Privacy Policy

Teya App ("Teya", "Teya App", "we", "us", or "our") is an online appointment-booking and scheduling platform built for solo professionals and the clients who book with them. Professionals use Teya App to publish shareable booking links, manage their working hours and time off, and keep track of upcoming appointments, while their clients use Teya App to find an available time and confirm a booking, either as a guest or through an optional account. This Privacy Policy explains what personal information we collect when you use Teya App, why we collect it, how we use and share it, how long we keep it, how we protect it, and the privacy rights available to you under United States law. It applies to our website, web application, and related email and messaging notifications (together, the "Service"). The Service is offered only to users located in the United States. Please read it carefully; by creating an account, making or accepting a booking, or otherwise using the Service, you acknowledge the practices described here and represent that you are located in the United States.

This document is written to be understandable rather than to serve as legal advice. The business responsible for your information under this policy is Vyrakor LLC, which operates Teya App, located at 4030 Wake Forest Road, Ste 349, Raleigh, NC 27609, United States, reachable at the contact details set out at the end of this policy.

1. Who This Policy Covers

Teya serves two broad groups of people located in the United States, and this policy applies to both. The first group is providers — the solo professionals who register a business account to accept bookings. The second group is clients — the people who book appointments, whether they create a client account or book as a guest without registering. Because a provider enters and manages information about their own clients, a provider decides how to use the client data recorded against their bookings, and Teya processes that data on the provider's behalf to operate the Service. For information relating to your own Teya account, your registration details, and your use of the Service overall, Teya is responsible for how that information is handled. If you are a client and you have questions about how a particular provider uses the information they collected from you, please contact that provider directly; if you have questions about Teya's own handling of your information, please contact us using the details in the final section.

2. Information We Collect

We collect information in three broad ways: information you provide to us directly, information generated when you use the Service, and a limited amount of information collected automatically by the technologies that keep the Service running. Payment card details for optional provider SMS billing are collected and stored by our payment processor; Teya stores payment-method identifiers, not full card numbers. The payment processor may also receive billing contact details needed for receipts, invoices, and card management.

When a provider registers, we collect a display or business name, a username that becomes part of the public booking link, an email address, and a password. When a client registers, we collect an email address and a password. Passwords are stored only in hashed form. Providers and clients may later add optional profile details such as a display name, a phone number, or a profile picture.

When a booking is made, we collect the appointment details and the client's contact information. For guest bookings this means the client's name and email address, and, when the provider has enabled client SMS, a United States mobile number together with SMS consent. If a client is signed in when they book, the booking is associated with their account. Providers can also enter bookings manually on behalf of their clients, in which case the provider supplies the client's name and contact information and, when SMS is on, records SMS consent. Providers additionally configure scheduling information such as working hours and time off.

When we send a client SMS, we keep records needed to deliver the message, bill the provider, and honor opt-outs. If a recipient replies STOP, we store that number on a suppression list so we do not text it again.

If you contact our support address, we receive the contents of your message and any attachments so that we can respond. Support messages are processed by our email provider and may be handled through our internal support tools. Where you choose to connect an optional messaging integration to receive notifications, we store the identifier of that messaging chat and a short-lived linking token so that appointment-related alerts can be delivered to you. We also store a small amount of technical information needed to run the Service, including your time zone, session information that keeps you signed in, and aggregate usage analytics. Our hosting provider automatically processes limited technical data associated with your requests, such as your Internet Protocol (IP) address, general device and browser information, and server log data; we use this to run the Service, maintain security, and prevent abuse. Page-view analytics are aggregated and are not used to build advertising profiles. We describe cookies and similar technologies in Section 4.

3. How We Use Your Information

We use the information we collect to provide, maintain, secure, and improve the Service, and to comply with our legal obligations. In practical terms, we use your account information to create and authenticate your account, to verify your email address, to allow you to reset a forgotten password, and to keep you signed in securely between visits. We use booking information to create, display, confirm, and cancel appointments, to prevent double-bookings by respecting a provider's availability, and to connect a booking to the correct provider and, where applicable, the correct client account.

We use contact information — email addresses, phone numbers, and, where connected, messaging chat identifiers — to send transactional and operational communications about your account and appointments through email, SMS (when the provider has enabled client SMS), and, when you connect it, an optional messaging integration. These messages are not marketing or promotional; we do not send advertising newsletters. Depending on your role and settings, they may include account and security messages, booking-related notices, and schedule summaries. Email is used when we have an email address for the booking or account. SMS is sent from Teya’s number only to United States numbers. Providing a United States mobile number on an SMS-enabled booking and confirming SMS consent is how opt-in is recorded. Reply STOP to a Teya booking text to opt out of further SMS at that number. Optional messaging is used when you have connected it. Similar service-related messages may be added as we improve the Service; we will update this policy if our practices change materially.

When you connect an optional messaging integration, you choose to receive appointment notifications through that service. We store your messaging chat identifier so we can deliver those messages to you. The notification content you asked to receive is routed through that service. If you are a provider, alerts about bookings on your calendar may include a client's name and contact details in the message sent to you.

We use your time zone so that dates and times are shown correctly for your location, and we use aggregate usage analytics to understand which parts of the Service are used and to improve reliability and design. We also use information as necessary to detect, investigate, and prevent fraudulent, abusive, or unauthorized activity, to enforce our Terms of Service, and to comply with applicable law or valid legal requests. We rely on your consent when you opt into optional features such as messaging notifications, and you may withdraw that consent at any time by disconnecting the integration in your settings.

4. Cookies and Similar Technologies

Teya uses a small number of cookies and comparable browser-storage technologies, and it does not use them for cross-site advertising. A strictly necessary session cookie keeps you signed in. A functional cookie records your time zone so that appointment times display correctly. We may also use limited browser storage for convenience settings in the Service. These technologies are either strictly necessary or functional. We use aggregate page-view analytics provided by our hosting infrastructure; it is designed not to build advertising profiles about you. You can control or delete cookies through your browser settings, but disabling strictly necessary cookies will prevent you from signing in and using core features.

5. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share information only in the limited circumstances described here.

First, we share information with providers on the platform — the independent professionals you book with, or who maintain your appointment — because that sharing is necessary to schedule and fulfill appointments. When a client books, the client's name and chosen contact detail are shared with the relevant provider, and the provider's public profile and availability are shown to clients who visit the booking link. Providers are service partners on Teya, not employees of Teya; each provider is responsible for how they use client information once they receive it. This exchange of information is the core purpose of the Service.

Second, we share information with service providers that host our application and database, send and receive transactional email, send optional SMS, process optional SMS billing, provide aggregate analytics, and deliver optional messaging notifications. They may only use the information to perform those services for us.

When you connect an optional messaging integration, we deliver notifications to you through that channel; message content passes through that messaging service. If you are a provider, booking alerts we send to you there may include a client's name and contact details. Support messages sent to us are processed by our email provider and may be handled through our internal support tools. We enter into data-processing terms with our service providers where required by law. If you would like more detail about our service providers, contact us at the address in Section 13.

Third, we may disclose information when we believe in good faith that disclosure is necessary to comply with applicable law, regulation, legal process, or an enforceable governmental request; to enforce our Terms of Service; to protect the rights, property, or safety of Teya, our users, or others; or in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor commitments consistent with this policy and will notify you of any material change in how your information is handled.

6. United States Only

Teya is a United States service. We operate the Service from the United States, we market it only to users in the United States, and personal information is stored primarily in the United States, including through our infrastructure service providers. Messaging, SMS, and payment providers may process or transmit information on global infrastructure to deliver those services. We do not offer the Service to users outside the United States and this policy is written for United States privacy law, including state laws such as the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).

7. Data Retention

We keep personal information only for as long as it is needed for the purposes described in this policy, after which we delete it or irreversibly de-identify it.

Active accounts. We retain provider and client account information for as long as the account remains active.

Bookings. We retain booking records while they are needed to provide booking history to the relevant provider and client and to support operational and legal requirements. Guest booking records are kept for as long as needed to fulfill and evidence the appointment.

Security tokens and sessions. Short-lived security tokens, such as email-verification, password-reset, and messaging-link tokens, are valid only until they expire or are used. Session information is retained only for the life of the session.

Support communications. Support messages are kept for as long as needed to resolve your request and maintain a reasonable record of our correspondence, subject to our email provider's retention practices.

Account deletion. When you delete your account through account settings, we remove your profile personal information and sign you out; your account is marked for deletion and is no longer usable. Bookings where you appear as a client on another provider's calendar are de-identified. The remaining account record and provider-owned scheduling data are permanently deleted after a short administrative period. Provider-owned bookings are removed when the provider account is permanently deleted.

Payments and SMS records. Deleting a Teya account removes payment-processor identifiers from the Teya profile. The payment processor may retain billing records as needed for charges, fraud prevention, and tax or accounting purposes. SMS delivery records and STOP numbers may be kept so we can bill, honor opt-outs, and meet legal or carrier requirements. Unused prepaid balance is not refunded except where required by law.

Other requests. If you booked as a guest without an account, or need help deleting information we hold about you, contact us at the address in Section 13. We will delete or de-identify information within a reasonable period after verifying your request, except where we are required or permitted by law to retain certain information for longer.

8. How We Protect Your Information

We take the security of your information seriously and apply technical and organizational measures designed to protect it against unauthorized access, alteration, disclosure, and loss. These include encryption in transit, hashed storage of passwords, access limits on production data, and short-lived security tokens for account and session management. No method of transmission or storage is completely secure, however, so we cannot guarantee absolute security; you also play an important role by choosing a strong, unique password and keeping your login credentials confidential.

9. Your Privacy Rights (United States)

If you are a resident of the United States, you may have rights over your personal information under federal law and the laws of your state. Subject to applicable law and verification of your identity, you may:

• Access the personal information we hold about you and request a copy of it.
• Correct information that is inaccurate, incomplete, or out of date.
• Delete your personal information and request that we erase it.
• Withdraw consent for optional processing, such as messaging notifications, by disconnecting the integration in your settings, or SMS appointment texts by replying STOP.

Where applicable law requires it, you may also have the right to receive a copy of your information in a portable format.

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA) gives you the right to know what personal information we collect and how we use and disclose it, the right to access and delete it, the right to correct it, and the right not to receive discriminatory treatment for exercising your rights. We do not sell personal information and do not share it for cross-context behavioral advertising. Residents of other U.S. states with comprehensive privacy laws may have similar rights.

To exercise any of these rights, contact us using the details in Section 13. Account holders may delete their account in account settings. Guest bookers may request deletion by emailing us from the address used on the booking, together with the provider name and approximate appointment date so we can locate the record. We will respond within the timeframe required by applicable law. To protect your privacy, we may need to verify your identity before acting on a request, and we may decline requests that are unfounded, excessive, or that we are legally required or permitted to refuse. You may also use an authorized agent to submit a request where the law allows, provided we can verify the agent's authority. We will not discriminate against you for exercising any of your privacy rights.

10. Children's Privacy

Teya is intended for use by adults and is not directed to children. You must be at least 18 years old to create a Teya account or otherwise use the Service, consistent with the eligibility requirement in our Terms of Service. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and you believe that a minor has provided us with personal information, please contact us so that we can investigate and delete the information. If we learn that we have collected personal information from a person under 18, we will take reasonable steps to delete it promptly.

11. Third-Party Links and Services

The Service may contain links to third-party websites or rely on third-party platforms — for example, when you connect an optional messaging integration to receive notifications. When you follow a link to another site or use a connected platform, that third party's own privacy policy governs its handling of your information, and we are not responsible for the privacy practices of services we do not operate. We encourage you to review the privacy policies of any third-party services you use in connection with Teya.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the Service, in our practices, or in legal requirements. When we make a material change, we will update the "Last updated" date shown at the top of this page and, where appropriate and required by law, provide additional notice such as an in-product message or email. We encourage you to review this policy periodically. Your continued use of the Service after an updated policy takes effect constitutes your acknowledgment of the changes to the extent permitted by law.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, or if you wish to exercise any of your rights, please contact us at support@teyaapp.io. Messages sent to that address may be processed by our email provider and handled through our internal support tools. For formal privacy matters, you may also write to Vyrakor LLC at 4030 Wake Forest Road, Ste 349, Raleigh, NC 27609, United States. We will do our best to resolve any concern you bring to us.