 days of deletion.
  • Calendar tokens and synced event data are deleted within 30 days of disconnect or account deletion.
  • SMS message content and logs are retained up to 12 months, then deleted.
  • You may request immediate deletion of your data at any time at support@schedulelink.tech — processed within 7 business days.
  • You can revoke ScheduleLink-Go's calendar access at any time through your account's security settings.

7. Limited Use Compliance

ScheduleLink-Go integrates with Google Workspace APIs (Google Calendar) to provide scheduling functionality. Otion LLC will not use, transfer, or sell Google user data — including raw, aggregated, or derived data — to create, train, or improve foundational or generalized machine learning or AI models.

8. Contact

Questions about this policy? Email Info@otion.solutions or call (470) 310-0480.