Privacy Policy
Last updated: 2026
Data we collect
Studio owners: name, studio name, email, timezone, billing data (via Stripe). Customers: name, contact (phone or email), and booking details (service, date, time).
Purpose & legal basis
We process this data to manage bookings, send reminders, and handle billing. Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
Third parties
- Clerk (authentication) — clerk.com/privacy
- Stripe (payment processing) — stripe.com/privacy
- Neon (database hosting) — neon.tech/privacy
- Vercel (hosting) — vercel.com/legal/privacy-policy
- Upstash (rate limiting) — upstash.com
Retention
Appointment data is kept for up to 2 years and is deleted upon account deletion.
Your rights
You have the right to access, rectify, erase, and port your data. To exercise these rights, use our data deletion form or contact the email listed there.
Cookies
We use session cookies provided by Clerk for authentication. We do not use tracking or advertising cookies.