01Who we are
Diamond Booking (“Diamond,” “we,” “us”) provides booking, scheduling, and business management software for home service companies. This policy explains what personal data we collect, why we collect it, and the choices you have. It covers our marketing website, the Diamond Booking application, and the embeddable booking widget.
Two kinds of people interact with Diamond: account holders (business owners, office staff, and technicians who sign in) and end customers (people who book services from a business that uses Diamond). We treat their data differently, as described below.
02Data we collect
Account data. When a business signs up we collect the business name, your name, email address, password (stored only as a salted hash), industry, and team member profiles you create.
Booking data. Appointments, services, notes, schedules, invoices, and related records that businesses create in the normal course of using the platform.
Payment data. Card and bank details are collected and stored by our payment processor, Stripe — they never touch Diamond’s servers. We store only non-sensitive references (such as the last four digits and payment status).
Usage data. Log data, device and browser type, and in-product events that help us keep the service reliable and improve it. We do not sell this data or use it for third-party advertising.
03Your customers' data
When an end customer books through a business on Diamond, the booking details (name, contact information, service address, appointment history) belong to that business. Diamond processes this data as a service provider / data processor on the business’s instructions. We never contact a business’s customers for our own marketing, and we never sell customer lists.
Businesses on Diamond are responsible for having a lawful basis to collect their customers’ data and for honoring deletion requests, which the platform supports directly.
04How we use data
We use data to operate the service (scheduling, reminders, payments, dispatch), to secure accounts and prevent fraud and abuse, to provide support, to send transactional messages (confirmations, reminders, receipts), and — for account holders only, with opt-out — occasional product updates. We do not use your data to train third-party AI models or serve behavioral advertising.
05Sub-processors
We rely on a short list of infrastructure providers to run Diamond: Supabase (database and authentication), Stripe (payments), Resend (transactional email), and our cloud hosting provider. Each is bound by a data processing agreement and processes data only on our instructions. A current list is available on request at legal@diamondbooking.com.
06Retention & export
Your data stays in your account for as long as the account is active. After cancellation, data remains exportable for 90 days, then is deleted from production systems within 30 further days (backups age out on a rolling schedule of up to 35 days). You can export customers, bookings, and invoices as CSV at any time — no support ticket required.
07Security
All traffic is encrypted in transit (TLS 1.2+) and data is encrypted at rest. Access to production systems is restricted, logged, and reviewed. Every account is isolated at the database layer with row-level security. If we ever become aware of a breach affecting your data, we will notify you without undue delay and within any legally required window.
08Your rights
Depending on where you live (including under GDPR and CCPA/CPRA), you may have the right to access, correct, export, restrict, or delete your personal data, and to object to certain processing. Account holders can exercise most of these directly in the product; for anything else, email us and we will respond within 30 days. We do not discriminate against anyone for exercising a privacy right.
10Children
Diamond Booking is a business tool and is not directed at children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.
11Changes to this policy
If we make material changes, we will notify account holders by email at least 14 days before they take effect and update the date at the top of this page. Minor clarifications may be posted without notice.
12Contact
Privacy questions or requests: legal@diamondbooking.com. General support: support@diamondbooking.com.