Privacy Policy
Last updated: June 2026
1. Who we are
Spayo is a booking and business management platform for wellness businesses. When you use Spayo — whether as a merchant or as a customer making a booking — we collect and process certain personal data. This policy explains what we collect, why, and how we protect it.
2. Data we collect
Merchants (business owners)
- Name and email address (via account registration)
- Business name, phone number, address, and logo
- Staff names and contact details you enter
- Subscription and payment history
- Mobile money payout phone number
Customers (booking clients)
- Name, phone number, and optional email address
- Booking details (service, date, time, notes)
- Payment transaction references (no card numbers — payments are handled by Flutterwave)
- Reviews and ratings you submit
- Birthday date (only if you voluntarily provide it)
3. How we use your data
- To create and manage your account and bookings
- To process payments and issue receipts
- To send booking confirmation and reminder messages
- To send birthday promotional messages (merchants only, if enabled)
- To provide merchants with analytics about their business
- To detect fraud and prevent abuse
- To respond to support requests
We do not sell your personal data to third parties.
4. Third-party services
Spayo uses the following trusted third-party services to operate. Each has its own privacy policy.
| Service | Purpose |
|---|---|
| Clerk | Authentication and user accounts |
| Flutterwave | Payment processing |
| Supabase | Database and file storage |
| Resend | Transactional email |
| Wabridge | WhatsApp reminders and notifications |
| Vercel | Hosting and infrastructure |
5. Data retention
We retain your data for as long as your account is active. If you close your account, we delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., transaction records).
6. Your rights
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Opt out of marketing messages at any time
To exercise any of these rights, email us at hello@spayo.app.
7. Security
We use industry-standard security practices including encrypted connections (HTTPS), access controls, and secure credential storage. No system is 100% secure, but we take reasonable steps to protect your data.
8. Changes to this policy
We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of Spayo after changes constitutes acceptance of the updated policy.
9. Contact
Questions about this policy? hello@spayo.app