Privacy policy

1. Who we are

LiftSlot is a scheduling and online booking program for car repair shops. It is run by:

• Erotronics, obrt za usluge, a Croatian sole-trader business (obrt), owned by Dominik Oreč
• Address: Put Strinje 35A, 21212 Kaštel Sućurac
• OIB (Croatian tax number): 40273465235
• E-mail: kontakt@liftslot.com
• Phone: +385 95 345 2239
• Not in the VAT system.

For questions about personal data, write to kontakt@liftslot.com. We haven't appointed a data protection officer, as the law doesn't require one for a business of our size and kind. [[PROVJERITI]]

2. Two roles: whose data is it?

LiftSlot handles two kinds of personal data, and our role is different for each:

• Your account and your business with us. The data of garage owners and staff who use LiftSlot, billing, and visitors to this website. Here we are the controller: we decide why and how this data is used, and this policy explains it.
• Your garage's customers. The people who book their cars with your garage, their vehicles and appointments, including bookings made on your public booking page. Here your garage is the controller and we are the processor: we store and process this data only on your behalf and on your instructions, under our Data Processing Agreement.

If you are a garage's customer: your garage decides what happens to your data. Please contact the garage directly with questions or requests. If you contact us, we pass your request to the garage and help it answer.

If you run a garage: you are responsible for telling your customers how you use their data, for example in your own privacy notice or at the counter, and for having a legal basis to use it. Your public booking page shows your customers a short notice that your garage processes their booking details and that we only provide the software.

3. What data we collect, and where it comes from

When you create and use an account

• E-mail address and password. We store the password only as a one-way hash (bcrypt), never in plain text.
• Your name as shown in the app. At sign-up we start with the part of your e-mail before the @.
• For staff: the name the owner gives them, their role (owner, admin or mechanic), and an e-mail and password or a PIN (also stored only as a hash).
• Your garage's details: name, booking page address, phone, address, opening hours, lifts, services and prices, language and time zone.
• Account state: trial end date, subscription plan and period, and the date you asked to delete the account, if you did.

You give us this data yourself, or the garage owner enters it for their staff.

When you pay (once paid plans start)

• Company or trade name, OIB or VAT number, address and billing e-mail, for invoices.
• Card details are entered on Stripe's page and stay with Stripe. We never see or store the card number.

Billing isn't live yet. Until it is, we store none of this.

When you visit the website or use the app

• Technical data your browser sends with every request, such as your IP address, browser type, the page requested and the time. Our hosting provider processes it to deliver the page and protect the service, and keeps it in short-lived technical logs (section 7).
• When someone sends too many sign-in, sign-up or booking attempts in a short time, the IP address is counted to slow them down. If the limit is hit, that IP address appears in the technical logs.
• A few cookies and browser-storage entries that the site needs to work. They're listed in the cookie policy.

We don't use analytics, advertising or tracking tools, and we don't load fonts or scripts from other companies' servers.

When you write to us

• Your e-mail address, name and whatever you write, so we can answer.

4. Why we use it, and on what legal basis

We only send service e-mails, the ones listed above. We don't send newsletters or marketing e-mails.

We don't sell personal data, and we don't use it for profiling or automated decisions.

5. Who else processes the data

We use these providers to run the service. Each processes personal data only for us, under a data processing agreement:

Planned, not active yet. We'll add them here before billing starts:

• Stripe (card payments for subscriptions, once paid plans start): billing contact, company details and card data, which stays with Stripe. Our contracting party is Stripe Payments Europe, Limited (Ireland). Transfers to Stripe, LLC (USA) are covered by its EU-U.S. Data Privacy Framework certification, with the EU Standard Contractual Clauses in Stripe's Data Transfers Addendum as a fallback.
• Solo (solo.com.hr, Croatia; fiscalised invoices): company name, OIB, address and invoice amounts. Data is processed in the EU. [[PROVJERITI: ugovor o obradi zatražen od Sola]]

We also share data when the law requires it, for example with a court or the tax authority.

“Message customer” in the app opens WhatsApp or the phone's SMS app, or copies the text for Viber, on the garage's own device. The customer's number and the message then go to that app because the garage chose to send them. We don't send anything to those services ourselves.

6. Data outside the EU

The database and its backups are in the EU (Frankfurt, Germany), and e-mails are sent from the EU (Ireland). Our providers are US companies, and Cloudflare handles each request in the data centre nearest the visitor, which can be outside the EU. Where data goes outside the EU or EEA, it is protected like this:

• Cloudflare and Resend are certified under the EU-U.S. Data Privacy Framework, which the European Commission recognises as giving adequate protection. Cloudflare's data processing agreement also includes the EU Standard Contractual Clauses as a fallback.
• Neon is covered by its data processing agreement, which includes the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914).
• Stripe, once paid plans start: our contracting party is Stripe Payments Europe, Limited in Ireland. Transfers to Stripe, LLC in the USA are covered by its Data Privacy Framework certification, with the Standard Contractual Clauses in Stripe's Data Transfers Addendum as a fallback.

Write to kontakt@liftslot.com if you'd like more detail about these safeguards.

7. How long we keep it

8. Your rights

Under the GDPR you can ask us to:

• give you a copy of your personal data (access);
• correct data that's wrong (rectification);
• delete it (erasure), unless we have to keep it, for example invoices;
• limit how we use it (restriction);
• give you your data in a machine-readable format (portability). Garage owners can also export their customers, vehicles and appointments themselves, as CSV files, in Settings;
• stop using it where we rely on legitimate interest (objection).

Write to kontakt@liftslot.com. We answer within one month. If we need to confirm it's really you, we may ask you to write from your account's e-mail address.

Garage owners can delete the whole account themselves in Settings, and can delete a customer's personal data with one button.

You can also complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (AZOP), azop.hr, or the authority in your own EU country.

9. How we protect data

• Every connection is encrypted (HTTPS), including the connection to the database.
• Passwords and PINs are stored only as one-way hashes. Password reset links are single-use and expire after an hour. Resetting a password signs out every device.
• Each garage's data is kept apart in the database itself (row-level security), and inside a garage, roles limit who can do what.
• PIN sign-in locks for 15 minutes after repeated wrong attempts, and sign-in, sign-up, password reset and booking forms are rate-limited.
• Security headers protect against common browser attacks (Content Security Policy, HSTS, no framing).
• Our database provider encrypts stored data (AES-256).

No system is perfectly secure. If a breach puts your data at risk, we'll tell you and the authority as the GDPR requires.

10. Children

LiftSlot is a tool for businesses. It isn't meant for anyone under 16, and we don't knowingly collect their data.

11. Changes to this policy

When we change this policy, we update the version and date at the top. If a change matters for you, we'll tell account holders in the app or by e-mail before it takes effect.