Privacy Policy

Who We Are

In this policy, "Slothar", "we" and "us" mean the team that runs the Slothar sports ground management software. "You" means the ground owner, manager or staff member who uses Slothar, and "your customers" means the players who book slots at your ground.

Two different relationships run through this policy, and the distinction matters:

• For your account data — the details you give us to sign up and run your subscription — we decide how that data is used, so we are the data controller.
• For the data you put into Slothar about your players — bookings, phone numbers, payment records — you remain in control. We only process it to provide the service to you, acting on your instructions.

Information We Collect

Information you give us

• Account details — name, business name, email address, phone number and password.
• Ground setup — locations, grounds, zones, courts, sports, opening hours, time slots and prices.
• Staff accounts — names, contact details and role permissions for the team members you invite.
• Billing details — the plan you are on and your invoice history. Card and UPI details are entered directly with our payment provider; we never see or store full payment credentials.
• Support conversations — messages you send us over email, WhatsApp or in-app chat, including any attachments.

Information we collect automatically

• Usage data — which features you open, actions you take and the timestamps of those actions.
• Device and log data — IP address, browser type, operating system, device identifiers, referring pages and crash reports.
• Cookies and similar technologies — described in Cookies and Analytics below.

We do not collect biometric data, and we do not buy personal data about you from third-party data brokers.

Data You Collect From Your Customers

When you take a booking, you may record a player's name, phone number, booking history and payment status. That information belongs to your business. We store and process it so that Slothar can show you your calendar, your customer profiles and your day closing figures.

Specifically, we commit that:

• We do not sell your customers' data, and we do not share it with other grounds.
• We do not use your players' data to advertise to them or to market Slothar to them.
• We access it only when you ask us to — for example, when you raise a support request — or when we are legally required to.
• We may use combined, anonymous numbers that cannot identify any person or ground to improve the product.

You are responsible for collecting this data lawfully, for telling your players how their data will be used, and for obtaining consent where the law requires it. If a player asks you to correct or delete their data, you can do so from within Slothar, and we will help if you need us to.

How We Use Information

We use the information described above to:

• Provide the platform — bookings, availability, pricing, customers, payments, day closing, analytics, staff and multi-location management.
• Authenticate you and keep your account secure.
• Process subscription payments and send invoices and renewal notices.
• Provide support and respond to your questions.
• Diagnose faults, monitor performance and improve reliability.
• Send service messages about outages, security issues and changes to features or terms. These are operational, so you cannot opt out of them while you have an account.
• Send product news and offers, only where you have opted in. Every such message carries an unsubscribe link.
• Detect, investigate and prevent fraud, abuse and activity that breaches our terms.
• Comply with legal, tax and accounting obligations.

We do not make decisions producing legal or similarly significant effects about you using automated processing alone.

How We Share Information

We do not sell personal data. We share it only in these situations:

• Service providers — cloud hosting, database and backup providers, payment gateways, email and messaging providers, error monitoring and analytics tools. They may process data only on our instructions and under contract.
• Payment processors — when you pay for your Slothar subscription, the payment is handled by a regulated payment provider that works under its own privacy policy. We never see or store your full card or UPI details.
• Within your organisation — data in your account is visible to the staff accounts you create, according to the roles and permissions you assign.
• Legal reasons — where we must comply with a law, regulation, court order or valid government request, or to establish, exercise or defend legal claims.
• Safety — to protect the rights, property or safety of Slothar, our users or the public.
• Business transfers — if Slothar is involved in a merger, acquisition, financing or sale of assets, data may transfer as part of that transaction. We will notify you before your data becomes subject to a materially different privacy policy.

Cookies and Analytics

We use a small number of cookies and similar technologies:

• Essential cookies keep you signed in, remember your session and protect against cross-site request forgery. The platform cannot work without them.
• Preference cookies remember choices such as your selected location or theme.
• Analytics cookies help us understand which features are used so we can improve them.

Most browsers let you block or delete cookies through their settings. Blocking essential cookies will stop you from signing in. Where the law requires consent for non-essential cookies, we ask for it before setting them.

How Long We Keep Data

We keep personal data only as long as we need it for the purposes described in this policy. In practice that means:

• Account and ground data is kept while your account is active.
• After you close your account, we delete or anonymise your data within 90 days, except where we must keep it longer.
• Invoices and transaction records are retained for as long as tax and accounting law requires.
• Backups are held on a rolling schedule and are overwritten in the ordinary course.

You can ask us to delete your data sooner — see Your Rights and Choices.

How We Protect Data

We apply safeguards appropriate to the sensitivity of the data we hold, including:

• Encryption in transit using HTTPS/TLS.
• Encryption at rest for stored data and backups.
• Passwords stored as salted one-way hashes, never in readable form.
• Role-based access control, so staff accounts see only what their role allows.
• Optional two-factor authentication on accounts.
• Restricted internal access on a need-to-know basis, with logging.
• Regular backups and tested restore procedures.

No system is completely secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the relevant authority as required by law, without undue delay.

Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and request a copy.
• Correct data that is inaccurate or incomplete.
• Delete your personal data, subject to our legal retention obligations.
• Export your data in a portable, machine-readable format.
• Withdraw consent at any time, where we rely on consent.
• Object to or restrict certain processing.
• Nominate another person to exercise these rights on your behalf, where local law provides for it.
• Complain to your data protection authority.

To exercise any of these, email us at contact@slothar.com. We will verify your identity and respond within the period the law allows. These rights are free to exercise, though we may charge a reasonable fee for requests that are clearly unfounded or excessive.

If you are a player at a ground that uses Slothar and you want your data corrected or removed, please contact that ground directly — they control that record. We will help them action your request.

Users in India are protected by the Digital Personal Data Protection Act, 2023. Users in the European Economic Area and the United Kingdom have rights under the GDPR and UK GDPR.

International Transfers

Slothar is operated from India, and our hosting providers may store or process data in other countries. Where we transfer personal data across borders, we use appropriate safeguards — such as standard contractual clauses or transfers to jurisdictions recognised as providing adequate protection — so your data keeps an equivalent level of protection.

Children's Privacy

Slothar is a business tool and is not directed at children. We do not knowingly collect personal data directly from anyone under 18 for the purpose of creating an account.

Venues often host junior players, so a booking record you create may relate to a minor. You are responsible for handling that data lawfully, including obtaining verifiable parental consent where it is required. If you believe a child's data has reached us in error, contact us and we will delete it.

Changes to This Policy

We may update this policy as the product and the law evolve. When we do, we will revise the "Last updated" date at the top of this page. If the changes are significant, we will tell you by email or through a notice in the platform before they take effect. Continuing to use Slothar after a change takes effect means you accept the updated policy.

Contact Us

If you have a question about this policy, or about how your data is handled, we would rather hear from you than have you wonder.

Slothar is a registered trade name of Jignal Jitendrabhai Patel, a proprietorship registered in Gujarat, India. That is the entity responsible for the personal data described in this policy, and the one to address any request or complaint to.