Privacy Policy
1. What we collect
We collect account information (name, email, business details) and booking data (services, availability, client bookings) needed to operate the platform. When you sign up, we also record how you found us, such as the campaign or link you arrived from.
2. How we use it
We use this data to provide the booking platform, send transactional emails such as booking confirmations and reminders, and process payments. With your consent, we also measure how our website is used and whether our advertising works (see Cookies).
3. Data isolation
Each business's data is isolated at the database level using row-level security — other tenants cannot access your data.
4. Third-party processors
We use trusted third parties to operate the service: Stripe for payments, Supabase for database and authentication, Resend for transactional email, Sentry for error monitoring, and OpenAI for the AI features (see section 5). If someone at a business connects Google Calendar, FullCal. copies their bookings into a calendar it creates in their own Google account: the time, service, client's name, location and booking notes, never the client's email or phone number. With your consent, Google receives website analytics (Google Analytics) and ad conversion measurement (Google Ads). Each processes only the data necessary for their function.
5. AI features
Some features use AI to save businesses time: importing a price list, writing service descriptions, the business coach, drafts of campaigns, social posts and review replies, review summaries, client briefs, tidying and dictating client notes, and the assistant on a business's booking page. For these, only the text, image or recording the feature needs is sent to OpenAI, which processes it on our behalf. OpenAI does not use it to train its models, and may keep it for up to 30 days to detect abuse before deleting it. Dictated recordings are turned into text and not kept. At clinics, client notes are used only after the clinic switches this on. The booking-page assistant says that it is an AI; visitors' messages are used only to answer them, and FullCal. does not keep the conversation. The business reviews AI drafts before anything is sent or published.
6. Marketing emails from businesses
A business can email offers to clients who have booked with it before. Each email comes from the business and has an unsubscribe link; unsubscribing stops that business's offers straight away. Clients can also tick the box on the booking form to say they don't want offers. Booking confirmations and reminders are not marketing and are still sent.
7. Your rights
You can access, export, or request deletion of your account data at any time by contacting us.
8. Cookies
We use essential cookies for sign-in, security and remembering your cookie choice. With your consent, we also use Google Analytics cookies to understand how our website is used, and Google Ads conversion measurement to learn whether our ads lead to sign-ups. We never use cookies for ad personalisation or remarketing, and none of these run on the booking pages your clients visit. You can change your choice at any time from "Cookie settings" at the bottom of our website.
9. Changes to this policy
We may update this policy from time to time; material changes will be communicated to account owners.
10. Contact
Questions about this policy? Contact us at hello@fullcal.app.