Privacy Policy

1. Roles: Platform vs. Business Owners

Business Owners use the Service to accept bookings from their Customers. In many cases, Business Owners are the “data controllers” (or equivalent) for booking/intake information they collect. Diamond Booking acts as a service provider/processor for that data to operate the Service.

2. Information We Collect

• Account information: name, email, password (stored hashed), role, and account settings.
• Business information: business name, slug, contact details, services, availability, and branding.
• Booking and intake data: appointment details, selected services/add-ons, answers to intake questions, and notes provided by Customers.
• Communications: messages sent to support and system-generated transactional notifications.
• Technical data: IP address, device/browser details, logs, and usage analytics necessary to secure and operate the Service.

3. How We Use Information

• Provide, maintain, and secure the Service (including authentication, scheduling, and pricing calculations).
• Process subscriptions and billing for the platform.
• Send transactional messages (booking confirmations, reminders, password resets), based on your configuration.
• Monitor for fraud, abuse, and security threats; enforce platform policies.
• Improve performance and usability; debug errors; develop new features.

4. Payments

Platform subscription payments are processed by Stripe. If you connect your own payment account (e.g., Stripe Connect), Customer booking payments may be processed in your payment processor environment and are subject to that provider’s terms and privacy practices. We do not store full payment card numbers.

5. Cookies and Similar Technologies

We use cookies and similar technologies for authentication, security, and core functionality. You may be able to control cookies through your browser settings, but disabling them may prevent the Service from working properly.

6. Sharing and Disclosure

We may share information with:

• Service providers that help us run the Service (hosting, databases, email/SMS delivery, analytics, payment processing).
• Business Owners when Customers submit booking information to that business.
• Legal and safety where required to comply with law, protect rights, or prevent fraud/abuse.

We do not sell personal information in the traditional sense.

7. Data Retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. Business Owners can export or delete data as supported by the Service. Some logs may be retained for security and compliance purposes.

8. Security

We implement reasonable administrative, technical, and organizational safeguards to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights and Choices

• You may access, update, or correct certain account information in your dashboard.
• You may request deletion of your account, subject to legal and operational retention requirements.
• Customers should contact the relevant Business Owner for requests related to booking/intake data collected by that business.

10. Children

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction). Do not use the Service if you do not meet the minimum age requirement.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If changes are material, we will provide reasonable notice. Your continued use of the Service after changes become effective means you accept the updated policy.

12. Contact

For privacy questions or requests, contact support using the email address shown in your account or on our Contact page. For contractual terms, see our Terms of Service.