Privacy Policy

1. Introduction

Circlepoint Inc. ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our link-in-bio platform and services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Account Information: Name, email address, profile picture, username/handle, and password when you create an account.
• Payment Information: Payment method details, billing address, and transaction history. Note: We do not store full credit card numbers; these are processed securely by our payment processors.
• Profile Information: Bio, social media links, profile title, and other information you choose to add to your creator page.
• Communication Data: Emails, messages, and other communications you send to us or receive through our platform.

2.2 Google Calendar Data

When you connect your Google Calendar to enable booking functionality, we access the following data:

• Calendar Events: Event titles, dates, times, and availability status to determine your free time slots.
• Calendar Metadata: Calendar IDs, timezone settings, and calendar names.
• Created Events: When a booking is made, we create calendar events with the client's name, booking details, and a Google Meet link.

How we use Google Calendar data: We only use this data to provide our booking service—showing your availability to potential clients, creating events when bookings are confirmed, and sending calendar invites. We do not use this data for advertising or share it with third parties.

2.3 Usage Data

We automatically collect information about how you interact with our Service:

• IP address, browser type, device information, and operating system
• Pages visited, time spent on pages, clicks, and navigation patterns
• Referral sources and geographic location (approximate)
• Performance data and error logs

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Maintain your session and authentication status
• Remember your preferences and settings
• Analyze site traffic and usage patterns
• Prevent fraud and enhance security

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain Service: To operate our platform, process transactions, and deliver the features you request.
• Booking Management: To sync with your Google Calendar, display availability, create events, and send reminders.
• Digital Product Delivery: To process payments and deliver digital products to buyers via email.
• Communication: To send you service-related emails, notifications, updates, and respond to your inquiries.
• Analytics: To understand how users interact with our Service and improve user experience.
• Security: To detect, prevent, and address fraud, security breaches, and technical issues.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.

4. Google API Services User Data Policy

Circlepoint's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we commit to:

• Only requesting access to Google Calendar data that is necessary to provide our booking functionality.
• Not using Google Calendar data for advertising purposes.
• Not selling or sharing Google Calendar data with third parties, except as necessary to provide the Service (e.g., creating calendar events).
• Providing users with clear information about how their Google data is used (as detailed in this policy).
• Allowing users to disconnect their Google Calendar at any time from their account settings.

5. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: We engage third-party companies to facilitate our Service, including:
  • Clerk: For authentication and user management
  • Convex: For database and backend services
  • Payment Processors: For processing payments (M-Pesa, cards)
  • Email Services: For sending transactional emails
• With Your Consent: We may share information when you explicitly authorize us to do so.
• Business Transfers: If Circlepoint is involved in a merger, acquisition, or sale of assets, your information may be transferred.
• Legal Requirements: We may disclose information if required by law, court order, or to protect our rights, property, or safety.

6. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Industry-standard encryption for data in transit (HTTPS/TLS)
• Secure database storage with access controls
• Regular security audits and monitoring
• Employee access restrictions and confidentiality agreements
• Two-factor authentication for administrative access

However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide you with our Service. When you delete your account:

• Your profile and public content are removed immediately.
• Payment and transaction records may be retained for up to 7 years to comply with legal and tax obligations.
• Google Calendar connection is revoked and cached calendar data is deleted within 30 days.
• Analytics and usage data may be retained in aggregated, anonymized form.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Update or correct inaccurate information.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a structured, machine-readable format.
• Restriction: Request limitation of processing in certain circumstances.
• Objection: Object to certain types of processing, such as marketing.
• Withdraw Consent: Revoke Google Calendar access at any time from your account settings.

To exercise these rights, please contact us at benkigera@gmail.com.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure appropriate safeguards are in place to protect your information when transferred internationally.

10. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: