Privacy Policy

Last updated: August 8, 2025

AppointPro ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our appointment scheduling service, including our website, mobile applications, and related services (collectively, the "Service").

1. Information We Collect

1.1 Information You Provide to Us

• Account Information: Name, email address, phone number, business name, and password when you create an account.
• Profile Information: Business description, services offered, pricing, availability, and location information.
• Appointment Information: Customer names, contact details, appointment times, service selections, and notes.
• Payment Information: Payment card details, billing address, and transaction history (processed securely through Stripe and PayPal).
• Communications: Messages, feedback, and correspondence you send to us.
• SMS Consent: When you provide your phone number and consent to receive SMS messages, we collect and store your consent preferences and mobile phone number.

1.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, appointment booking patterns, and interaction with the Service.
• Device Information: IP address, browser type, operating system, device identifiers, and mobile device information.
• Location Data: Approximate location based on IP address and, with your consent, precise location for location-based services.
• Cookies and Tracking: We use cookies and similar technologies to maintain sessions, remember preferences, and analyze usage.

1.3 Information from Third-Party Services

• Google Calendar: Calendar events (appointments only) and availability status when you connect your Google account.
• Payment Processors: Transaction confirmations and payment status from Stripe and PayPal.
• Google Maps: Location data and travel time calculations for appointment scheduling.

2. How We Use Your Information

We use the collected information for the following purposes:

• Provide, maintain, and improve our Service
• Process appointments and facilitate scheduling between service providers and customers
• Process payments and send transaction receipts
• Send appointment reminders, confirmations, and updates via email and SMS
• Send SMS notifications about appointment delays, safety check-ins, and emergencies (with your consent)
• Respond to your requests, comments, and questions
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations and enforce our terms
• With your consent, send marketing communications about features and services

3. How We Share Your Information

We share your information in the following circumstances:

3.1 With Your Consent

We share information when you explicitly authorize us to do so, such as when you connect third-party services.

3.2 Between Users

• Service providers see customer information necessary for appointments
• Customers see provider business information and availability

3.3 With Service Providers

We work with third-party companies that help us provide our Service:

• Supabase: Database hosting and authentication
• Stripe & PayPal: Payment processing
• Resend: Email notifications
• Twilio: SMS messaging and notifications
• Google: Maps API and Calendar integration
• Vercel: Website hosting

3.4 For Legal Reasons

We may disclose information if required by law, court order, or to protect rights, property, or safety.

4. Google User Data Usage

When you connect your Google account to AppointPro, we access and use Google user data as follows:

4.1 Google Calendar Data

• What we access: Calendar events only (create, read, update, delete) and free/busy availability status
• What we DON'T access: Calendar settings, calendar lists, or access to create/delete calendars
• How we use it: To sync your appointments, prevent double-booking, and check your availability
• How we store it: Event IDs are stored for syncing; availability is checked in real-time and not stored
• Sharing: Your calendar data is never shared with third parties or other users

4.2 Our Commitments for Google Data

• We only request the minimum Google Calendar permissions necessary
• We never sell, rent, or share your Google data
• We don't use Google data for advertising or marketing
• You can disconnect your Google account at any time from your settings
• Upon disconnection, we delete all cached Google Calendar data

4.3 Google Maps Services

• What we use: Google Maps API for geocoding addresses and calculating travel times
• Data processed: Service addresses and customer locations (with consent)
• Purpose: To provide accurate travel time estimates and prevent impossible scheduling
• Storage: Location coordinates are stored to optimize repeated calculations

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption of data in transit using TLS/SSL
• Secure authentication with encrypted passwords
• Regular security audits and updates
• Access controls and employee training
• PCI compliance through certified payment processors

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information through your dashboard settings.

6.2 Delete Your Account

You may delete your account by contacting us. We will delete or anonymize your personal information, except as required for legal compliance.

6.3 Opt-Out

• Marketing Emails: Unsubscribe using the link in any marketing email
• Cookies: Adjust your browser settings to refuse cookies
• Location Services: Disable location permissions in your device settings

6.4 Data Portability

You may request a copy of your data in a structured, machine-readable format.

7. Data Retention

We retain your information for as long as necessary to provide our Service and comply with legal obligations:

• Account information: Until account deletion
• Appointment records: 7 years for tax and legal compliance
• Payment records: As required by financial regulations
• Marketing data: Until you opt-out

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in compliance with applicable laws.

9. Children's Privacy

Our Service is not intended for children under 16. We do not knowingly collect information from children under 16. If you believe we have collected such information, please contact us immediately.

10. California Privacy Rights

California residents have additional rights under the CCPA, including the right to:

• Know what personal information we collect and how it's used
• Request deletion of personal information
• Opt-out of the sale of personal information (we do not sell personal information)
• Non-discrimination for exercising privacy rights

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us: