Booking & Shifts: Openslot — Privacy Policy
Openslot is an appointment book and staff shift scheduler published by NextLayer Technology. Your book starts on your phone and stays there until you switch on online booking.
The short version: without online booking, your book never leaves your device. With it on, a copy is kept on our servers so your booking page, your phone and the web version show the same book. We never sell it, never show it to another shop, and never use it to market to your clients. No ads.
Before you switch anything on
Everything you enter — business details, services, team members, shifts, clients, notes and bookings — is stored only in a local database on your device, and none of it is sent anywhere except the anonymous usage and crash measurements described below.
With online booking on
You turn this on in Settings by choosing a link for your shop. From then on the app keeps a copy of your book on our servers and keeps it in step with your phone. That copy holds your shop's name, address, phone number, timezone and opening hours; your team's display names; your services, with lengths, prices and any deposit; your shifts; your bookings; and your clients — names, phone numbers, email addresses, the notes you keep about them, and their visit history.
The public booking page is shown only what it needs to offer the right times: your shop, your team's names, your services, and which slots are taken. It never shows who took them, and it never sees your client list.
Your clients' information
Your client list is stored so it can follow you between your phone and your computer, and for nothing else. We do not sell it, share it, show it to other businesses, or contact your clients. You remain responsible for handling your clients' information in line with the laws that apply to your business.
Using Openslot on a computer
The web version at nextlayertechnology.net/openslot/app is the same book in a browser. You pair the browser from your phone with a short code, and the browser then holds its own key to your book. Each paired browser is listed in Settings on your phone, and you can remove any of them at once. Signing out, or clearing the site's data, removes the browser's copy and key.
People who book through your page
Someone booking on your page enters their name, phone number and an optional note so you can confirm with them. That request becomes part of your book and is used for nothing else.
They can also choose to sign in with Google or an email address, so the form fills itself and they can see and cancel their appointments at any shop that uses Openslot. For a signed-in customer we keep the account's email address and the name and phone number they save. Booking without signing in works exactly as before, and an account's history starts the day it is made — earlier bookings are never matched to it by phone number.
Accounts for shops
A shop needs no account and no password. When you switch on a booking page, your phone creates a random key, keeps it, and registers only a one-way hash of it. Whoever holds a key can see and change the book it belongs to, which is why you can revoke any key from the phone.
Where it is kept
The server copy of your book, and customer sign-in, are held by Supabase in its Canadian region; the booking page and web version are served through Cloudflare. Both act only on our instructions, and everything travels over encrypted connections.
Usage analytics and crash reports
The Android app uses Google Analytics for Firebase and Firebase Crashlytics so we can see when it breaks and which parts get used. They send crash reports; which screens were opened and which actions were taken, by fixed labels and counts; basic device and app information such as model, Android version and app version; a random identifier for the installation; and a coarse location that Google derives from your IP address. They never include your clients — no names, phone numbers, notes or appointments. The web version and booking page send no app analytics. There is no advertising and no advertising identifier. Google keeps analytics events for at most 14 months and crash reports for 90 days.
Deleting your data
Turning off online booking in Settings deletes the server copy of your book at once — clients, bookings, the page, and every paired browser's access. Your phone keeps its own copy. Deleting the app, or clearing its storage, removes everything on the phone. If you can no longer reach the phone, or you signed in to book and want that account removed, or you want the analytics for your installation deleted, email support@nextlayertechnology.net.
Staff information you enter
Team member names, colours and rostered shifts are part of your book. Staff members do not have accounts in the current version.
Children
Openslot is a business tool and is not directed at children under 13.
Contact
Questions about this policy: support@nextlayertechnology.net, NextLayer Technology, Ontario, Canada. This page covers Booking & Shifts: Openslot; the studio-wide policy for every NextLayer app lives at nextlayertechnology.net/privacy.