01. Scope and who we are
This privacy policy explains how ATHiVO (Pvt) Ltd ("ATHIVO", "we", "us") handles personal information when you use the Slotz customer application, Slotz Partner application, related administration tools, websites, APIs, support channels, and booking services (together, "Slotz"). We are based in Sri Lanka. Privacy questions can be sent to contact.athivo@gmail.com.
02. Information you provide
We collect account and profile information such as your name, email address, telephone number, profile image, password in hashed form, and Google account identifier when you choose Google sign-in.
When you use Slotz, we may collect booking and transaction details, venue and court selections, dates and times, cancellation reasons, uploaded bank-transfer receipts, reviews, favourites, membership or loyalty activity, team and tournament information, coaching requests, waitlist entries, and messages you send to support.
For Slotz Partner, we may also collect venue and business information, staff relationships, operating hours, court details, pricing, venue images, contact information, and bank-transfer or payout information supplied to operate a venue.
03. Information collected through the service
With device permission, the customer app accesses your device location while you use the nearby-venues feature. Coordinates are sent to our service to return nearby results; Slotz does not request background location. You may deny location access and use other discovery features.
We collect push-notification tokens and notification preferences when you enable notifications. Our systems may also record technical and security information such as IP address, request identifiers, timestamps, app or device information, and error or diagnostic events needed to operate and protect the service.
Payment providers process payment credentials. Slotz may receive transaction identifiers, payment status, amount, and limited payment-method details, but we do not store complete card numbers or card security codes.
04. How we use information
We use information to create and secure accounts; authenticate users; find venues; show availability and prices; create, manage, cancel, and verify bookings; process payments, refunds, receipts, payouts, and disputes; provide reviews, favourites, memberships, loyalty, teams, tournaments, coaching, waitlists, and notifications; operate partner tools; respond to support; prevent fraud and abuse; troubleshoot failures; and comply with legal obligations.
We do not sell personal information. We do not use personal information for third-party advertising, and Slotz does not include an advertising SDK.
05. Service providers and sharing
We share information only as needed to provide Slotz: with the relevant venue and its authorised personnel for booking and venue operations; Amazon Web Services for cloud hosting, databases, logs, and secure storage; Google for optional sign-in; Expo and platform notification services for push delivery; Cloudinary where image or receipt uploads are enabled; Stripe and/or PayHere where the selected payment flow uses those providers; and email infrastructure used for verification, password reset, and support.
A provider processes information under its own terms and privacy policy as applicable. We may also disclose information where required by law, to protect users or the service, in connection with a corporate transaction, or with your direction or consent. Slotz may process information in countries other than your own because cloud and service providers operate internationally.
06. Retention and deletion
We keep account and operational information while your account is active and for as long as reasonably needed to provide Slotz. Booking, payment, payout, refund, tax, fraud-prevention, and dispute records may be retained after account deletion where required for legal, accounting, security, or venue-record obligations. Technical logs and backups are retained for limited operational cycles and are deleted or overwritten according to our maintenance processes.
When an eligible deletion request is verified, we delete or de-identify account data that is not required for those purposes and instruct applicable processors as appropriate. See the account and data deletion page to start a request.
07. Security
We use access controls, authentication, transport encryption, managed cloud infrastructure, secret management, restricted database networking, and operational monitoring intended to protect information. No internet service can guarantee absolute security. Please use a unique password, protect your device, and tell us promptly if you believe your account has been compromised.
08. Your choices and rights
You can update certain profile details in the app, control device permissions in your operating-system settings, disable notifications, and request access, correction, or deletion by contacting contact.athivo@gmail.com. We may ask you to verify that you control the relevant account. Applicable law may provide additional rights or permit us to retain specific records.
09. Children
Slotz is intended for people aged 18 or older and is not directed to children. We do not knowingly collect personal information from a child. If you believe a child has provided information to Slotz, contact contact.athivo@gmail.com.
10. Changes and contact
We may update this policy as Slotz and legal requirements evolve. We will update the date on this page and provide additional notice where required. Contact contact.athivo@gmail.com for privacy matters or contact.athivo@gmail.com for product support.