Privacy Policy

Kendry ("we", "our", "us") operates the Kendry scheduling platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By accessing or using Kendry, you consent to the data practices described in this policy. If you do not agree, please discontinue use of the Service immediately.

Account Information: When you create an account, we collect your name, email address, username, profile picture, and timezone. If you sign up via Google OAuth, we receive your name, email, and profile image from Google.

Booking Data: When meetings are scheduled through our platform, we collect attendee names, email addresses, booking notes, and any custom form responses provided during the booking process.

Payment Information: Payments are processed by Stripe and/or Razorpay. We do not store full credit card numbers, CVVs, or bank account details. We receive transaction IDs, payment status, and billing metadata from our payment processors.

Usage Data: We automatically collect device type, browser type, IP address, pages visited, feature usage patterns, and access timestamps to improve the Service.

Cookies: We use essential cookies for authentication (Supabase session cookies), geo-detection (country code for pricing), and optional analytics cookies (Google Analytics, PostHog) if configured by the platform administrator.

Supabase Auth: We use Supabase for authentication and session management. Your authentication data (email, hashed password, session tokens) is stored securely on Supabase's infrastructure. See Supabase Privacy Policy.

Google OAuth: If you sign in with Google, we receive your name, email, and profile picture. We do not access your Google Drive, Gmail, or other Google services unless you explicitly connect them (e.g., Google Calendar integration).

Google Calendar / Microsoft Outlook: When you connect a calendar, we access only calendar event data (start/end times, availability) to prevent double-bookings. We do not read event titles, descriptions, or attendee lists from your external calendars.

Stripe / Razorpay: Payment data is handled directly by these processors under their respective privacy policies. We only store transaction references and payment status.

We use your information to:

• Provide, operate, and maintain the scheduling Service
• Process bookings, payments, and send confirmation emails
• Send transactional notifications (booking reminders, cancellation alerts)
• Detect and prevent fraud, abuse, and unauthorized access
• Improve the Service through analytics and usage patterns
• Respond to customer support requests
• Comply with legal obligations

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

We share data only in the following circumstances:

• With booking participants: When a meeting is booked, both parties receive each other's name and email for communication.
• Service providers: Supabase (auth), Stripe/Razorpay (payments), Resend (email delivery), and hosting providers (Vercel) process data on our behalf under their respective privacy policies.
• Legal requirements: We may disclose data if required by law, court order, or government regulation.

We retain your account data for as long as your account is active. Booking data is retained for operational and compliance purposes. If you delete your account, your personal data will be removed within 30 days, except where retention is required by law.

You may request data export or deletion at any time by emailing zendra@kendry.site or through your account settings.

We implement industry-standard security measures including encrypted data transmission (TLS/SSL), encrypted credential storage, rate limiting, CSRF protection, and role-based access control. However, no method of transmission over the Internet is 100% secure.

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a machine-readable format
• Withdraw consent for optional data processing
• Lodge a complaint with a supervisory authority

To exercise any of these rights, contact us at zendra@kendry.site.

Kendry is not directed to individuals under 16. We do not knowingly collect personal data from children. If we learn we have collected data from a child under 16, we will delete it promptly.

We may update this Privacy Policy periodically. We will notify users of material changes via email or a notice on the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.

For privacy-related inquiries, contact us at:

Kendry
Email: zendra@kendry.site
Address: New Town, Kolkata, West Bengal, India — 700156