Privacy Policy

Setvia is a booking platform for small service businesses, operated by an individual trading as Setvia from Morocco. We are not yet incorporated as a company. If that changes, this policy will be updated to name the entity.

For anything in this policy, contact us at setvia.co@gmail.com.

Setvia handles personal information in two distinct ways, and the difference matters for your rights.

Business owners. If you sign up to run your business on Setvia, we decide how your account information is used. In data protection terms we are the controller of that data.

Customers of those businesses. If you book an appointment with a business that uses Setvia, the business decides what happens to your information. We store and process it on their behalf. In data protection terms they are the controller and we are the processor. If you want your booking data changed or deleted, contact the business first — but you can also contact us and we will help.

From business owners: your name, email address, and profile photo if you sign in with Google. Your business details — name, description, address, phone, opening hours, services and prices. Any photos you upload. Your subscription status.

From customers booking an appointment: your name, email address, phone number if you provide one, the service and time you booked, and any notes you add to the booking.

Automatically: basic technical information such as IP address and browser type, collected by our hosting provider as part of serving the site.

We do not collect payment card details. Setvia does not process payments.

To run the booking service: showing availability, storing bookings, sending confirmation and reminder emails to you and to the business.

To operate accounts: signing you in, keeping your business page live, and letting you manage your data.

To improve and support the product, and to contact you about your account when we need to.

We do not sell personal information. We do not share it with advertisers.

We use a small number of third-party services to run Setvia. Each one only receives what it needs.

Vercel — hosting and serving the website. Neon — our database, hosted in the United States. Clerk — account sign-in and authentication. Resend — sending booking confirmation emails. Anthropic — powers the AI setup assistant; business details you type during onboarding are sent to it to generate your page.

We may also disclose information if the law requires it.

Setvia is operated from Morocco, and our database and hosting are in the United States. If you are in the European Union or the United Kingdom, your information is transferred outside your country to be stored and processed.

We are being direct about this rather than claiming protections we have not yet put in place: as a sole operator without a registered company, we do not currently have Standard Contractual Clauses or an EU representative in place. We intend to address this as the business formalises. If that matters to you, please take it into account before signing up.

Wherever you live, you can ask us to: give you a copy of the personal information we hold about you, correct anything that is wrong, delete your information, or export your data in a portable format.

Business owners can export bookings and customers as CSV files from the dashboard at any time, without asking us.

To make any other request, email setvia.co@gmail.com. We will respond within 30 days. We will never charge you for making a request or treat you differently for it.

If you are a customer of a business using Setvia and you want your data removed, we will pass the request to that business and act on their instruction, unless the law requires otherwise.

Booking records are kept while the business keeps its account, because businesses need their own history.

If a business account is closed, we keep its data for 12 months so it can be reactivated or exported, then delete it permanently.

You can ask us to delete your data sooner and we will, unless we are legally required to keep it.

Data is transmitted over encrypted connections and stored with providers that encrypt data at rest. Access to the production database is limited to the operator of Setvia.

No system is perfectly secure. If a breach affects your personal information, we will tell you and the relevant authority as promptly as we can.

Setvia is not intended for anyone under 16. We do not knowingly collect information from children. If you believe a child has given us personal information, email us and we will delete it.

We use cookies that are necessary for the site to work — principally to keep you signed in. We do not use advertising or tracking cookies.

If we change this policy in a way that materially affects you, we will email account holders before it takes effect. The date at the top always reflects the current version.