Simplify BookingSimplify Booking

Privacy Policy

Last updated: February 8, 2026

1. Introduction

Welcome to Simplify Booking ("we", "our", or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our scheduling and booking platform.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and profile picture when you sign in with Google OAuth.
  • Booking Information: Booking types, availability schedules, and calendar preferences you configure.
  • Guest Information: Names and email addresses provided by guests when they book appointments.
  • Workspace Data: Workspace names, descriptions, and member information for collaborative features.

2.2 Information Collected Automatically

  • Usage Data: Pages visited, features used, and interaction patterns.
  • Device Information: Browser type, operating system, and device identifiers.
  • Log Data: IP addresses, access times, and referring URLs.

2.3 Third-Party Information

  • Google Calendar: Calendar event data accessed through the Google Calendar API to check availability and create booking events.
  • Google OAuth: Authentication tokens and profile information from Google.

3. How We Use Your Information

We use the collected information to:

  • Provide, maintain, and improve our booking services.
  • Process and manage bookings between you and your guests.
  • Integrate with Google Calendar to display availability and create events.
  • Facilitate workspace collaboration among team members.
  • Send booking confirmations, reminders, and service-related notifications.
  • Deliver webhook notifications to configured endpoints.
  • Analyze usage patterns to improve user experience.
  • Ensure security and prevent fraud.

4. Data Storage and Security

Your data is stored securely using Firebase Firestore with encryption at rest and in transit. We implement industry-standard security measures including:

  • HTTPS encryption for all data transmission.
  • Secure, httpOnly session cookies with limited duration.
  • Server-side authentication verification for all protected operations.
  • HMAC-SHA256 signature verification for webhook deliveries.
  • Role-based access controls within workspaces.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data in the following circumstances:

  • With Workspace Members: Booking and availability data is shared within your workspace based on role permissions.
  • With Guests: Your name, availability, and booking details are shared with guests who book appointments.
  • Service Providers: We use Google Cloud Platform (Firebase) for infrastructure and Google Calendar API for calendar integration.
  • Webhook Endpoints: Booking event data is sent to webhook URLs you configure.
  • Legal Requirements: When required by law, regulation, or legal process.

6. Google API Services

Simplify Booking's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only access Google Calendar data necessary to provide scheduling functionality.

7. Your Rights

You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate personal data.
  • Deletion: Request deletion of your account and associated data.
  • Portability: Request your data in a structured, machine-readable format.
  • Revoke Access: Disconnect Google Calendar integration at any time from your dashboard.
  • Opt-Out: Unsubscribe from non-essential communications.

8. Cookies and Session Management

We use httpOnly session cookies to maintain your authenticated session. These cookies are essential for the service to function and cannot be disabled. Sessions expire after 2 hours and are automatically refreshed when 15 minutes remain.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Workspace invitations expire automatically after 7 days. You may request deletion of your account and data at any time by contacting us.

10. Children's Privacy

Simplify Booking is not intended for use by individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

See also our Terms of Service.