Privacy Policy

1. Who this policy covers

This policy covers data we process for two groups of people: business owners who sign up for NoShowSaver (you), and the clients who book appointments through your Calendly account. We refer to your clients throughout this document as "end clients."

2. What we collect from you

• Account data — your email address, password hash (handled by our authentication provider), workspace name, and account preferences.
• Calendly connection data — OAuth tokens scoped to the workspaces and event types you authorize. We do not read your Calendly inbox or contact list.
• Stripe connection data — the Stripe Connect account ID for your connected account and the webhook events Stripe sends us. We do not store full card numbers; Stripe holds the card.
• Billing data — your subscription tier, billing email, and the last four digits and brand of the card you pay NoShowSaver with.
• Configuration — the cancellation policy, fee amount, grace window, and SMS templates you set per event type.

3. What we collect about end clients

When an end client books on your Calendly account, we receive the booking metadata Calendly sends us — name, email, phone (if you collect it), event time, and any custom-question answers you have configured. We use this to place the authorization hold, send the SMS reminders you've enabled, and resolve disputes.

We do not sell end-client data. We do not enrich it, profile it, or share it with third parties beyond the payment and SMS providers explicitly involved in delivering the service you requested.

4. Subprocessors

The following services receive end-client data as part of normal operation:

• Stripe — payment processing and authorization holds.
• Twilio — SMS delivery.
• Calendly — booking source and webhook delivery.
• Vercel and Railway — hosting providers in the United States.
• An email provider for transactional email delivery.

5. Where data is stored

Postgres in the United States. Backups are encrypted at rest. We retain booking records for as long as your account is active, plus 24 months for dispute and accounting purposes.

6. HIPAA

NoShowSaver is not a HIPAA-covered service and does not sign Business Associate Agreements. If your appointments include protected health information, please do not connect them to NoShowSaver until we offer a covered tier.

7. Your rights

You can export or delete your workspace and the end-client records inside it at any time. Email support@noshowsaver.app and we will process the request within thirty days. End clients may request access or deletion of their records by contacting you, the controller of their booking data; we will support you in fulfilling those requests.

8. Cookies and tracking

The marketing site uses no third-party tracking cookies by default. If we enable analytics in the future, it will be a privacy-respecting analytics tool with no cross-site tracking, and we will update this policy.

9. Changes to this policy

If we make material changes we will notify account holders by email at least fourteen days before the change takes effect.

10. Contact

Privacy questions: support@noshowsaver.app.