Privacy Policy

Last updated: June 14, 2026

This Privacy Policy explains how ParaFort LLC (“ZentroMeet”, “we”, “us”) collects, uses, shares, and protects information when you use the ZentroMeet scheduling platform and related websites (the “Service”).

1. Who we are

ZentroMeet is operated by ParaFort LLC. For privacy questions contact us at privacy@zentromeet.com.

2. Information we collect

Account & workspace data: name, email, password (stored only as a salted hash), business name, time zone, branding, and settings.
Booking data: appointments, services, availability, and the contact details (name, email, phone, and any intake-form answers) that the people who book with our customers provide.
Calendar data: when you connect Google or Microsoft, we access free/busy and event data needed to check conflicts and create/update/cancel events for your bookings (see Section 5).
Payment data: subscription and booking payments are processed by Stripe. We do not store full card numbers; we retain Stripe identifiers and billing status.
Usage & device data: log data, IP address, and analytics (Google Analytics 4) to operate and improve the Service.
Cookies: a strictly-necessary session cookie for authentication, and analytics cookies where enabled.

3. How we use information

To provide and secure the Service; create, change, and cancel bookings; check calendar availability; send transactional emails (confirmations, reminders, password resets, billing notices); process payments; provide support; detect abuse and fraud; comply with law; and improve the product. We do not sell personal information.

4. Legal bases (where applicable)

We process personal data to perform our contract with you, for our legitimate interests in operating the Service, to comply with legal obligations, and with consent where required (e.g. certain analytics cookies).

5. Google API Limited Use disclosure

ZentroMeet’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We request only the Google Calendar scopes needed to read free/busy availability and to create, update, and delete the calendar events associated with your bookings. Google user data is used solely to provide and improve these scheduling features. We do not use Google user data for advertising, do not sell it, do not transfer it to others except as necessary to provide the Service or as required by law, and do not allow humans to read it except with your consent, for security/abuse handling, to comply with law, or where the data is aggregated/anonymized. The same principles apply to data accessed via Microsoft Graph (Outlook Calendar).

6. How we share information

We share data with service providers (sub-processors) who act on our instructions: Amazon Web Services (hosting, email via SES), Stripe (payments), Google and Microsoft (calendar integrations you connect), and Cloudflare (custom-domain edge, where used). We may disclose information to comply with law or to protect rights and safety. If we undergo a merger or acquisition, data may transfer as part of that transaction.

7. Customer (tenant) responsibilities

When a business uses ZentroMeet to take bookings, that business is the controller of its customers’ personal data and ZentroMeet acts as a processor on its behalf. Businesses are responsible for having a lawful basis to collect and process their customers’ information.

8. Data retention

We retain account and booking data for as long as your account is active and as needed to provide the Service, then for a limited period to meet legal, accounting, and dispute-resolution obligations. Calendar OAuth tokens are encrypted at rest and removed when you disconnect the integration or delete your account.

9. Your rights & account/data deletion

Depending on your location you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing.

Deleting your account and data: you can request deletion of your ZentroMeet account and associated personal data at any time by emailing support@zentromeet.com from your account email, or via your workspace settings where available. On verified request we delete or anonymize your personal data within 30 days, except data we must retain by law. Disconnecting Google/Microsoft removes the stored calendar tokens immediately.

10. Security

We use industry-standard measures including encryption in transit (TLS), encryption at rest for sensitive secrets such as calendar tokens, hashed passwords, scoped multi-tenant access controls, and audit logging. No method of transmission or storage is 100% secure.

11. International transfers

We may process and store information in countries other than where you live, including the United States. Where required we use appropriate safeguards for such transfers.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

13. Changes

We may update this policy from time to time. Material changes will be posted here with a new “Last updated” date.

14. Contact

Questions? Email privacy@zentromeet.com or write to ParaFort LLC.