Privacy notice
How 1SCAN.LINK processes personal data for bookings, business accounts and platform operation.
Operator and contact
1SCAN.LINK DemoPre-launch demo
Sofia, Bulgaria
privacy@1scan.link
1. Scope and roles
This notice applies to 1SCAN.LINK visitors, customers making appointments, and business owners and staff. For appointment and customer records, the business you book with determines the purposes and is normally the controller; the 1SCAN.LINK operator acts as its processor. The operator is a separate controller for account administration, platform security, subscriptions, support, legal compliance and privacy requests addressed to the platform.
2. Data we collect
Customers: name, phone, email, preferred language, selected business, service and professional, appointment time and status, cancellation or rescheduling reason, notes voluntarily supplied, and the policy version accepted. Business users: email, authentication and session data, role and permissions, organization and location details, services, schedules, notification preferences, calendar connection and subscription information. Technical data: security and audit events, request identifiers, limited IP/request metadata, delivery and provider diagnostics, browser push subscription details and product analytics events that intentionally exclude customer names, contacts and free text. Payment-card details are not collected in the current release.
3. Sources
We receive data directly from customers and business users, from authorized members of the same business, and from connected providers when a user enables an integration. Google Calendar returns authorization, calendar, availability and synchronization information. Browser platforms return push-delivery status. We do not buy personal-data lists.
4. Purposes and legal bases
Booking and inquiry data is processed to take requested pre-contractual steps and perform the appointment service. Business account, team, publication, notification and integration data is processed to perform the platform agreement. Security, fraud prevention, service diagnostics and strictly limited analytics rely on legitimate interests, balanced against individual rights. Compliance records and privacy requests are processed to meet legal obligations. Optional marketing would require a separate valid consent and is not enabled by default.
5. Recipients
Appointment data is available only to authorized members of the selected business according to their role and location scope. The minimum necessary data may be processed by hosting and backup providers, ZeptoMail for transactional messages, Cloudinary for business images, browser push services, Google Calendar when connected, and Photon/OpenStreetMap for address search. The current public subprocessor register describes purposes and regions. We do not sell personal data.
6. International transfers
Where a provider processes data outside the EEA, the operator uses an applicable adequacy decision or contractual safeguards such as the European Commission Standard Contractual Clauses, together with a transfer assessment and supplementary measures where required. Details and a copy of relevant safeguards may be requested at the privacy contact above. DeepSeek remains disabled until the required transfer and contractual safeguards are approved.
7. Retention
Customer contact details are anonymized after the business-configured inactivity period, default 730 days and permitted range 30–3650 days. Export links expire after 24 hours. Push subscriptions are removed on opt-out, expiry or account closure. Calendar grants remain until disconnection or closure. Security logs, audit evidence, provider delivery records and encrypted backups follow the published retention schedule. Legal or security holds may temporarily suspend deletion where necessary and lawful.
8. Your rights
Subject to the GDPR conditions, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing. For appointment data, contact the business first; it controls that data and 1SCAN.LINK will assist it. For platform-controlled data, contact the operator above. We may request proportionate information to verify identity and normally respond within one month.
9. Complaints
You may complain to the Bulgarian Commission for Personal Data Protection (CPDP), Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd., https://cpdp.bg, or to the supervisory authority where you live or work. We encourage you to contact us first so we can investigate.
10. Security
Controls include role-based and tenant-isolated access, multifactor-readiness and account lockout, TLS, protected secrets and OAuth grants, antiforgery and rate limits, audit trails, durable queues, signed image uploads, encrypted off-site backups and tested restore procedures. No internet service is risk-free; confirmed personal-data incidents are handled under the documented incident process.
11. AI-assisted review
A platform administrator may manually request an advisory risk review of a newly onboarded business. The provider receives only derived booleans and counts; no names, email addresses, phone numbers, addresses, customer records or raw audit text. The result cannot verify, suspend or otherwise decide an account automatically. A human platform administrator makes and records every final decision.
12. Children and changes
1SCAN.LINK is intended for businesses and customers able to arrange the relevant service. The platform is not directed to children and does not knowingly request data from children as business account holders. We may update this notice when processing changes; material changes will be announced in the service and the version shown during booking will be recorded.