Trust Center

Name: RandevuAI
Rating: 4.8 (150 reviews)
Author: RandevuAI

Our commitments to your security, privacy and data

Availability Target

99.5%

Monthly availability target

At most ~3.6 hours of downtime per month

24/7

Automated error monitoring

Errors are recorded and reported automatically

<200 ms

API response time target

For standard requests

* These are performance targets, not guaranteed SLA commitments. Actual availability may vary with infrastructure conditions.

Security Measures

Encrypted in transit and at rest

All traffic is encrypted with HTTPS/TLS; data stored with our database provider is encrypted. Passwords are hashed with bcrypt and never stored in plain text.

Separation between businesses

Every query can only reach the data of the signed-in business; the business ID is never taken from the browser. IDs sent by the browser, such as customer, service, staff or branch, are also checked to belong to that business before anything is read or saved. Automated tests guard these rules, and they have been tried live with two separate test businesses.

Abuse protection

Rate limiting and CSRF protection on API endpoints; DDoS protection at the hosting layer.

Infrastructure in the EU

The application and database run in Frankfurt (EU). Every service partner that processes personal data is listed below with its location.

Privacy & Compliance

KVKK

Processing under Turkey’s Personal Data Protection Law No. 6698; privacy notice and request form published.

GDPR / DSGVO

Processing under the principles of the EU General Data Protection Regulation: data minimisation, consent, access and erasure rights.

Sub-processors

The following service partners may process your data as part of our service:

Provider	Purpose	Location
Neon (PostgreSQL)	Database hosting	European Union
Vercel	Application hosting, serverless functions and file storage (Frankfurt); public static content is delivered worldwide	European Union
Resend	Email notifications	United States — Northern Virginia
Paddle	Subscription billing (as merchant of record)	United Kingdom / EU
iyzico	Booking payments (if the business enables online payment) (only when this feature is used)	Türkiye
Twilio	SMS, voice and WhatsApp notifications (only when this feature is used)	United States — Northern Virginia
NetGSM	SMS notifications within Türkiye (only when this feature is used)	Türkiye
Google (Gemini)	AI features — a business may use its own provider and API key instead (only when this feature is used)	global infrastructure — region not guaranteed
Google Takvim	Calendar sync — only if a staff member connects their own calendar (only when this feature is used)	global infrastructure — region not guaranteed
Sentry	Error monitoring (only when this feature is used)	European Union
Upstash	Rate limiting and caching (only when this feature is used)	United States — Northern Virginia
PostHog	Product analytics — only with your explicit consent (only when this feature is used)	United States — Northern Virginia

Shared Responsibility

RandevuAI

Platform security & infrastructure
Encryption in transit and at rest
Separation of data between businesses
Error monitoring & security updates
KVKK/GDPR-compliant data processing

Business Owner

Protecting account credentials
Customer consent for SMS/email
Accuracy of business information
Access permissions of staff accounts
Compliance with local regulations

Security Questions?

For security vulnerability reports or data protection inquiries:

info@randevuai.net