Privacy Policy -- Bontro

1. Who We Are

Bontro ("we," "us," or "our") operates the booking platform available at bontro.co. We provide appointment scheduling software for independent service professionals and their clients. Questions about this policy can be directed to support@bontro.co.

2. Information We Collect

We collect information you provide directly:

Account information -- name, email address, and password when you create an account, or your Google profile if you sign in with Google.
Business information -- business name, address, phone number, and service details provided by professionals during onboarding.
Booking information -- name, email, phone number, and appointment notes provided when a client books an appointment.
Payment information -- we use Stripe to process payments. We do not store your full card number, CVV, or bank account details. We store only opaque references (payment method IDs) provided by Stripe.
Communications -- messages you send us via email or support channels.

We also collect information automatically:

Usage data -- pages visited, features used, and actions taken within the platform.
Device and browser information -- IP address, browser type, and operating system.
Cookies -- session cookies required for authentication, and analytics cookies to understand how the platform is used.

3. How We Use Your Information

To provide, operate, and maintain the Bontro platform.
To process bookings and payments on behalf of service professionals.
To send appointment confirmations, reminders, and cancellation notices via email and SMS (where you have opted in).
To send review requests following completed appointments.
To respond to support requests and troubleshoot issues.
To detect and prevent fraud and abuse.
To improve our platform through aggregate usage analysis.
To comply with legal obligations.

4. SMS Communications

We send SMS appointment reminders and confirmations only to clients who provide a phone number and consent to receive text messages at the time of booking. Message frequency varies based on your appointments. Standard message and data rates may apply.

You can opt out of SMS at any time by replying STOP to any message. For help, reply HELP. Opting out of SMS does not affect your ability to receive email notifications or use the platform.

5. How We Share Your Information

We do not sell your personal information. We share information only in these circumstances:

Between clients and professionals -- when a client books an appointment, their name, email, and phone are shared with the professional they booked with.
Service providers -- we share data with third-party services that help us operate the platform, including Stripe (payments), Resend (email), Twilio (SMS), Vercel (hosting), and Sentry (error monitoring). These providers process data only as necessary to provide their services.
Legal requirements -- we may disclose information if required by law, court order, or to protect the rights and safety of Bontro and its users.
Business transfers -- if Bontro is acquired or merged, your information may be transferred as part of that transaction.

6. Payment Security

All payment processing is handled by Stripe, a PCI-DSS-compliant payment processor. Card details are entered directly into Stripe's secure interface and never pass through or are stored on Bontro's servers. We store only tokenized references to payment methods provided by Stripe. For card-on-file bookings, your card is saved securely with Stripe for the purpose of no-show and late cancellation fees, with your consent at time of booking.

7. Data Retention

We retain your account information for as long as your account is active. Booking records are retained for business and tax purposes. If you delete your account, we will delete your personal information within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the right to:

Access the personal information we hold about you.
Correct inaccurate information.
Request deletion of your account and associated data.
Object to or restrict certain processing of your data.
Receive a copy of your data in a portable format.

To exercise any of these rights, contact us at support@bontro.co.

9. Cookies

Bontro uses cookies to maintain your login session and remember your preferences. We do not use third-party advertising cookies. You can configure your browser to refuse cookies, but this may prevent you from logging in or using certain features.

10. Children's Privacy

Bontro is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform. Your continued use of Bontro after changes take effect constitutes your acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us at support@bontro.co.