Booking Companion
Privacy Policy
Last updated: April 20, 2026
What we collect
Booking Companion is a platform that lets independent service providers (operators) accept appointment requests from their clients. We collect:
- From operators: name, email address, phone number, business name, password (hashed), and the appointment data they enter into the system (services, hours, clients, appointments).
- From clients who book through an operator's public booking page: name, phone number, optional email address, and any notes they provide along with their booking request. Operators may also attach photos of their own work on a client (for example a colour result or a nail set). These are stored privately, shown only to that operator, and removed 30 days after the client record is deleted.
- Technical data: IP address at time of booking submission, browser user-agent, and timestamps, used for abuse prevention and rate limiting.
How we use it
- To provide booking functionality: storing appointment data, sending booking confirmations, reminders, and other transactional notifications by SMS and email.
- To authenticate operators (sign-in magic links).
- To prevent abuse: short-lived storage of IP addresses and Turnstile challenges.
SMS messaging
By submitting a booking request through an operator's public booking page, clients consent to receive SMS messages related to that appointment: a confirmation when the operator approves it, optional reminders before the appointment, and any rescheduling or cancellation notices. Operators consent to receive SMS notifications when new booking requests arrive and to receive sign-in magic links.
Reply STOP to opt out of further messages. Reply HELP for help. Message and data rates may apply. We do not use SMS for marketing.
Sharing
We do not sell personal information. We do not share your information with third parties for their marketing purposes. We use the following service providers strictly to operate the platform:
- Twilio — to deliver SMS messages.
- SendGrid / Mailgun — to deliver email messages.
- Cloudflare — for DNS, CDN, and bot protection (Turnstile).
- Fly.io — for application hosting and database storage.
- AWS S3 — for encrypted database backups.
We may disclose information if required by law or to protect the rights, safety, or property of Booking Companion, our users, or others.
Retention
We retain operator account data for as long as the account is active. We retain client booking data for as long as the operator's account is active or as needed to provide ongoing service. Operators may request deletion of specific client records. Account holders may request full deletion at any time by contacting support.
Security
Passwords are hashed with bcrypt. Database backups are encrypted at rest in S3. SMS and email transit is encrypted via the underlying providers. We do not store payment information; payments between operators and their clients are handled outside the platform.
Your rights
You may request a copy of, correction of, or deletion of any personal information we hold about you by emailing the address below. For SMS opt-out, reply STOP to any message.
Children
Booking Companion is not directed to children under 13 and we do not knowingly collect information from them.
Changes
We may update this policy. The "Last updated" date at the top reflects the most recent change. Material changes will be communicated to active operators by email.
Contact
Questions: trivgar@gmail.com