Privacy Policy
Last updated: June 2026
BookZync ("we", "us", or "our") operates the website and AI automation services provided to service businesses — dental clinics, medical practices, salons, and gyms. This Privacy Policy explains how we collect, use, and protect your information.
Information we collect
When you visit our website or interact with our AI agents, we may collect:
- Personal details: name, email address, phone number, and business name when you submit a form.
- Usage data: chat conversations with our AI assistant, standard server logs (IP address and browser type), and — where analytics are enabled — how visitors use our site (see Cookies & analytics below).
- Lead and booking data: information your customers share with the AI to request an appointment (name, contact, requested time, intent).
How we use your information
We use the collected information to:
- Provide, operate, and maintain our website and AI services.
- Communicate with you regarding demos, pricing, and support.
- Improve our AI models and website functionality.
- Send booking confirmations and lead notifications to your team.
HIPAA & sensitive customer data
BookZync is building tools designed to meet healthcare-privacy rules such as HIPAA (US) and their equivalents in other countries, but we are not HIPAA-certified yet. We are transparent about this on our medical and dental industry pages.
As a visitor browsing our main website, any information you submit via our contact forms or public AI chatbot is treated as standard B2B communication. Do not submit Protected Health Information (PHI) through our public-facing website.
Our AI is explicitly instructed never to collect diagnoses, symptoms, or medical history from your customers. Only name, contact, intent, and requested time are stored.
Third-party services
We use a small set of third-party services to run BookZync: an AI processing provider, Paddle as our payments provider and merchant of record (you will see Paddle at checkout and on your card statement), an SMS delivery provider, cloud hosting providers, and analytics tools (such as Google Analytics, where enabled). These third parties have access to your Personal Information only to perform tasks on our behalf and are obligated not to disclose or use it for any other purpose.
Business customers: our Data Processing Agreement and the current sub-processor list describe how we handle your customers' data as your processor.
Cookies & analytics
We keep tracking to a minimum. We may use analytics tools such as Google Analytics to understand how visitors use our site (pages visited, approximate location, device type) so we can improve it. Where your local law requires it, we will ask for your consent before setting analytics or advertising cookies.
Beyond that, the only browser storage this website uses is a sign-in token if you log in to the affiliate portal. The customer dashboard is a separate application and uses only the storage needed to keep you signed in.
Data retention
Chat logs and lead data are retained for as long as your subscription is active. On cancellation, we retain data for 30 days for export, then delete unless legally required to keep it longer (e.g., for tax records).
Your rights
You have the right to:
- Access the personal information we hold about you.
- Request correction or deletion of your data.
- Export your customer lead and booking history at any time.
- Object to or restrict certain processing of your data.
Email [email protected] to exercise any of these rights.
Contact us
If you have any questions about this Privacy Policy, please contact us at [email protected].