Privacy Policy

1. Introduction

BookFlow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our salon booking software service.

2. Information We Collect

We collect information you provide directly to us, including:

• Account information (name, email address, password)
• Salon information (salon name, address, staff details)
• Client data you store in our system (names, contact details, appointment history)
• Payment information (processed securely via Stripe)
• Usage data and analytics

3. How We Use Your Information

We use the information we collect to:

• Provide and maintain our service
• Process appointments and send reminders
• Send SMS and email notifications on your behalf
• Process payments and manage billing
• Improve our service and develop new features
• Communicate with you about your account and our service
• Provide customer support

4. Third-Party Services

We use the following third-party services to operate BookFlow:

• Stripe - for secure payment processing
• Twilio - for SMS appointment reminders
• Plausible Analytics - for privacy-friendly website analytics
• Resend - for transactional emails

5. Data Retention

We retain your data for as long as your account is active or as needed to provide you services. If you close your account, we will delete or anonymise your data within 90 days, except where we are required to retain it for legal or regulatory purposes.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to processing of your data

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data is encrypted in transit and at rest.

8. Australian Privacy Act Compliance

We comply with the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth). If you believe we have breached the APPs, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC).

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.