Privacy Policy

1. information we collect

We collect information you provide directly to us, such as when you create an account, book a class, or contact us. This may include:

• Name and contact information
• Payment and billing information
• Class preferences and booking history
• Membership and credit wallet information
• Communication preferences

2. how we use your information

We use the information we collect to:

• Provide and maintain our services
• Process your bookings and payments
• Send you important updates and notifications
• Improve our services and user experience
• Comply with legal obligations

3. ChatGPT App and account linking

If you use the YogaSwiss ChatGPT App, you may link your YogaSwiss account so ChatGPT can help you find classes, view your bookings, check your active memberships and credits, create temporary booking holds, confirm eligible free or membership-covered bookings, manage waitlists, and cancel bookings when our policy allows.

The ChatGPT App uses short-lived access tokens and opaque booking, class, membership, and credit references instead of exposing internal database identifiers in the ChatGPT conversation. We do not send your payment card details to ChatGPT.

Payments, invoices, Stripe Checkout, and purchases of credits or memberships are completed only in the YogaSwiss portal or other YogaSwiss-controlled payment surfaces, not inside the ChatGPT App.

4. information sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• With your explicit consent
• To comply with legal requirements
• To protect our rights and safety
• With OpenAI when you invoke the YogaSwiss ChatGPT App, limited to the tool inputs and results needed to complete your request
• With infrastructure, authentication, and database providers that operate YogaSwiss services under contractual safeguards
• With payment processors only when you complete a purchase in a YogaSwiss-controlled payment surface

5. data security

We implement appropriate security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication
• Secure data storage and transmission

6. your rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Object to processing of your data
• Withdraw consent at any time

7. cookies and tracking

We use cookies and similar technologies to enhance your experience on our website. These technologies help us:

• Remember your preferences
• Analyze website usage
• Provide personalized content
• Improve our services

8. third party services

Our website may contain links to third-party services. We are not responsible for the privacy practices of these external services. We encourage you to review their privacy policies.

9. children's privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

10. international data transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards.

11. data retention

We keep account, membership, credit, and booking records while your account is active and for as long as needed to provide the service. Records required for accounting, tax, dispute, or fraud-prevention purposes may be kept for up to ten years. Other personal data is deleted or anonymized when it is no longer needed for the purpose for which it was collected, subject to legal holds.

For the ChatGPT App, OAuth authorization codes expire after ten minutes, access tokens after one hour, and refresh tokens after thirty days. Production diagnostic logs are designed to exclude access tokens, email addresses, and raw database identifiers and are retained for no longer than thirty days.

12. changes to this policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the last updated date.

13. contact us

If you have any questions about this privacy policy or our data practices, please contact us.