Privacy Policy

1. Introduction

Welcome to Unbound Booking ("we," "our," or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at unboundbookingapp.com (the "Platform").

By using our Platform, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

• Name
• Email address
• Phone number (optional)
• Account credentials (encrypted password)
• Profile information (optional)

2.2 Booking and Session Information

When you use our Platform, we collect:

• Appointment dates and times
• Services booked
• Session attendance records
• Payment transaction details
• Communication between trainers and clients

2.3 Payment Information

Payment processing is handled securely by Stripe. We do not store your complete credit card information. We receive limited payment information from Stripe, including:

• Last 4 digits of credit card
• Card brand (Visa, Mastercard, etc.)
• Transaction status and receipts

2.4 Google Calendar Integration

When you choose to connect your Google Calendar, we access and use the following information:

• Calendar Events: We create, read, update, and delete calendar events for your training sessions
• Event Details: Session name, date, time, and description
• Access Token: Encrypted OAuth tokens to maintain the connection

2.5 Automatically Collected Information

We automatically collect certain information when you use our Platform:

• Device information (browser type, operating system)
• IP address
• Usage data (pages visited, features used)
• Session logs and timestamps

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our Platform services
• Process bookings and manage appointments
• Send appointment reminders and notifications
• Sync appointments to your Google Calendar (if connected)
• Process payments through Stripe
• Communicate with you about your account and bookings
• Improve our Platform and user experience
• Prevent fraud and ensure Platform security
• Comply with legal obligations

4. Information Sharing and Disclosure

4.1 With Other Users

When you book a session, your name and contact information are shared with your trainer (or client, if you are a trainer).

4.2 With Service Providers

We share information with trusted third-party service providers:

• Stripe: Payment processing (PCI-DSS compliant)
• Google: Calendar syncing (when you connect your calendar)
• Resend: Email notifications
• Vercel: Platform hosting and infrastructure

4.3 Legal Requirements

We may disclose your information if required by law or to:

• Comply with legal obligations
• Protect our rights and property
• Prevent fraud or security issues
• Protect user safety

5. Data Security

We implement industry-standard security measures to protect your information:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted password storage
• Secure OAuth tokens for Google Calendar integration
• Regular security audits and updates
• Access controls and authentication

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your account information at any time through your account settings.

6.2 Google Calendar Disconnection

You can disconnect your Google Calendar at any time:

• Go to Settings and click Disconnect Google Calendar
• Or visit google.com/permissions to revoke access
• When disconnected, we immediately stop accessing your calendar
• Previously synced appointments remain in your calendar but will not be updated

6.3 Account Deletion

You can request account deletion by contacting support@unboundbookingapp.com. When you delete your account:

• Your personal information is permanently deleted
• Google Calendar access is revoked
• Booking history may be retained for legal/financial compliance
• Deletion is typically completed within 30 days

6.4 Marketing Communications

You can opt out of marketing emails by clicking "unsubscribe" in any marketing email. You will continue to receive essential account and booking notifications.

7. Data Retention

We retain your information for as long as necessary to provide our services:

• Account information: Until you delete your account
• Booking records: 7 years (for financial/tax compliance)
• Google Calendar tokens: Until you disconnect
• Usage logs: 90 days

8. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Platform after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: