Privacy Policy

1. Information we collect

We collect the data you provide when using Bookiest to run your appointment scheduling business:

• Account information: your name, email address, and authentication credentials when you sign up or log in.
• Business data: your organization name, public slug, services, staff, availability windows, branding, and logo uploads.
• Customer and appointment data: names, contact details, appointment times, and notes that you or your customers enter into the booking flow.
• Usage data: basic log and diagnostic information to help us keep the service running securely and reliably.

2. How we use your data

We use the information we collect to provide and improve Bookiest:

• Operate the scheduling service and display your public booking page.
• Send service-related communications, such as booking confirmations or account alerts.
• Maintain security, fix bugs, and develop new features.

3. Data sharing

We do not sell your data or your customers' data. We share information only with trusted service providers who help us run Bookiest:

• Supabase: hosts our database, authentication, and storage infrastructure.
• Google: used only when you choose to sign in with Google.
• Stripe: our payment processor. When you subscribe to a paid plan, Stripe handles your billing information and payment method details. Bookiest never stores full card numbers — Stripe stores and processes them under their own privacy terms at stripe.com/privacy.
• Lovable Email: delivers our booking confirmations, reminders and notifications from notify.bookiest.app. It processes the recipient's email address and the message content.

Google Calendar data

If a business connects a staff member's Google Calendar, Bookiest reads only free/busy times from the calendars that person chooses, plus the names of their calendars so they can pick them. We do not read event titles, descriptions, attendees or locations.

If the business turns it on, Bookiest writes its own bookings to one calendar the person chooses, and updates or deletes those events when a booking is rescheduled or cancelled. Event details contain the service and customer name, and the customer's phone and email only if the business enables that.

Busy times are cached for up to the booking window and replaced on each sync. Google access is held by our connection provider; Bookiest stores only an encrypted reference to it. Disconnecting in Bookiest (Calendar section) revokes access and deletes this data. You can also remove Bookiest at myaccount.google.com/permissions.

Bookiest's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google data for advertising, do not sell it, and do not use it to train AI models.

4. Data retention

We keep your data for as long as your account is active. If you delete your account, we remove your personal data and business records from active systems within a reasonable time, except where we must retain information to comply with legal obligations or resolve disputes.

5. Your rights

You can access, update, or delete most of your data directly from your admin dashboard. To request a full export or deletion of your account, contact us at the email below. We will respond within a reasonable timeframe.

6. Cookies and tracking

Bookiest uses only basic session cookies to keep you signed in while you use the app. We do not use advertising or cross-site tracking cookies.

7. Contact us

Questions about this policy? Email us at support@bookiest.app.