Privacy Policy

BookingHub is an online appointment booking platform operated by BookingHub Inc. in Montreal, Quebec, Canada. You can reach us at contact@bookinghub.ca. Our website is https://bookinghub.ca.

We collect only what we need to run a booking platform that works for you.

• Personal account information: name, email address, phone number (optional), and preferred language.
• Booking information: the appointments you make, the services you select, and the intake form responses you submit before an appointment.
• Business information (for business accounts only): business name, address, description, photos, team member profiles, services, and availability schedules.
• Calendar data (only if a business owner connects Google Calendar): we read event start times, end times, and each event's busy/free status, so we block only the time you are actually busy. If a business owner turns on the optional show-event-details setting, we also read each event's title to display it on that owner's own private calendar view. We do not read event descriptions, attendee lists, or any other event content.
• Usage data: which pages you visit and which features you use, so we can keep improving the service.
• Rewards and points data: when you earn or redeem rewards points through BookingHub, we store your points balance and transaction history scoped to each individual business you book with. Points earned at one business are kept separate from points earned at another.
• Newsletter and communications: if you sign up to receive updates through our careers page or other forms, we store your email address and the date you subscribed. You can unsubscribe at any time using the link in any email we send.
• Payment information: if you pay for a BookingHub business plan or add-on, your payment is processed by Stripe. We do not store your full card number or banking details. Stripe handles all payment data under their own privacy policy and PCI DSS compliance.
• Website analytics: when you visit our public pages we record the page path, the date and time, a coarse device type (mobile, tablet or desktop), and the country your request came from. If you arrived from an ad or a link, we also record the campaign details in that link (the utm_source, utm_medium, utm_campaign, utm_content and utm_term values) and the website you came from. This tells us which ads bring people to BookingHub. We do not record your IP address, your name, or the full address of the page you came from.

• To run the booking platform and process the appointments you make.
• To send you booking confirmations, reminders, and cancellation notices by email and SMS.
• To display a team member's availability to the people booking with them.
• To make the platform better based on how people use it.

We do not sell your personal information. Ever.

When you connect your Google Calendar to BookingHub:

• We request read-only access (the calendar.readonly scope).
• We read event start times, end times, and busy/free status to identify when you are unavailable. If you enable the optional show-event-details setting, we also read event titles to show them on your own private business calendar.
• We use this data only to block off your BookingHub availability during those times.
• We do not store your Google Calendar event descriptions, attendees, or any other event content. Event titles are stored only when you turn on the optional show-event-details setting, are shown only to you on your private business calendar, and are never shown to your clients or shared with any third party.
• We do not share your calendar data with any third party.
• You can disconnect Google Calendar at any time from your BookingHub settings, and we will stop reading your calendar immediately.

This use of Google Calendar data complies with the Google API Services User Data Policy, including the Limited Use requirements.

BookingHub's administrative team may access your business account to provide technical support when you request it. Any such access session is logged, and you will receive an email summary of any changes made during that session. We access your account only when you request help or when it is necessary to maintain the platform. We do not access your client data for any purpose other than providing you with support.

• Your data is stored on Supabase infrastructure hosted in Canada (the ca-central-1 region).
• We use encryption in transit (HTTPS / TLS) and at rest.
• Access to personal data is restricted to authorized personnel only.
• We keep booking data for as long as your account is active, plus a reasonable period for legal and business purposes.

• You have the right to access the personal information we hold about you.
• You have the right to correct any inaccurate information.
• You have the right to ask us to delete your personal information.
• You have the right to withdraw consent for data processing at any time.

To exercise any of these rights, write to us at contact@bookinghub.ca with the subject line "Privacy Request". We respond within 30 days.

We use three kinds of first-party cookies, all set by bookinghub.ca and never shared with anyone else. We do not use third-party advertising or cross-site tracking cookies.

Essential cookies keep you signed in and remember your preferences. These are required for the site to work.

A session cookie (bh_sess) lasts 30 minutes from your last activity. It holds a random session identifier and, if you arrived from an ad, the campaign details from that link. This lets us count visits and see which ads lead to signups. It contains nothing that identifies you personally, and it is deleted when the session ends.

An analytics cookie (bh_vid) is OFF unless you turn it on. It holds a random identifier that lasts 90 days so we can tell whether a visit on one day is the same browser as a visit on another. Because it persists, we treat it as personal information under Quebec Law 25 and it is deactivated by default. You can manage your cookie preferences at any time from the link in the footer of any page, and turning this cookie off deletes it immediately.

When you create a business account or join our waitlist, we save the campaign details from your session onto that record, so we know which ad brought you to us. This is part of your customer relationship with us and is kept with your account.

We use these services to operate BookingHub:

• Supabase: database and authentication, hosted in Canada.
• Resend: transactional email delivery.
• Twilio: SMS notifications.
• Vercel: application hosting.
• Google OAuth: optional sign-in.
• Stripe: payment processing for business plan subscriptions. Stripe is PCI DSS compliant and handles all payment card data directly.

Each service has its own privacy policy that governs how it handles data.

BookingHub is not intended for use by anyone under the age of 14. We do not knowingly collect personal information from children.

We may update this policy from time to time. We will notify registered users of material changes by email. The effective date at the top of this page always reflects the most recent version.

Questions about privacy? Reach out: