Privacy Policy

When you visit our website or interact with the BookZync AI assistant, we may collect:

• Personal information, including your name, email address, phone number, and business name when you submit a form.
• Usage data, including conversations with our AI assistant and standard server logs (such as IP address and browser type).
• Lead and booking data: information submitted through your website chat, such as a customer's name, contact details, requested appointment time, and the reason for their inquiry.

In summary, by category:

We use the information we collect to:

• Provide, operate, and maintain our website and AI services.
• Communicate with you regarding demos, pricing, and support.
• Improve our AI models and website functionality.
• Send booking confirmations and notify your team about new leads.

The Services generate responses using automated (AI) technologies. The following applies wherever the AI assistant is used:

• AI-generated responses may be inaccurate or incomplete. On every plan the AI books directly into the business's calendar, and the business is responsible for reviewing, changing or cancelling its bookings.
• The AI assistant does not provide medical, legal, financial, or other professional advice, and is designed to decline such requests and defer to the business's staff.
• The AI asks before retaining a visitor's details. Only a clear affirmative answer is treated as consent; a declined or unanswered request means the conversation is not retained, and any minimal booking record created without consent is deleted within 24 hours of the visit's completion.
• The AI recalls prior conversations only from records retained with consent.
• Customer and visitor data is not used to train third-party foundation models, per contractual commitments with our AI providers.
• No decision producing legal or similarly significant effects about you is made solely by automated means.

We protect stored records with layered security — encryption in transit and at rest, strict per-business (tenant) isolation, role-based access controls with two-factor authentication, and audit logging. Our Data Processing Agreement describes these measures in full.

We use a small set of third-party services to run BookZync: an AI processing provider, Paddle as our payments provider and merchant of record (you will see Paddle at checkout and on your card statement), an SMS delivery provider, and cloud hosting providers. These providers process personal information only as necessary to deliver services on our behalf and are obligated not to disclose or use it for any other purpose.

Business customers: our Data Processing Agreement and the current sub-processor list describe how we handle your customers' data as your processor.

BookZync stores and processes information on servers located in the United States, operated by the service providers listed in this policy. Personal Information processed outside Canada may become subject to the laws of the jurisdiction in which it is processed, including lawful access requests made by courts, law enforcement agencies, or other governmental authorities in accordance with applicable law. BookZync applies the safeguards described in this policy wherever the information is processed. Canadian businesses on eligible plans may request storage of their customer records in our Canadian database region. Availability depends on the selected service plan and technical feasibility.

This website runs no analytics, advertising or tracking tools. It serves its own fonts, and it loads nothing from other companies, except Paddle's checkout when you choose to pay.

Because nothing here tracks you, there is nothing for the Global Privacy Control or Do Not Track signals to switch off. If we ever add such a tool, we will update this page first and ask for your consent where the law requires it; Cookie settings, at the bottom of every page, always shows what this website runs.

Everything this website stores on your device:

Payments run on Paddle, our merchant of record. Paddle's checkout loads only on our checkout page, when you choose to pay, and uses the storage it needs to process and protect your payment, under Paddle's privacy notice.

The customer dashboard is a separate application and uses only the storage needed to keep you signed in.

Chat logs and lead data are retained for as long as your subscription is active. On cancellation, we retain data for 30 days for export, then delete it unless we are required to retain certain information longer to comply with legal obligations (e.g., tax records).

Conversations where the visitor declined to have their details saved are not retained; see "How we use AI" above.

You have the right to:

• Access the personal information we hold about you.
• Request correction or deletion of your data.
• Export your customer lead and booking history at any time.
• Object to or request restrictions on certain processing activities.

Email [email protected] (our Privacy Officer) to exercise any of these rights, or [email protected] for general questions. If you are not satisfied with our response, you may also contact the privacy regulator in your jurisdiction.

Our website and Services are intended for businesses and their adult customers. They are not directed to children, and we do not knowingly collect personal information from anyone under 13 years of age (or a higher minimum age where your local law sets one). Where an adult books an appointment on behalf of a minor, we store the booking contact's details, and the business receiving the booking remains responsible for any consents its own services require. If you believe a child has provided us personal information directly, contact [email protected] and we will delete it.

BookZync sends text messages to holders of a BookZync account — the business owners and staff who use our platform. These are one-time verification codes and account or security notifications. BookZync is the sender, every recipient has a direct account relationship with us, and we do not send these messages on behalf of third parties. They are service messages, not marketing.

• Consent: you receive texts only after you add your own mobile number under Settings > Verify phone and agree to receive them. Consent is stored against your account, and nobody can enrol your number on your behalf. Consent to receive texts is not a condition of any purchase.
• Message frequency varies, based on your own activity — such as signing in or verifying your number.
• Message and data rates may apply, depending on your mobile carrier and plan.
• You can opt out at any time by replying STOP to any message; you will receive a confirmation and no further texts. Reply HELP, or email [email protected], for help.
• Mobile carriers are not liable for delayed or undelivered messages.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

We do not sell your mobile phone number, SMS opt-in, or consent, and we do not share them with third parties for their own marketing purposes.

The full terms, including the exact consent notice we show you before any message is sent, are on our SMS Consent & Messaging Terms page.

When we make material changes to this policy, we will update the date at the top of this page and record the change here.

• October 21, 2026 — "Cookies and browser storage" rewritten: this website runs no analytics, advertising or tracking tools, every item it stores is listed, and a Cookie settings link is on every page.
• October 19, 2026 — This policy now covers the businesses BookZync serves today: salons, gyms, home-services businesses and restaurants.
• July 28, 2026 — Added the categories-of-data table, the "How we use AI" section, the cross-border storage disclosure, the children's privacy section, and this change log. Privacy rights requests now go to [email protected] (Privacy Officer).
• July 2026 — SMS / text messaging section expanded with the full consent and sharing disclosures.

For privacy questions, rights requests, or complaints, contact our Privacy Officer at [email protected]. For anything else about this Privacy Policy, you can also reach us at [email protected].