Privacy Policy

1. General provisions

This policy describes how the Slotix service (the “Service”, “we”) processes personal data of Service users — business owners and staff (the “Users”) — and of those businesses' clients who book services through the Service's bots and booking pages (the “Clients”). Processing is carried out in accordance with the Law of the Republic of Kazakhstan of 21 May 2013 No. 94-V “On Personal Data and Its Protection”.

2. What data we process

• User data: name, email address, business name, password (stored as an irreversible hash).
• Client data that a User collects through the Service: name, phone number, Telegram account identifier, booking history.
• Technical data: tokens of Telegram bots connected by the User (stored to run the bot and never shared with third parties), Service logs, session cookies.

3. Purposes of processing

• Providing the Service: registration, receiving and managing Client bookings.
• Sending service notifications about bookings and cancellations, and visit reminders.
• Subscription billing and User support.
• Ensuring security and preventing abuse.

With regard to Client data, the personal data controller is the business that connected the Service; Slotix processes such data on its behalf and only to the extent needed for bookings to work.

4. Sharing with third parties

Data may be transferred to infrastructure providers (hosting, backups), messaging platforms (Telegram, WhatsApp) and the language model provider — to the extent necessary to process dialogue messages. Some of these recipients are located outside the Republic of Kazakhstan: the Service's servers are in the European Union, the language model provider is in the United States, and messaging platforms are in their own jurisdictions. This constitutes a cross-border transfer: the language model receives the booking dialogue text (which may contain the name and phone number stated by the Client), the messaging platform receives bot messages and the chat identifier, and the infrastructure provider holds the Service database in full. We do not sell personal data and do not share it for advertising purposes.

5. Storage and protection

Data is kept no longer than necessary for the purposes of processing, or until the User deletes their account. Access to data is restricted, passwords are stored hashed, and connections are protected with encryption (TLS).

6. Data subject rights

You may request information about processing, demand correction, blocking or deletion of your data, and withdraw your consent to processing. To do so, write to hello@slotix.kz. Clients of businesses may also contact the business they are booked with directly.

7. Changes to this policy

We may update this policy; the current version is always published on this page with its date. By continuing to use the Service after changes, you agree to the new version.