Delete your account

Anonymized payment records

We keep the amount, date, currency, invoice number and payment-processor reference for every charge and invoice, because tax and accounting law requires it. We remove your name, your email address and the link back to your login from those records. What stays on them is the transaction data, the description the business wrote on the charge, and a reference to the appointment it was for. One carve-out: if a recurring subscription on a charge could not be confirmed cancelled, that charge keeps its name and email so the subscription stays traceable and can still be stopped — it is anonymized once the subscription is confirmed dead. We keep these records for as long as tax and accounting law requires.

Your payment processor's own records

Payments run through Stripe. When you delete your account we also request deletion of your customer record at Stripe, which removes the stored identity and any saved payment methods. Stripe still keeps its own record of completed transactions under its retention obligations — that part is outside our control and is not deleted by this request.

Records held by the business you booked with (client accounts only)

If you are a client, the business you booked with keeps its own record of the work it did for you, the same as any other business you hire: the appointments you booked (including the name, email address and phone number you gave when booking), your contact record in its CRM, and the SMS conversation between you and it, including message bodies. Those are that business's own books — you gave it that information in the course of doing business with it — and for them the business is the independent data controller, with us holding them on its behalf. Deleting your account does not remove them, and we will not delete a business's records at a client's request. To ask for their removal, contact that business directly. SMS threads and messages are pruned automatically 12 months after the last message.

Documents paired with a client and a business (both account types)

Every document is paired with one client account and one business at the moment it is created, and that pair never changes. A file a client uploads while a business's booking link is loaded in their Booking tab is paired with that business; a file that business uploads to the client, and the invoice PDFs the system files there, are paired with it too. A file a client uploads with no booking link loaded is paired with no business at all: nobody but the client can see it, and it stays that way until they load their next booking link, which claims it — the first link loaded after the upload, and no later one. Loading a different business's link changes nothing that already exists: earlier documents keep the business they were filed under, the new business never sees them, and only what is created or claimed under its link is its own. A business keeps access to the documents paired with it permanently: moving to another business neither takes them from the first nor hands them to the new one. The client always sees all of their own. Either paired side can delete a document, and that removes it — and the copy stored in Google Cloud Storage — for both; a business that is not the paired one cannot see it, lock it or delete it at all. A business can lock a document so the client cannot delete it (invoice PDFs are always locked), and can still delete a locked file itself. Nothing is destroyed automatically until both accounts are gone. If you are a client, deleting your account leaves each paired document with its business: it stays in that business's records and on your contact in its CRM, where it can still read it and remove it but can no longer add to it — while a document paired with no business goes with your account. If you are a business owner, deleting your account destroys the documents paired with you whose clients' own accounts are already deleted, and leaves the rest with the clients they are paired with. Whichever of you deletes second takes the file with it. We will not delete a business's copy at a client's request; contact that business directly.

Referral records

If you took part in the referral program, the referral row is kept because it also carries the other person's credit. Your side of it is closed out so nothing further is awarded on it. It holds no name and no email address — only account identifiers and the referral code.

Backups

We hold encrypted backups. Our database is backed up once every 24 hours and each backup is kept for 8 days, so deleted data is gone from every backup within 8 days of your deletion. Backups are never restored into the live system.

Do-not-text records

If a phone number replied STOP, we keep that suppression record so we never text it again — deleting an account does not remove it. It holds no name, no email and no account link. Booking again does not clear it; the only way to resume messages is to text START to the same number.