Privacy Policy

1. Who we are

appointments.page provides online appointment booking software to businesses ("workspaces"). This policy explains how we handle personal information about workspace users and staff, the people who book with them, and visitors to our website. For information a workspace collects about its own customers, the workspace decides how it is used and we process it on the workspace's behalf.

2. Information we collect

• Account information: name, email address, business details and sign-in credentials.
• Billing information: processed by our payment provider; we do not store full card numbers.
• Booking information: details entered by a workspace or by people booking with it, such as name, email, phone number and appointment details.
• Technical information: such as IP address, browser type and error data, used to operate and secure the Service.
• Connected calendars: if a staff member connects Google Calendar, the information described in section 5.

3. How we use information

We use information to provide and secure the Service; to schedule appointments and send related notifications by email or SMS; to process payments; to provide support; to improve the Service; and to comply with legal obligations.

If a business enables the AI booking assistant on its booking page, messages typed into it are processed by our AI service provider to generate replies. We do not sell personal information, use it for advertising, or use it to train AI models.

4. How we share information

We share information only:

• with service providers that help us operate the Service, under appropriate agreements;
• with third-party services a workspace chooses to connect, such as Google Calendar or Zoom, as needed to provide that integration;
• when required by law, or to protect our rights and users;
• as part of a merger or acquisition, with notice (for Google user data, see section 5).

Our current service providers and integrations are listed on our Sub-processors and Integrations page.

5. Google Calendar and Google user data

A staff member can connect their Google Calendar so that their appointments appear in it automatically.

• Permissions you grant: Google asks you to allow appointments.page to see, create, change and delete events on calendars you own, and to associate your Google account with appointments.page. This access continues until you disconnect the calendar or remove access in your Google Account.
• What we actually do: we only add, update and remove the events we create for your appointments in your primary calendar. We do not read, import or change any other events. Synchronization is one-way: changes made in Google Calendar do not change bookings.
• Account identification: we receive a unique identifier for your Google account. We do not receive or store your Google email address, profile or contacts.
• Information written to the calendar: appointment details, including the service, date and time, the customer's name and contact details (such as email and phone number) and any online-meeting link.
• Storage and protection: access credentials are stored encrypted and used only to keep these events up to date.
• Use and sharing: we use Google user data only to provide this calendar feature. We do not sell it, use it for advertising, or use it to develop, improve or train AI or machine-learning models. We transfer it only as needed to provide the feature, for security, to comply with law, or in a merger, acquisition or sale of assets with your prior consent. Our staff do not read it except with your permission, for security, to comply with law, or in aggregated form for internal operations.
• Disconnecting: when a calendar is disconnected, we delete its access credentials and ask Google to revoke our access, unless the same Google account is still connected for another staff member on appointments.page. Events already created remain in the calendar and can be deleted there. Access can also be removed at any time in the Google Account's security settings.

appointments.page's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

6. Retention and deletion

We keep information while an account is active and as needed to provide the Service. To request that an account be closed or that personal information be deleted, contact support@appointments.page. We will verify the request and respond as required by applicable law. Some information may be kept where we must retain it for legal, tax, billing, security or dispute-resolution purposes, and copies may remain in backups and in our service providers' records for a period, in line with their retention practices. If your information was provided by a business you booked with, we may refer your request to that business.

7. Security

We use industry-standard measures to protect information, including encryption in transit and encryption of connected-service credentials. No system is completely secure. Please report suspected vulnerabilities to support@appointments.page.

8. International processing

Our service providers may process information in Canada, the United States and other countries. Where required, we use appropriate safeguards.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete or obtain a copy of your personal information, or to object to certain processing. If your information was provided by a business you booked with, you may also contact that business. To make a request, email support@appointments.page.

10. Changes

We may update this policy. We will post the updated version on this page and notify users of material changes where required by law.

11. Contact

Privacy questions or requests: support@appointments.page.