Slot Recovery is an app for Wix site owners. The site owner determines why visitors join a waitlist and is responsible for the visitor notice and lawful consent. We process the minimum data needed to provide opening alerts on the site owner's instructions. Wix processes data separately under its own terms and privacy notices.
Data processed
- Authenticated Wix app, site, service, resource, slot, booking, and Wix contact identifiers.
- Waitlist availability windows, consent timestamp and policy version, withdrawal state, and expiry.
- Cancellation, offer, delivery, attribution, payment, attendance, failure, and deletion workflow facts.
- Billing entitlement, integration readiness, security digests, timestamps, bounded rate-limit facts, and pseudonymous audit records.
A waitlist email address is read transiently from Wix Contacts only when registering or sending an offer. It is not displayed in the Slot Recovery dashboard and is not intentionally persisted in Slot Recovery storage or logs. Free-text customer notes and uploaded customer files are not accepted.
Purposes and lawful use
Data is used only to authenticate the installed app, administer consented waitlist entries, evaluate a cancelled appointment, send an opening offer, attribute a resulting booking, verify paid-and-attended outcomes, prevent duplicate or unsafe processing, provide support, and meet security or legal obligations. The site owner must select and document the applicable legal basis, including consent where required.
Service providers and transfers
Wix supplies app context, Bookings and Contacts data, billing state, and the customer-facing site. Cloudflare supplies Workers, Durable Objects, logs, and email delivery. These providers may process data in other countries under their contractual transfer mechanisms. We do not sell customer data or create advertising profiles.
Retention and deletion
Operational waitlist and recovery data is deleted after withdrawal, expiry, uninstall, or confirmed tenant deletion according to the documented workflow. Consent and withdrawal audit records retain only irreversible pseudonyms, timestamp, policy version, and event kind for 24 months. Backup or residual copies have a policy target to age out within 30 days and must not restore deleted personal data into the active service.
A Wix site owner can start deletion in the authenticated dashboard by entering DELETE SLOT RECOVERY DATA and completing the second confirmation. Access, correction, and deletion requests have a target of completion within 30 days after appropriate identity verification. A narrowly scoped record may be retained longer where legally required.
Security
The service verifies signed Wix context, isolates each Wix app instance, bounds requests and responses, uses expiring single-purpose tokens, avoids raw customer data in logs, and fails closed when required configuration or entitlement is unknown. No internet service is perfectly secure.
Contact and changes
Privacy and support requests can be sent to contact@kurodalab.com. Material changes will be dated and published before they take effect. A site owner must update the waitlist consent policy version when the visitor-facing purpose or notice materially changes.