Back to home

Privacy Policy

Last updated: April 9, 2026

1. Introduction

Zatrovo ("we", "our", "us") operates a studio management platform that helps fitness, wellness, and creative studios manage their classes, appointments, memberships, and member communications. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform.

2. Information We Collect

We collect the following types of information:

  • Account information: Name, email address, phone number, and profile photo when you create an account or sign in with Google.
  • Booking data: Class and appointment bookings, attendance history, and scheduling preferences.
  • Payment information: Payment method details are processed securely by Stripe. We store Stripe customer IDs but never store card numbers or bank details.
  • Communications: Messages sent through our platform, email preferences, and notification settings.
  • Usage data: How you interact with our platform, including pages visited and features used.
  • Google account data: If you sign in with Google, we receive your name, email, and profile picture. If you grant calendar permission, we use your Google Calendar access solely to create event reminders for your bookings.

3. How We Use Your Information

  • Provide and maintain the platform, including class scheduling, booking, and member management.
  • Process payments and manage credit packs.
  • Send booking confirmations, reminders, and important account notifications.
  • Create Google Calendar events for your bookings when you have granted calendar access.
  • Enable studio administrators to manage their members, classes, and operations.
  • Improve our platform and develop new features.

4. Google Calendar Integration

When you sign in with Google and grant calendar permission, we securely store an access token to create calendar events on your behalf. We only create events for your bookings — we do not read, modify, or delete your existing calendar data. You can revoke this access at any time through your Google Account settings. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Sharing

We do not sell your personal data. We share information only in these circumstances:

  • With your studio: The studio you are a member of can see your bookings, attendance, and profile information to manage their operations.
  • Payment processing: Stripe processes your payments securely under their own privacy policy.
  • Email delivery: We use Resend to deliver transactional emails such as booking confirmations.
  • Legal requirements: We may disclose information if required by law or to protect our rights.

6. Data Security

We take reasonable measures to protect your personal information. All data is transmitted over HTTPS. Passwords are hashed using bcrypt. Access tokens are stored securely in our database and are never exposed to client-side code. Our database uses Row Level Security to ensure tenant isolation in our multi-tenant architecture.

7. Data Retention

We retain your account data for as long as your account is active. Booking history is retained to provide studios with attendance records. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or accounting purposes.

8. Your Rights

You have the right to:

  • Access and download your personal data.
  • Correct inaccurate information in your profile.
  • Request deletion of your account and personal data.
  • Opt out of non-essential communications.
  • Revoke Google Calendar access through your Google Account settings.

9. Cookies

We use essential cookies for authentication and session management. These are necessary for the platform to function and cannot be disabled. We do not use advertising or tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our platform. Your continued use of the platform after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at support@zatrovo.com or visit our contact page.