Privacy Policy

1. Introduction

The Promethean, LLC ("Company," "we," "us," or "our") operates TheBookingApp.co ("Platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Platform.

By using the Platform, you consent to the data practices described in this Privacy Policy. If you do not agree with our policies, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide

We collect information you directly provide, including:

• Account Information: Name, email address, phone number, business name, and password when you register
• Business Information: Business address, services offered, pricing, team member details, and operating hours
• Customer Data: Names, contact information, appointment history, and preferences of your customers
• Payment Information: Billing address and payment card details (processed securely by Stripe)
• Communications: Messages, feedback, and support requests you send us

2.2 Information Collected Automatically

When you use the Platform, we automatically collect:

• Device Information: IP address, browser type, operating system, and device identifiers
• Usage Data: Pages visited, features used, click patterns, and time spent on the Platform
• Cookies and Tracking: Information collected through cookies, web beacons, and similar technologies
• Location Data: General geographic location based on IP address

2.3 Information from Third Parties

We may receive information from:

• Payment Processors: Transaction status and payment verification from Stripe
• Authentication Providers: Profile information if you sign in with third-party services
• Marketing Partners: Information to help us understand our audience

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Platform
• Process appointments, payments, and transactions
• Send appointment reminders, confirmations, and notifications
• Respond to your inquiries and provide customer support
• Send marketing communications (with your consent)
• Analyze usage patterns and optimize user experience
• Detect, prevent, and address fraud or security issues
• Comply with legal obligations
• Enforce our Terms of Service

4. How We Share Your Information

We may share your information in the following circumstances:

4.1 Service Providers

We share data with third-party service providers who assist in operating the Platform:

• Stripe, Inc.: Payment processing
• Twilio, Inc.: SMS notifications and communications
• Postmark: Email delivery services
• Supabase: Database and authentication infrastructure
• Vercel: Hosting and deployment services

4.2 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.3 Legal Requirements

We may disclose information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.4 With Your Consent

We may share information with third parties when you give us explicit consent to do so.

4.5 Business-Customer Data Sharing

Important: Businesses using our Platform have access to their customers' booking information. Each business is responsible for their own use of customer data in compliance with applicable laws.

5. Data Retention

We retain your information for as long as:

• Your account remains active
• Necessary to provide services to you
• Required by law or for legitimate business purposes
• Needed to resolve disputes or enforce agreements

After account deletion, we may retain certain information in anonymized form for analytics purposes or as required by law.

6. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication and access controls
• Regular security audits and monitoring
• Employee access restrictions on a need-to-know basis
• PCI-DSS compliant payment processing through Stripe

However, no method of transmission over the Internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Correction

You can access and update most of your account information through your account settings. Contact us for additional data access requests.

7.2 Data Deletion

You may request deletion of your personal data by contacting us. Note that we may retain certain information as required by law or for legitimate business purposes.

7.3 Marketing Communications

Marketing Opt-In: When you book an appointment with a business on our Platform, you may be given the option to receive marketing communications from that business. Your marketing preferences are stored and respected on a per-email basis.

How to Opt Out: You can opt out of marketing emails at any time by:

• Clicking the "unsubscribe" link in any marketing email
• Visiting our email preferences page at /unsubscribe
• Contacting the business directly to update your preferences

Transactional Communications: Please note that opting out of marketing emails does not affect transactional communications such as appointment confirmations, reminders, and cancellation notices. These are essential service communications that you will continue to receive.

7.4 Cookies

Most browsers allow you to refuse cookies or alert you when cookies are being sent. Note that disabling cookies may affect Platform functionality.

7.5 Do Not Track

We do not currently respond to "Do Not Track" browser signals as there is no industry standard for compliance.

8. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, and disclose
• Request deletion of your personal information
• Opt out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@thebookingapp.co. We will respond within 45 days.

9. International Data Transfers

Our Platform is hosted in the United States. If you access the Platform from outside the US, your information will be transferred to and processed in the US, where data protection laws may differ from your country.

By using the Platform, you consent to the transfer of your information to the United States.

10. Children's Privacy

The Platform is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected information from a child under 13, we will delete it promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last Updated" date. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy or our data practices, contact us at: