Privacy & Data Protection

Privacy Policy

Last updated: September 2026. Please read this policy carefully to understand how your information is handled.

Bookingor is a scheduling platform created, owned, and operated by The Creative Next ("Company," "we," "us," or "our"). The Creative Next provides the Bookingor platform, website (bookingor.com), booking pages, and related scheduling services ("Platform," "Website," or "Services"). This Privacy Policy explains what information we collect, how we process it, and how we protect your records.

1. Information Collection

Bookingor, operated by The Creative Next, collects certain types of information to provide reliable online scheduling, facilitate client bookings, synchronize availability, and deliver customer support:

Account & Registration Details: When you create an account, register your organization, or purchase a subscription plan on bookingor.com, we collect details such as your name, business name, work email address, telephone number, business address, timezone, and login credentials.

Business & Service Configuration: Details you enter into your dashboard to configure your booking pages, including service titles, descriptions, pricing, duration, staff members, working hours, break schedules, booking buffers, custom intake forms, and business locations.

Client Booking Data: When clients schedule a session or service through your public Bookingor booking link, we collect the details requested on the booking form, such as client name, email address, phone number, booked time slot, location choice, and any custom intake question responses or notes.

Billing & Transaction Records: When you pay for a Bookingor subscription or collect client booking fees through integrated gateways, transaction records (such as invoice history, plan tier, and transaction identifiers) are logged. Sensitive payment card numbers are processed directly by certified payment gateways (such as Stripe or PayPal) and are never stored on Bookingor servers.

2. Automatically Collected Information

Platform Usage Data: We automatically record metrics about how you and your clients interact with the platform, such as feature usage, booking volume, page visits, referrers, navigation paths, response latency, and system error diagnostics to ensure optimal platform performance.

Device & Network Information: Network logs, IP addresses, browser types, operating systems, and device identifiers are collected automatically to safeguard platform security, detect unauthorized access, and ensure responsive display across screens.

Cookies & Browser Storage: We use essential session cookies and local storage tokens to maintain your login status, remember dashboard preferences, preserve timezone selections, and protect against cross-site request forgery.

3. Third-Party Integrations

Bookingor connects with external service providers to deliver specific scheduling capabilities:

External Calendar Synchronization: When you link an external calendar provider (such as Google Calendar or Microsoft Outlook), Bookingor accesses your calendar events solely to identify busy time slots, prevent double-bookings, and add confirmed client bookings to your schedule. We never inspect your personal meeting notes or sell your calendar records.

Geolocation & Timezone Detection: Bookingor queries secure IP lookup services (such as https://ipinfo.io) to detect the visitor's country and timezone. This guarantees that booking calendars automatically convert time slots into the client's local timezone for smooth cross-border scheduling.

International Phone Formatting: The platform integrates telephone formatting tools to validate international phone numbers, ensuring dependable delivery of SMS and text messaging booking confirmations and schedule reminders.

Payment Processors: When payment features are enabled, transactions are handled through certified PCI-DSS compliant payment providers (including Stripe and PayPal). Your financial credentials remain encrypted with the respective payment processor.

4. Google API Services User Data Policy, Data Usage & Limited Use Disclosure

Bookingor provides optional integrations with Google services to power appointment scheduling, video conferencing, and business reputation management. Our integrations utilize the following Google API scopes:

  • https://www.googleapis.com/auth/calendar & https://www.googleapis.com/auth/calendar.events – Google Calendar API (view, edit, share, and manage calendar events and availability).
  • https://www.googleapis.com/auth/business.manage – Google Business Profile API (view business accounts, verified locations, customer reviews, and ratings).
  • openid, profile, email – Google Sign-In & OpenID Connect (verify account ownership, email address, and basic profile details).
  • Google Meet API – Create unique video conference meeting spaces and video call links directly inside confirmed appointments.

4.1 Data Collection: Google User Profile, Calendar & Account Information Collected

When you connect your Google Account with Bookingor, our application collects only the specific categories of user information necessary to provide scheduling and calendar features:

  • Google User Profiles & Account Information: Your primary email address, full display name, profile avatar photo URL, and unique Google account identifier (Google user ID) to verify account ownership and link Google services to your Bookingor profile.
  • Google Calendar Data: List of accessible calendars, primary calendar ID, scheduled event titles/summaries, start and end dates/times, event status, attendee names/emails, and real-time free/busy busy availability blocks.
  • Google Meet Conference Information: Unique video conference IDs, meeting access links, and conference passcode details generated automatically for confirmed virtual appointments.
  • Google Business Profile Data: Connected business location IDs, verified location names, physical addresses, published customer reviews, star ratings, reviewer display names, review timestamps, and business owner responses.

4.2 Data Usage: Exactly How Bookingor Uses Google User Data to Manage Booking Schedules

Bookingor uses information received from Google APIs strictly to deliver and improve appointment booking and calendar synchronization features for your business:

  • Managing Booking Schedules & Eliminating Double Bookings: Bookingor reads your Google Calendar busy/free time blocks in real time to calculate open appointment slots on your public booking page, preventing schedule overlaps and double-bookings.
  • Inserting Confirmed Bookings into Google Calendar: When a client books an appointment through your public Bookingor link, Bookingor automatically writes the confirmed booking directly to your Google Calendar, including meeting location, client name, contact details, and custom booking notes.
  • Synchronizing Reschedules & Cancellations: When an appointment is rescheduled or canceled in Bookingor, our application updates or removes the corresponding Google Calendar event automatically in real time.
  • Generating Google Meet Video Links: For appointments scheduled as virtual meetings, Bookingor automatically generates secure Google Meet conference links and includes them in client confirmation emails and calendar invites.
  • Syncing Verified Google Reviews: Bookingor syncs your Google Business Profile reviews to showcase social proof and client ratings on your public booking page.
  • Authentication via Google Sign-In: Allowing you to quickly and securely log in to your Bookingor dashboard using your Google credentials without separate password management.

4.3 Data Storage & Deletion: Retention Periods & User Account Deletion Requests

You maintain complete ownership and control over your Google data at all times:

  • Data Retention Duration: Google OAuth access tokens, refresh tokens, and integration settings are retained only for the duration that your Google account remains actively connected to Bookingor. Real-time availability checks are processed ephemerally in memory and cached for a maximum of 15 minutes before being discarded.
  • User Account & Data Deletion Requests: You can request the complete and permanent deletion of your account and all associated user data at any time by emailing our Data Protection & Support Team at support@bookingor.com or privacy@bookingor.com. Upon receiving your request, your account, booking records, and all stored Google tokens and profile data will be permanently and irreversibly purged from our production databases within 24 hours.

4.4 De-Authorization & Revoking Google Access: Step-by-Step Instructions

You have the right and ability to revoke Bookingor's access to your Google account at any time. You can de-authorize access using either of the following methods:

Method 1: Revoke Access via Your Google Account Settings (Recommended)

You can directly disconnect Bookingor from your Google Account at any time via Google's account security portal:

  1. Visit your Google Account Third-Party Apps & Permissions portal at: https://myaccount.google.com/permissions.
  2. Locate and click on Bookingor under the "Third-party apps with account access" list.
  3. Click Remove Access (or "Delete all connections that you have with Bookingor") and confirm.
  4. Google will immediately invalidate all OAuth tokens issued to Bookingor, and no further calendar or account data can be accessed.
Method 2: Disconnect from Within Your Bookingor Dashboard
  1. Log in to your Bookingor account at https://bookingor.com.
  2. Navigate to Dashboard > Settings > Integrations > Google Calendar (or Google Meet / Google Reviews).
  3. Click the red Disconnect button. This action immediately deletes all stored Google OAuth access tokens, refresh tokens, and calendar associations from our production database.

4.5 Google API Limited Use Compliance Statement

Bookingor's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy , including the Limited Use requirements .

This policy applies to all Google user data accessed by Bookingor through Google Calendar API, Google Meet API, Google Business Profile API, and Google Sign-In.

4.6 Data Sharing Limits: Strict Prohibition on Selling, Sharing, or Transferring Google User Data

We maintain strict restrictions on the disclosure and sharing of Google user data:

  • No Sale of Google User Data: Bookingor does NOT sell, rent, monetize, trade, or lease any Google user data, user profile information, or calendar records to data brokers, advertisers, or any third party under any circumstances.
  • No Advertising or Marketing Profiling: Google user data is NEVER shared with, transferred to, or used by advertising platforms or marketing networks for serving ads, including personalized, targeted, retargeted, or interest-based advertising.
  • No Transfers to Third-Party Tools: We do not transfer or disclose Google user data to external third-party software, applications, or data aggregators, except solely as strictly necessary to fulfill the user-directed scheduling actions within our platform or to comply with valid legal processes.
  • No Artificial Intelligence (AI) or Machine Learning (ML) Training: Google user data is NEVER used or transferred to develop, train, fine-tune, or improve generalized or specialized machine learning models or artificial intelligence systems (including LLMs).
  • Prohibition on Human Inspection: No humans are permitted to read or inspect your Google Calendar events or account records, unless you give explicit affirmative consent for a specific technical support issue, or as required for security investigations or by law.

4.7 Data Protection & Sensitive Storage Mechanisms

We employ enterprise-grade security controls to protect all Google user data:

  • Encryption in Transit: All data transmitted between Google APIs, our application servers, and user web browsers is encrypted using Transport Layer Security (TLS 1.2 / TLS 1.3) over HTTPS.
  • Encryption at Rest: All Google OAuth 2.0 access tokens, refresh tokens, and credentials are encrypted at rest using industry-standard AES-256 encryption algorithms before being committed to our secure database.
  • Access Controls & Governance: Access to database environments containing encrypted tokens is governed by strict principle-of-least-privilege role-based access control (RBAC), multi-factor authentication (MFA) for administrative staff, automated vulnerability monitoring, and continuous access logging.

5. How We Use Information

The Creative Next processes collected information solely for legitimate operational and business objectives, including:

• Providing, maintaining, and enhancing the Bookingor scheduling platform, booking pages, and management dashboard.

• Confirming, rescheduling, managing, and tracking client bookings, consultations, and reservations.

• Dispatching automated booking confirmations, calendar invites, reschedule alerts, and reminder messages via email, SMS, or direct messaging channels.

• Processing subscription billing, managing customer accounts, and authenticating user sessions.

• Delivering prompt customer support, troubleshooting technical issues, and responding to user inquiries.

• Monitoring network integrity, safeguarding against fraudulent activities, and maintaining system stability.

• Analyzing aggregated, non-identifying platform metrics that guide feature improvements and user experience refinements.

6. Legal Bases & Data Controller

The Creative Next acts as the data controller for personal information processed through Bookingor. Under international data protection frameworks (including the General Data Protection Regulation / GDPR), personal data is processed on the following lawful grounds:

Contractual Performance: Processing required to fulfill our Terms of Service, provide access to your account, and deliver requested scheduling services.

Legitimate Interests: Processing necessary to secure our platform, protect against malicious traffic, prevent fraud, and optimize service reliability.

Legal Obligations: Processing required to fulfill statutory tax, accounting, and regulatory compliance duties.

User Consent: Where you have explicitly granted permission, such as subscribing to optional product update newsletters, which you can withdraw at any moment.

7. Data Sharing & Disclosure

The Creative Next does not sell, rent, monetize, or trade your personal or business information. We disclose data solely in the following controlled circumstances:

Vetted Service Providers: We partner with trusted third-party providers who supply cloud hosting, database services, transactional email delivery, SMS gateways, payment handling, and customer support tooling under strict data security and confidentiality covenants.

Calendar Partners: When you configure calendar synchronization, booking details are transmitted directly to the calendar service you connected (such as Google or Microsoft).

Legal & Statutory Requirements: We may disclose records if required by valid court order, subpoena, or governing law, or when necessary to protect the safety, legal rights, and security of The Creative Next, Bookingor, our users, or the general public.

Business Restructuring: In the event of a merger, acquisition, financing, or sale of company assets, user data may be transferred as part of the business assets, strictly subject to the protections of this Privacy Policy.

8. Data Storage, Retention & Security

Security Safeguards: Bookingor implements robust administrative, technical, and physical security measures. All communications between your browser and our platform are encrypted using industry-standard 256-bit SSL/TLS encryption. Data stored in our databases is protected with encryption at rest, isolated tenant schemas, restricted role-based administrative access, and regular security reviews.

Data Retention Policy: We retain your account details, business settings, and booking history for the duration of your active account or as required to deliver our services, resolve disputes, maintain accurate financial books, and comply with governing legal mandates. When an account is terminated or a deletion request is completed, your data is securely purged or permanently anonymized.

9. Your Privacy Rights & Choices

Depending on your location and governing privacy legislation (including GDPR, UK GDPR, and CCPA/CPRA), you have rights concerning your personal information:

Access & Export: You may request a copy of your personal data and booking records in a structured, commonly used, machine-readable format.

Rectification: You can modify and update your account information, company settings, staff members, and service details directly through your Bookingor dashboard at any time.

Deletion: You have the right to request complete deletion of your account and personal records. To request account deletion, contact our privacy desk at support@bookingor.com. Please note that account deletion permanently removes your public booking links and historical booking logs.

Marketing Communications: You can opt out of promotional emails at any time via the unsubscribe link in the footer of any marketing message. Transactional service messages regarding your bookings and account security remain active.

10. Children’s Privacy

Bookingor is designed exclusively for businesses, service professionals, and adult clients. We do not knowingly collect or solicit personal information from individuals under 16 years of age (or under 13 where specified by local statute). If we learn that a minor has submitted personal information without verified parental consent, we will promptly delete the data from our systems.

11. Changes to This Privacy Policy

The Creative Next may update this Privacy Policy from time to time to reflect modifications in platform features, operational practices, or statutory standards. Any revisions will be published on this page with an updated revision date. We encourage you to review this page periodically to stay informed about our data protection commitments.

12. Contact Information & Company Details

If you have questions, feedback, or requests regarding this Privacy Policy or your personal data, please contact us:

• Company: The Creative Next

• Platform: Bookingor Scheduling Systems

• User Support Email: support@bookingor.com

• Website: https://bookingor.com