1. Who we are
Eselram is business software that helps service businesses manage bookings, customers, payments, communications and, where enabled, treatment or clinical records.
For privacy questions about Eselram, contact [email protected].
2. Information Eselram may process
Depending on how you use Eselram, we may process business and account details, support communications, technical installation information, authorisation information needed to connect third-party services, and licence or product-version information where those services are enabled.
3. Customer business data
Customer, booking, payment, form, photo and treatment-record data created inside a customer's Eselram installation is intended to remain in infrastructure controlled by that customer business. The customer business is responsible for deciding why it collects that information, how long it keeps it and who may access it.
Where a business uses Eselram to process information about its clients, that business will normally be the controller of that client data. Eselram may act as a technology provider in relation to limited technical or support processing.
4. Google and Gmail data
If a business chooses to connect Gmail, Eselram requests the Gmail permission required to send email on the user's behalf (gmail.send).
Eselram uses this permission only to send messages that the business chooses or configures Eselram to send, such as booking confirmations, payment confirmations, reminders and other operational client communications.
- Eselram does not request permission to read the user's Gmail inbox.
- Google OAuth credentials are intended to be stored encrypted inside the customer's own Eselram installation database.
- The Eselram OAuth service handles authorisation information as needed to complete and maintain the connection.
- Eselram does not sell Google user data or use it for advertising, profiling or unrelated purposes.
5. Other email providers
If a business chooses Resend or another supported email provider, Eselram uses the credentials supplied or created for that business only to provide the email-sending features requested by that business. Provider credentials are intended to be stored securely in the customer's installation.
6. Why we use information
We use information where necessary to provide and secure Eselram, complete requested installations and integrations, provide support, maintain the service, prevent misuse, comply with legal obligations and improve reliability. Depending on the circumstances, the applicable lawful basis may include performance of a contract, legitimate interests, consent or compliance with a legal obligation.
7. Third-party services
Eselram may connect to services chosen by the customer, including Google, GitHub, Cloudflare, Stripe and Resend. Those providers process information under their own terms and privacy notices.
8. Sharing information
We do not sell personal information. We may share limited information with service providers where necessary to operate Eselram, provide support, protect the service, comply with law or complete a feature requested by the user.
9. International transfers
Some technology providers used by Eselram or by customer businesses may process information outside the United Kingdom. Where required, appropriate safeguards should be used for international transfers.
10. Retention
We keep information only for as long as reasonably necessary for the purpose for which it was collected, including to provide the service, meet contractual or support obligations, maintain security records and comply with legal requirements. Data stored in a customer-owned installation is controlled by that customer business and may follow its own retention policy.
11. Security
Eselram is designed to use secure connections and to protect sensitive integration credentials. No online service can guarantee absolute security, but reasonable technical and organisational measures are used to reduce the risk of unauthorised access, loss or misuse.
12. Your rights
Depending on applicable data-protection law and the circumstances, you may have rights including access, correction, deletion, restriction, objection and data portability. For data controlled directly by Eselram, contact [email protected]. If your request concerns information held by a business using Eselram, contact that business directly.
13. Complaints
If you are in the United Kingdom, you may also complain to the Information Commissioner's Office (ICO).
14. Children
Eselram is business software and is not directed at children. Businesses using Eselram are responsible for ensuring their own processing of client information is lawful and appropriate.
15. Changes
We may update this Privacy Policy when Eselram, applicable law or third-party integrations change. The latest version will be published here with its updated date.
16. Contact
Email: [email protected]