Who we are

SessionPro is operated by Convine Web Solutions (ABN 70 760 467 581). We provide session scheduling, check-in, and membership management software for venues including skate parks and indoor recreation facilities.

If you have questions about this policy, contact us at support@convinewebsolutions.com.

Data we collect

We collect data in two categories:

Merchant data — information about the Shopify store that installs SessionPro, including the store domain, access tokens required to use the Shopify API, store timezone, and branding settings (name, logo, colours, reply email).

Customer data — information about the venue's end customers, collected through the SessionPro booking portal. This includes:

• Name and email address
• Date of birth (where required for age verification)
• Booking history and session attendance records
• Membership status and subscription details
• Signed waivers and consent records
• A unique QR token used for check-in
• Shopify customer ID (where the customer has a Shopify account at the same store)

How we use this data

• To operate the booking portal and allow customers to book sessions
• To manage check-in at the venue using QR codes
• To manage memberships and recurring subscriptions via Shopify
• To send booking confirmation and transactional emails via AWS SES
• To store signed waivers on behalf of the merchant via AWS S3
• To sync product and pricing data with the merchant's Shopify store

We do not sell customer data. We do not use customer data for advertising.

Data storage and security

Data is stored in a PostgreSQL database hosted on Railway (United States). Waiver documents are stored in AWS S3 (ap-southeast-2 region). Email is sent via AWS SES.

We use encryption in transit (TLS) for all data transfers. Access to production systems is restricted to authorised personnel.

Third-party services

• Shopify — the platform that hosts the merchant's store. Shopify's own privacy policy applies to data processed through their platform.
• Railway — database and application hosting.
• Amazon Web Services (AWS) — file storage (S3) and email delivery (SES).

GDPR compliance

SessionPro complies with Shopify's mandatory GDPR webhook requirements:

• Customer data requests — we log and process requests to export a customer's data.
• Customer data erasure — when Shopify sends a redact request, we permanently delete the customer's records from our database.
• Shop data erasure — approximately 48 hours after a merchant uninstalls the app, we permanently delete all data associated with their shop.

Data retention

Merchant and customer data is retained while the app is installed. When a merchant uninstalls SessionPro, all associated data is deleted within 48 hours of receiving Shopify's shop/redact webhook.

Merchants may request earlier deletion by contacting us at support@convinewebsolutions.com.

Your rights

If you are a customer of a venue that uses SessionPro, your rights in relation to your personal data are exercised through that venue. You may contact the venue directly or contact us at support@convinewebsolutions.com and we will direct your request appropriately.

Changes to this policy

We may update this policy from time to time. The date at the top of this page reflects when it was last changed. Continued use of SessionPro after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions or requests: support@convinewebsolutions.com