Privacy Policy

1. Overview & Data Controller

This Privacy Policy describes how Growth Sparrow ("we", "us", or "our"), as the operator of the Optimised multitenant software-as-a-service platform, collects, processes, and protects personal data belonging to both our business subscribers ("Tenants") and their end-user clientele ("Customers", "Patients", "Clients", or "Occupants").

2. Information We Collect

• Tenant Account Information: Administrator name, business legal name, email address, password hash, phone number, physical address, and billing contact details.
• End-User Booking Information: Full name, email address, contact phone number, appointment time, preferred specialist, service selection, and optional consultation notes submitted during the booking funnel.
• Financial & Payment Data: Upfront payments and invoices are securely processed through integrated payment gateways (Stripe or Razorpay). Optimised never stores raw credit card numbers or banking credentials.
• Uploaded Media: Business logos, specialist headshots, and gallery photographs uploaded to the platform, strictly validated against file size constraints (maximum 1.00MB).

3. Multitenant Architecture & Data Isolation

Optimised is built on an enterprise-grade multitenant architecture. Each tenant's data—including CRM contacts, service catalogs, bookings, financial invoices, and integration credentials—is segregated using strict logical and database isolation. One tenant's users cannot access or view another tenant's confidential information.

4. Third-Party Integrations

When tenants connect third-party platforms, Optimised accesses external APIs strictly to fulfill booking workflows:

• Google Calendar & Apple/Outlook iCal: For two-way event scheduling and calendar invites.
• Google Meet & Zoom: For dynamic generation of confidential video conference rooms.
• Stripe & Razorpay: For real-time payment collection and itemized invoice settlement.

5. Cookies & Local Storage

We utilize encrypted HTTP-only authentication cookies to maintain authorized portal sessions and HTML5 Local Storage to remember user interface preferences (such as dark/light mode toggle and interactive demo sandbox states).

6. Your Rights & Data Portability

You have the right to access, rectify, export, or request deletion of your personal data at any time. Tenant administrators can export client rosters and booking histories as CSV or printable PDF invoices directly from the dashboard.

7. Contact Information

For legal inquiries, privacy concerns, or data deletion requests, contact Growth Sparrow Data Governance at: privacy@growthsparrow.com.