Privacy Policy

Information we collect

When you register on this website

• Contact and salon details: your name, email address, optional phone number, salon name and, if you give them, city or ZIP code, number of locations and team size.
• Business context (optional): the services you offer, the booking or point-of-sale software you use, and the challenges you want help with.

When you run your business on Appts

• Your account: the phone number or email address you sign in with and your name. Sign-in is handled by Google Firebase; we never see your password.
• Your business: its name, category, contact email and phone, locations and opening hours, services, prices and deposit rules, cancellation policy, photos, and your plan.
• Your team: each team member’s name, photo, bio, role, working hours and time off, and, if you add one, an email address for booking notices.
• Payments and payouts: you set up payouts with our payment processor, Stripe, on Stripe’s own pages. Stripe collects your identity, tax and bank details; we keep only your Stripe account’s status, what Stripe still needs from you, and the bank name and last four digits of where payouts go.
• Subscription: your plan, its price and any discount, and whether a card is on file. Stripe holds the card and the invoices.
• Card payments you take: for each payment, the amount, tip and refunds, and for Tap to Pay on iPhone the card brand, last four digits, the card’s application name and identifier, account type and authorization code. Card numbers go to Stripe and never reach us.
• Your clients: information you enter or import about your clients (see “Client information you control” below).
• Device and technical information: notification tokens for the devices you allow, security checks by Google Firebase App Check and reCAPTCHA Enterprise in the portal, and server logs with IP addresses. reCAPTCHA collects hardware and software information and sends it to Google; Google’s Privacy Policy and Terms of Service apply to it.

The business portal and the Appts: Business app contain no advertising or analytics tools, and we do not track you across other companies’ apps or websites.

Client information you control

When clients book with you through Appts, or when you add or import them, we store their names, contact details, appointments, purchases, payments and the notes and tags you add. You decide what to record and are responsible for having the right to record it, including any client lists you import. For this information we act as your service provider: we process it to run Appts for your business and as the law requires, and we don’t use it to market to your clients ourselves. Please don’t put sensitive health information in notes beyond what you need to serve the client. You can export your client list at any time.

Google Calendar sync and Google user data

A business owner can connect a Google account to Appts from the business portal or the Appts: Business app (Settings → Google Calendar). This section explains what Appts gets from Google and what we do with it.

What Appts accesses

• Your list of calendars (their names and identifiers), so you can choose which ones block time in Appts.
• Busy and free times from the calendars you choose. Google tells Appts only when you are busy. Appts never requests or receives event titles, descriptions, attendees, locations or attachments.
• Calendars Appts creates. Appts creates calendars named “Appts · {team member}” and “Appts · {location}” in your Google account, and adds, moves and deletes events in those calendars only. Appts cannot read or change any of your other calendars.
• Your connected account’s address, so we can show which Google account is connected.

How Appts uses it

• To stop clients booking times when you or a team member is busy in a calendar you chose.
• To show your Appts bookings in Google Calendar. Each event has the services, the client’s name and phone number, the booking’s confirmation code, any notes the client left, and a link to the booking in Appts.
• To tell you when a calendar can no longer be read, so you can reconnect it.

We use Google user data only to provide these features. We do not sell it, use it for advertising, or use it to develop or train AI or machine-learning models. No one at Appts reads it unless you ask us to, it is needed for security, or the law requires it.

Storage, sharing and deletion

• Your Google access credentials are stored encrypted.
• Busy times are stored only as start and end times with the calendar they came from, only from now until the furthest date clients can book you, and are deleted once they have passed.
• We do not share Google user data with anyone except the hosting providers that run Appts for us, as the law requires, or to a successor in a merger or acquisition, subject to this policy.
• When you disconnect in Appts, we revoke our access with Google and delete the credentials, calendar choices, busy times and event links we stored. The “Appts · …” calendars stay in your Google account for you to keep or delete.
• You can also remove Appts’ access at any time in your Google Account, under Security → Your connections to third-party apps & services.

Limited Use. Appts’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

• To register your interest and contact you about getting set up.
• To run Appts for your business: your listing, availability, bookings, waitlist, checkout, receipts, payouts, reports and notifications.
• To bill your plan, take your fees, and handle refunds and payment disputes.
• To send service messages about your account, bookings, payouts, plan and rate changes.
• To send occasional updates about Appts to people who registered on this site. You can unsubscribe at any time.
• To provide support, keep accounts secure, prevent fraud, and meet legal obligations.

How we share information

We do not sell personal information, and we do not share it for targeted advertising. We share it only with:

• Consumers: your public listing (business name, photos, services, prices, team members’ names and photos, hours and availability) is shown to people searching Appts, and clients see the details of their own bookings.
• Service providers that act for us: Stripe (payments, payouts, subscriptions, Tap to Pay), Google (Firebase sign-in, notifications and security checks; Maps Platform for addresses and time zones; Calendar when you connect it), Apple (Tap to Pay on iPhone and notifications), MailJet (email), Cloudinary (photos), Amazon Web Services (hosting and storage), Vercel (website hosting) and, for this site’s registration list, Klaviyo.
• Legal & safety recipients when required by law or to protect rights and safety.
• Business transfers, such as a merger or acquisition, subject to this policy.

Cookies & analytics

This website uses only strictly necessary storage plus optional, cookieless analytics. See our Cookie Notice for details. You can change your choice any time using Your Privacy Choices. The business portal uses your browser’s storage only to keep you signed in and remember your settings.

Data retention

• Registration details: until you unsubscribe or ask us to delete them.
• Your business account and its data: while your business uses Appts.
• Bookings, payments, payouts, invoices and tax records: afterwards for as long as tax, accounting, payment-network and dispute rules require.
• Google Calendar data: as described in the Google Calendar section above.
• Server logs: about 30 days. Database backups: about 7 days.

To close your business and have its data deleted, email privacy@appts.com. Records we must keep by law are kept for the period the law requires and then deleted. When a team member is removed, their access ends straight away.

Your US state privacy rights

Depending on where you live, US state privacy laws, including the California Consumer Privacy Act as amended by the CPRA and the comprehensive laws of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland and other states as they take effect, may give you the right to:

• Know and access the personal information we hold about you.
• Correct inaccurate personal information.
• Delete your personal information.
• Obtain a portable copy of your data.
• Opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell or share your personal information, but you may still exercise this right.
• Not receive discriminatory treatment for exercising your rights.

To exercise any of these rights, email privacy@appts.com. We will verify your request and respond within the timeframe required by your state’s law. You may use an authorized agent where permitted. If you are a client of a business on Appts and your request is about that business’s client records, we will pass it to the business, which decides on it.

“Do Not Sell or Share” & Global Privacy Control

Because we do not sell or share personal information for advertising, there is nothing to opt out of for that purpose. Even so, we honor browser-level Global Privacy Control (GPC) signals as an opt-out of any non-essential analytics on this site, and you can review or withdraw consent any time via Do Not Sell or Share My Personal Information.

Security

We use reasonable administrative, technical and physical safeguards, including encryption in transit, access controls by role, and encrypted storage for credentials such as Google access tokens. No method of transmission or storage is 100% secure, however.

Children’s privacy

Appts for Business is for adults running or working for a business. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.

Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, tell business owners by email or in the portal before they take effect.

Contact us

Questions or requests? Email privacy@appts.com, or write to us by mail:

• Mailing address: APPTS LLC, PO Box 1105, Charleston, SC 29401
• Los Angeles office: APPTS LLC, 1438 N Gower Street, Box #42, Hollywood, CA 90028