Last updated: February 2, 2026
Privacy Policy
How SebasTN collects, uses, and protects your information on ClickReserv.
1. Introduction
This Privacy Policy explains how SebasTN ("we," "us," or "our") collects, uses, and protects your information when you use ClickReserv ("Service"). We are committed to protecting your privacy and handling your data responsibly.
By using ClickReserv, you consent to the data practices described in this policy. If you do not agree with our practices, please do not use the Service.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, and password when you create an account
- Business Information: Business name, address, phone number, and description (for Merchants)
- Payment Information: Processed securely through Stripe; we do not store full payment card numbers
- Booking Information: Service selections, dates, times, and any notes or preferences
- Communications: Information you provide when contacting support or providing feedback
2.2 Information Collected Automatically
- Device Information: IP address, browser type, operating system, and device identifiers
- Usage Information: Pages visited, features used, time spent, and interaction patterns
- Cookies: Session cookies for authentication and preferences; see our Cookie Policy below
3. How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the Service
- Process transactions and send related information
- Send appointment confirmations and reminders
- Respond to customer service requests and support needs
- Send marketing communications (with your consent)
- Improve and personalize your experience
- Detect, prevent, and address fraud and security issues
- Comply with legal obligations
4. Information Sharing
We do not sell your personal information. We may share your information in the following circumstances:
- With Merchants: When you book services, your booking details are shared with the relevant Merchant
- With Stripe: Payment information is processed by Stripe under their Privacy Policy
- Service Providers: With third-party vendors who help us operate the Service (hosting, analytics, email)
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets
5. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: All data transmitted between you and our servers is encrypted using TLS/SSL
- Password Security: Passwords are hashed using Argon2id, a memory-hard algorithm resistant to GPU attacks
- Access Controls: Strict access controls limit who can access user data
- Regular Audits: We regularly review our security practices and systems
While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention
We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy:
- Account data is retained until you delete your account
- Transaction records are retained for 7 years for legal and tax compliance
- Usage logs are retained for 90 days for security and debugging
- Deleted accounts have their personal data removed within 30 days, except where retention is required by law
7. Your Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your personal data
- Portability: Request your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Withdraw Consent: Withdraw consent for data processing where applicable
To exercise these rights, contact us at privacy@reserv.click. We will respond to requests within 30 days.
8. Cookies
We use cookies and similar technologies for:
- Essential Cookies: Required for authentication and security (access tokens, refresh tokens)
- Preference Cookies: Remember your settings and preferences
- Analytics Cookies: Help us understand how the Service is used (anonymized)
Our essential authentication cookies are HTTP-only and use SameSite=Strict for security. You can control non-essential cookies through your browser settings.
9. Third-Party Services
ClickReserv integrates with the following third-party services:
- Stripe: Payment processing - Privacy Policy
- Amazon Web Services (AWS): Application hosting (EC2 + CloudFront + Route 53), the production database (RDS), email delivery (SES), and storage - Privacy Notice
- Cloudinary: Image hosting (optional) - Privacy Policy
10. Children's Privacy
ClickReserv is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete such information.
11. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to opt-out of the sale of personal information
- Right to non-discrimination for exercising CCPA rights
We do not sell personal information as defined by the CCPA.
13. European Privacy Rights (GDPR)
If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including the rights listed in Section 7 above. Our legal bases for processing are:
- Contract: Processing necessary to provide the Service
- Legitimate Interests: Improving and securing the Service
- Legal Compliance: Meeting legal obligations
- Consent: Marketing communications (where applicable)
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date.
Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
15. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
SebasTN
Email: privacy@reserv.click
Website: reserv.click
For data protection inquiries in the EU, you may also contact our Data Protection Officer at dpo@reserv.click.