Privacy Policy

Updated At: May 24, 2026

1. Introduction

Welcome to Quikly ("Quikly", "we", "our", or "us"). We are committed to protecting your privacy and ensuring that your personal information is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you visit our website and use our services, including our integrations with third-party services like Google Calendar and Dropbox.

2. Information We Collect

We may collect the following types of information:

• Personal Information: Name, email address, phone number, and other contact details.
• Booking Information: Details related to appointments, services booked, and transaction history.
• Payment Information: Billing details and payment method information.
• Technical Data: IP address, browser type, operating system, and usage data.
• Google Account Information: When you connect your Google Calendar, we collect your Google account email, name, profile picture, and email verification status through Google's OAuth2 authorization process.
• Calendar Integration Data: Calendar event information, appointment synchronization data, sync timestamps, and OAuth access tokens necessary for Google Calendar integration.
• Dropbox Account Information: When you connect your Dropbox account, we collect your Dropbox account email and name through Dropbox's OAuth2 authorization process.
• Dropbox Integration Data: Folder structure information (folder names and paths only), file names (not file contents), sync timestamps, and OAuth access tokens necessary for Dropbox integration.
• SMS Communication Data: Phone numbers, message content, delivery status, and timestamps for appointment reminders and notifications sent through our SMS service.
• Feedback: Customer reviews and responses to surveys.

3. Google Calendar Integration

Our Google Calendar integration allows you to synchronize your Quikly appointments with your Google Calendar. Here's what you need to know:

• Authorization: We use Google's OAuth2 authorization system to securely access your Google Calendar. You must explicitly grant permission for each scope we request.
• Permissions Requested: We request access to create and modify calendar events, read your basic profile information (name, email), and verify your email address.
• Data Access: We only access the specific data needed to synchronize your appointments. We do not read, modify, or access your existing personal calendar events.
• Event Creation: We create calendar events containing appointment details including service names, customer information, appointment times, and booking notes.
• Token Security: OAuth access and refresh tokens are encrypted and stored securely. These tokens allow us to maintain calendar synchronization without requiring repeated authorization.
• Revocation: You can revoke our access to your Google Calendar at any time through your Google Account settings or by disconnecting the integration in your Quikly dashboard.

4. Dropbox Integration

Our Dropbox integration allows you to automatically sync files and documents from Quikly to your Dropbox account. Here's what you need to know about privacy and data access:

• Authorization: We use Dropbox's OAuth2 authorization system to securely access your Dropbox account. You must explicitly grant permission for each scope we request.
• Permissions Requested: We request access to read your basic account information (name, email), view folder structure, and upload files to your selected Dropbox folders.
• Privacy Protection: For your privacy and security, our application is not able to see the contents or files of your Dropbox when connected. We only access folder names and file names to help you navigate and select folders for file synchronization. We cannot read, view, or access the actual content of your files. Your customer privacy is our utmost priority.
• Data Access: We only access the specific data needed to synchronize your files. This includes:
  • Folder names and directory structure (for navigation)
  • File names in folders (for display purposes only)
  • No access to file contents, file data, or file metadata beyond names
• File Upload: We create and upload files to your selected Dropbox folders containing treatment notes, body charts, templates, and other documents generated through Quikly.
• Token Security: OAuth access and refresh tokens are encrypted and stored securely. These tokens allow us to maintain Dropbox synchronization without requiring repeated authorization.
• Revocation: You can revoke our access to your Dropbox account at any time through your Dropbox Account settings or by disconnecting the integration in your Quikly dashboard.

5. How We Use Your Information

We use the collected information to:

• Provide and manage our booking services.
• Process transactions and send related information.
• Communicate with you regarding your account and our services.
• Send appointment reminders, confirmations, and notifications via SMS.
• Improve our website and services through analytics.
• Synchronize your appointments with your Google Calendar when you enable this integration.
• Create, update, and manage calendar events on your behalf.
• Maintain authentication with Google services for continued calendar synchronization.
• Synchronize files and documents to your Dropbox account when you enable this integration.
• Upload treatment notes, body charts, templates, and other documents to your selected Dropbox folders.
• Maintain authentication with Dropbox services for continued file synchronization.
• Comply with legal obligations.

6. Sharing Your Information

We may share your information with:

• Google Services: When you enable Google Calendar integration, we share appointment information with Google to create and manage calendar events in your account. This includes appointment times, service details, customer names, and booking notes.
• SMS Services: When you use our SMS features, we share phone numbers and message content with our messaging provider to deliver appointment reminders and notifications. They process this data in accordance with their privacy policy and applicable telecommunications regulations.
• Dropbox Services: When you enable Dropbox integration, we share file data (treatment notes, body charts, templates) with Dropbox to upload files to your selected folders. We only share folder names and file names for navigation purposes - we do not access or share the contents of your existing Dropbox files. Dropbox processes this data in accordance with their Privacy Policy.
• Service Providers: Third-party vendors who assist in providing our services (e.g., payment processors, email service providers).
• Legal Authorities: When required by law or to protect our rights.
• Business Transfers: In the event of a merger, acquisition, or sale of assets.

We do not sell or rent your personal information to third parties.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. For Google Calendar integration specifically:

• OAuth tokens are encrypted at rest using industry-standard encryption methods.
• All communications with Google services use secure HTTPS connections.
• Access to calendar integration features requires user authentication.
• We implement CSRF protection for OAuth authorization flows.
• Calendar synchronization includes error handling to prevent data corruption.
• Dropbox OAuth tokens are encrypted at rest using industry-standard encryption methods.
• All communications with Dropbox services use secure HTTPS connections.
• Access to Dropbox integration features requires user authentication.
• We implement CSRF protection for Dropbox OAuth authorization flows.

However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

We retain your information for different purposes and periods:

• Account Information: Retained while your account is active and for a reasonable period after closure for legal compliance.
• Google Calendar Integration Data: OAuth tokens and sync data are retained while the integration is active. When you disconnect the integration, we delete the tokens and cease synchronization.
• Calendar Events: Events created in your Google Calendar remain under your control. Disconnecting our integration does not delete previously created events.
• Dropbox Integration Data: OAuth tokens and sync data are retained while the integration is active. When you disconnect the integration, we delete the tokens and cease synchronization.
• Dropbox Files: Files uploaded to your Dropbox account remain under your control. Disconnecting our integration does not delete previously uploaded files.
• Appointment History: Retained for business purposes and legal compliance, typically for 7 years or as required by applicable law.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access the personal data we hold about you.
• Request correction or deletion of your data.
• Object to or restrict processing of your data.
• Withdraw consent where processing is based on consent.
• Request data portability (receive your data in a structured, machine-readable format).
• Lodge a complaint with a supervisory authority.

To exercise these rights, please contact us using the information provided below. We will respond to your request within 30 days.

10. Data Deletion Requests

If you would like us to delete your personal data, you may submit a request by emailing us at [email protected]. Please include the email address associated with your account and a clear description of the data you would like deleted.

When we receive your request, we will:

• Verify your identity to protect your account and prevent unauthorized deletion requests.
• Confirm receipt of your request and provide an estimated timeline for completion.
• Process eligible deletion requests within 30 days, unless a longer period is required by law.
• Notify you once your data has been deleted or explain if any information must be retained.

Upon approval, we will delete or anonymize personal data associated with your account, including profile information, contact details, and other data we control that is not subject to a legal retention requirement. This may include:

• Your account profile and login credentials.
• Contact information such as your name, email address, and phone number.
• OAuth tokens and integration settings for connected services such as Google Calendar and Dropbox.
• Customer feedback, survey responses, and other optional data you provided.

Some information may be retained where we are legally required or permitted to do so, including:

• Transaction, billing, and appointment records needed for accounting, tax, fraud prevention, or legal compliance.
• Data necessary to resolve disputes, enforce our agreements, or protect our legal rights.
• Information that has been anonymized or aggregated so it can no longer reasonably be used to identify you.

If you have connected third-party services, deleting your Quikly data does not automatically remove content already stored in those services. For example, calendar events created in Google Calendar or files uploaded to Dropbox remain under your control in those accounts. You may revoke our access at any time through your Google or Dropbox account settings, or by disconnecting the integration in your Quikly dashboard.

If you are a customer who booked through a business using Quikly, please contact that business directly regarding appointment or customer records they hold. We will assist business users with deletion requests related to data they control on our platform.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These technologies help us:

• Remember your preferences and settings.
• Analyze website traffic and usage patterns.
• Provide personalized content and advertisements.
• Improve our services and user experience.

You can control cookie settings through your browser preferences. However, disabling certain cookies may affect the functionality of our website.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

13. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Effective Date" at the top of this policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: