1. Who we are
Metis Cloud is a software-as-a-service platform for small businesses and self-employed professionals. It provides tools for customer management, appointments, sales, receipts, invoices, reporting and related business communications.
For privacy enquiries, contact us through the contact details published at metiscloud.live.
2. Our role under data protection law
When a business uses Metis Cloud to store or manage information about its own customers, that business will generally determine why and how that customer data is used. In those circumstances, the business is generally the data controller and Metis Cloud acts as a service provider or processor on its behalf.
Metis Cloud may also act as a controller for information relating directly to Metis Cloud account holders, website visitors, billing contacts, support communications and the operation and security of the service.
3. Information we may process
- Account information such as names, email addresses, business details and user roles.
- Customer contact details such as names, email addresses and telephone numbers.
- Appointment details, calendar events, appointment status and confirmation information.
- Sales, receipts, invoices, refunds, payment status and related transaction records.
- Catalog, service and product information.
- Messages and communication preferences, including appointment email or SMS notifications.
- Technical and security information such as logs, authentication events and diagnostic information.
- Information imported through integrations a user chooses to connect, such as Google Calendar.
4. How we use personal data
- Provide, maintain and secure Metis Cloud.
- Create and administer user accounts and business workspaces.
- Store and display customer, appointment, sales and invoice records.
- Send transactional communications requested by a business, including appointment confirmations and reminders.
- Operate integrations selected by the user.
- Provide support, investigate errors and improve service reliability.
- Prevent fraud, misuse, security incidents and unauthorized access.
- Comply with applicable legal and regulatory obligations.
5. SMS and email communications
Metis Cloud may enable businesses to send transactional appointment communications to customers by email or SMS, including appointment confirmations, reminders and status information.
Businesses using Metis Cloud are responsible for ensuring that they have an appropriate lawful basis, permission or consent where required before sending messages to their customers. Metis Cloud may retain information about message delivery, recipient preferences and consent records where these features are used.
Mobile numbers, SMS consent records and messaging data are not sold or shared with third parties for unrelated advertising or third-party marketing.
6. Service providers and subprocessors
We may use third-party service providers to operate Metis Cloud, including cloud hosting, email delivery, SMS delivery, authentication, calendar integrations, payment technology and technical monitoring providers.
For example, SMS messages may be delivered through Twilio, and Google services may be used when a user chooses to connect Google Calendar. Payment providers may process payment-related information when a merchant activates a compatible payment integration.
7. Payment information
Where Metis Cloud connects to third-party payment providers or card terminals, payment processing may be performed by those providers. Metis Cloud does not intend to store full card numbers or card security codes unless explicitly required and lawfully supported by a specific payment integration.
8. Legal bases
Where Metis Cloud acts as a controller and the GDPR applies, processing may be based on one or more lawful bases, including performance of a contract, compliance with legal obligations, legitimate interests and consent where applicable.
9. Data retention
Personal data is retained only for as long as reasonably necessary to provide the service, meet contractual or legal requirements, resolve disputes, maintain security and enforce agreements.
Businesses using Metis Cloud remain responsible for determining appropriate retention periods for the customer data they control, subject to applicable law.
10. International data transfers
Some service providers may process data outside the country in which the user or customer is located. Where required by applicable data protection law, appropriate safeguards will be used for international transfers.
11. Security
We use reasonable technical and organizational measures intended to protect personal data against unauthorized access, loss, alteration or disclosure. No internet-based service can guarantee absolute security.
12. Your data protection rights
Where applicable, individuals may have rights to access, correct, erase, restrict or object to certain processing, receive a copy of certain data, and withdraw consent where processing is based on consent.
If your information is held in Metis Cloud by a business you deal with, you should normally contact that business first because it may be the controller responsible for your information.
13. Complaints
Individuals may have the right to lodge a complaint with the competent data protection supervisory authority. In Cyprus, this is the Office of the Commissioner for Personal Data Protection.
14. Children
Metis Cloud is intended for business and professional use and is not directed to children as account holders. Businesses using Metis Cloud are responsible for ensuring that any personal data they enter is collected and processed lawfully.
15. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will be published on the Metis Cloud website with an updated revision date.
16. Contact
Questions about this Privacy Policy or privacy rights can be submitted through metiscloud.live.