Privacy Policy
Semiora is engineered with privacy by design. We never sell your data, use zero invasive advertising trackers, and protect booking details with native row-level database isolation.
1. Introduction
Your privacy is paramount. This Privacy Policy describes how Semiora ("we", "us", operated by Semiora Cloud Inc.) collects, stores, processes, and safeguards personal data when you visit our website, use our web application, or schedule appointments through our public booking links.
We operate as an independent scheduling software infrastructure provider committed to absolute data ownership, verifiable transparency, and user autonomy.
2. Information We Collect
We collect only the minimum information necessary to execute scheduling workflows reliably:
Account & Profile Details
When creating an account, we record your name, work email address, username, preferred timezone, and optional profile branding (avatar, professional bio, brand colors).
Booking & Calendar Records
When guests book meetings on your public pages, we collect meeting titles, attendee names, email addresses, meeting timestamps, and answers to custom booking questions configured by the host.
Technical & Telemetry Data
We collect essential technical parameters (client IP address, browser user-agent, device security fingerprint) strictly to enforce edge rate limiting, prevent credential stuffing, and defend against denial-of-service attacks.
Billing Records
For paid subscriptions, all payment card handling and tax calculations are securely managed by our Merchant of Record (Paddle.com). We never access or store raw credit card numbers on our infrastructure.
3. How We Use Your Information
We use collected data solely to deliver, automate, and safeguard the scheduling service:
- To schedule, confirm, reschedule, and cancel calendar appointments.
- To transmit automated booking confirmations, SMS/email reminders, and ICS calendar attachments.
- To synchronize real-time availability with connected calendar providers (Google Calendar, Microsoft Outlook, iCloud, CalDAV).
- To enforce multi-channel workflow automations and round-robin host assignment.
- To prevent automated abuse, fraudulent accounts, and spam booking requests.
- To deliver direct technical support and critical service notifications.
4. We Never Sell Your Data
We do not deploy surveillance tracking pixels, invasive session recorders, or advertising SDKs. We natively respect the Global Privacy Control (GPC) and Do Not Track (DNT) signals broadcast by privacy-preserving browsers.
5. Cloud Services & Infrastructure
To maintain sub-50ms edge response times and 99.99% service availability, we partner with enterprise cloud infrastructure providers:
- Cloudflare, Inc.: Anycast edge delivery, DDoS mitigation, R2 object asset storage, and Turnstile bot defense.
- Managed PostgreSQL (Supabase / AWS): Relational database storage with native multi-tenant Row-Level Security (RLS) enforcement.
- Upstash, Inc.: Distributed memory caching and rate-limiting infrastructure.
- Paddle.com: Payment processing, PCI-DSS Level 1 compliance, and global Merchant of Record tax handling.
6. Data Retention & Deletion
We retain your data only for the duration of your active account. When you delete your account via your settings dashboard, all personal data, event types, booking histories, and connected credentials are permanently deleted from active production databases.
Security rate-limit logs are retained for an operational window of up to 90 days before automated rotation. Financial transaction records are retained as mandated by applicable tax and accounting laws through Paddle.
7. Your Privacy Rights
Under GDPR, CCPA/CPRA, and international data protection standards, you enjoy comprehensive privacy rights:
Right to Access & Portability
Download a complete JSON archive of your account records anytime via Settings.
Right to Erasure (Be Forgotten)
1-click self-service permanent account erasure from your dashboard.
Revoke Integrations
Disconnect Google, Outlook, Zoom, or Slack tokens at any moment with immediate token invalidation.
Inquiries & DPO Contact
Direct access to our data protection team at privacy@semiora.app.
9. Security Safeguards
We deploy rigorous technical controls to protect data from unauthorized access:
- Encryption: TLS 1.3 encryption in transit; AES-256 encryption for database volume and credential storage.
- Tenant Isolation: PostgreSQL Row-Level Security ensuring organizational boundary enforcement.
- Hashing: Memory-hard scrypt hashing for credentials; SHA-256 for webhook secrets and API tokens.
- Race-Condition Defense: PostgreSQL transaction advisory locking guaranteeing zero double-bookings.
10. Contact Us
If you have questions, inquiries, or need to exercise your legal data rights, contact us anytime:
Data Protection Officer: privacy@semiora.app
Customer Support: support@semiora.app
Corporate Entity: Semiora Cloud Inc.
Review our comprehensive platform agreements, refund rules, and data handling safeguards: