Privacy Policy

1. Introduction

Skape ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

2. Information We Collect

Account Information: Name, email address, business name, phone number, and payment information when you create an account.

Booking Data: Customer names, email addresses, phone numbers, booking details, payment records, and waiver information processed through your account.

Usage Data: Information about how you use the Service, including pages visited, features used, and interactions.

Device Data: Browser type, operating system, IP address, and device identifiers.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process transactions and send related information
• Send administrative notifications and updates
• Respond to customer service requests
• Monitor usage and analyze trends
• Detect, prevent, and address technical issues

4. Data Sharing

We do not sell, rent, or trade your personal information. We do not share your information with third parties for their own marketing purposes. We share data only with the following service providers who process data on our behalf:

• Stripe (Payments): Processes booking payments securely. See Stripe's Privacy Policy.
• Twilio (SMS): Transmits text messages when customers opt in. Receives phone numbers, message content, and delivery status. See Twilio's Privacy Policy.
• Resend (Email): Sends transactional emails (booking confirmations, reminders). Receives email addresses and message content.
• Cloud Infrastructure: Supabase (database), Vercel (hosting). Data is stored and processed in the United States.
• Legal Requirements: When required by law, subpoena, or legal process, or to protect our rights or safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to affected users

5. SMS Communications & Twilio

If you opt in to receive SMS messages by checking the "Get SMS Reminders" checkbox during checkout and providing your phone number, you consent to receive automated transactional text messages. Messages are sent using Twilio, Inc., a third-party cloud communications platform.

Messages You May Receive:

• Booking confirmations
• Reminders (24 hours and 2 hours before your booking)
• Waitlist notifications when a spot opens up
• Group invite notifications
• Post-experience review requests

Message Frequency: Up to 3 messages per booking (1 confirmation and 2 reminders), plus occasional waitlist, group invite, or review messages.

Consent: SMS messaging is optional. You opt in by checking the SMS reminders checkbox during checkout. Consent to receive SMS is not required as a condition of purchasing any service.

Opt-Out: You can opt out at any time by replying STOP to any message you receive from us, or by contacting us at support@ioxskape.com. After opting out, you will receive a one-time confirmation message and no further SMS messages will be sent unless you re-subscribe by opting in during a future booking.

Help: Reply HELP to any message for assistance, or contact support@ioxskape.com.

Message & Data Rates: Message and data rates may apply depending on your mobile carrier and plan. Skape does not charge for SMS messages, but your carrier may apply standard messaging fees.

Data Shared with Twilio: When you opt in to SMS, the following data is transmitted to Twilio for message delivery:

• Your phone number
• Message content (booking details, reminders, etc.)
• Message delivery status and timestamps

Twilio processes this data as a service provider on our behalf and in accordance with Twilio's Privacy Policy. We do not authorize Twilio to use your data for any purpose other than delivering messages on our behalf. Your phone number is not shared with any other third parties for marketing or advertising purposes.

Carrier Disclaimer: Carriers (AT&T, T-Mobile, Verizon, etc.) are not liable for delayed or undelivered messages.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. You can request deletion of your account and associated data at any time. Some data may be retained as required by law or for legitimate business purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet is 100% secure.

8. Multi-Tenant Architecture

Skape is a multi-tenant platform. Each business (tenant) has isolated data. Row-Level Security ensures that tenants can only access their own data. Booking customers' data is associated with the tenant where they made their booking.

9. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to Know: Request what personal information we have collected, the categories of sources, and the business purpose for collection
• Right to Access: Obtain a copy of the personal information we hold about you
• Right to Correct: Request correction of inaccurate personal information
• Right to Delete: Request deletion of your personal information, subject to certain legal exceptions
• Right to Opt Out: Opt out of SMS communications by replying STOP, or opt out of email communications via the unsubscribe link
• Data Portability: Request your data in a portable format
• Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights

California Residents (CCPA/CPRA): Under the California Consumer Privacy Act and California Privacy Rights Act, California residents have the right to know what personal information is collected, request deletion, and opt out of the sale or sharing of personal information. We do not sell or share your personal information as defined under the CCPA/CPRA. To submit a verifiable consumer request, email us at the address below. We will respond within 45 days as required by law.

Nevada Residents: We do not sell your personal information as defined under Nevada law (SB 220).

To exercise these rights, contact us at privacy@ioxskape.com.

10. Cookies

We use essential cookies to maintain your session and provide the Service. We do not use third-party advertising cookies. Analytics cookies may be used to understand usage patterns.

11. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe we have collected such information, please contact us.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service.

13. Contact

For questions about this Privacy Policy, contact us at privacy@ioxskape.com.