Privacy Policy

1. Information we collect

Information you give us:

• Account: your name, email address, optional phone number, and your password. We store only a scrambled (hashed) version of your password, never the password itself.
• Bookings: your name, address, phone number, email address, the service you want, your question or request, and the time you choose.
• Messages: what you send through our contact form, live chat or email.
• Purchases: what you bought, the amount, the date and your payment status. Card details are entered on Stripe's secure checkout page; we never see or store your full card number.
• Agreements: a record of when you accepted our Terms or subscription renewal terms, with the version accepted.

Information collected automatically:

• A login cookie (bdb_session) that keeps you signed in for up to 30 days. It's strictly necessary for your account to work and isn't used for tracking.
• Your shopping cart, which is saved in your own browser (not on our servers) until you check out or clear it.
• Your IP address and browser details, which we use briefly to prevent abuse (for example, limiting repeated login attempts) and which our hosting providers log for security and reliability.

We don't use analytics or advertising cookies, and we don't buy personal information about you from other companies.

2. How we use it

• To create and run your account and give you access to what you've bought or subscribed to.
• To schedule, confirm and hold consultations, and to add them to our business calendar.
• To process payments, subscriptions and refunds, and to keep required business and tax records.
• To answer your questions and provide the services you ask for.
• To send service emails, such as email confirmations, password resets, receipts, subscription confirmations and required reminders.
• To keep the site secure, prevent fraud and abuse, and fix problems.
• To comply with the law and enforce our Terms.

If we ever send marketing emails, we'll only do so in line with the law, and every one will include an unsubscribe link that we honor promptly.

3. Who we share it with

We share personal information only with service providers that help us run the business, under contracts that let them use it only to provide their services to us:

• Stripe: payments, subscriptions and the billing portal.
• Vercel: website hosting.
• Supabase: our database, hosted in the United States.
• Google: our business calendar, for bookings.
• Our email provider: to deliver the emails described above.
• Our live-chat provider: to deliver chat messages, if you use the chat. The chat widget may set its own cookies to keep your conversation going; see that provider's privacy policy.

We may also disclose information if the law requires it, to protect rights, safety and property, or as part of a merger or sale of the business (in which case this policy would continue to apply to your information). We don't share your information with credit bureaus.

4. How long we keep it

• Account information: while your account is open. If you ask us to delete your account, we'll delete or anonymize it within 30 days, except records we must keep.
• Purchase, payment and tax records: 7 years, as tax and accounting rules require.
• Records of what you agreed to: at least 3 years, or longer if the law requires.
• Bookings and messages: up to 3 years after your last contact with us, so we can follow up on your business.
• Login sessions: until they expire (30 days) or you log out. Abuse-prevention records: about a day.

5. How we protect it

We use encrypted connections (HTTPS) everywhere, store passwords only as strong one-way hashes, keep only scrambled versions of login and email-link tokens, limit repeated login attempts, restrict database access, and let a payment specialist (Stripe) handle card data. No system is perfectly secure, so please use a strong, unique password and tell us if you suspect a problem.

6. Your choices and rights

• You can see and update your details in My account, and manage payments and subscriptions from Manage billing.
• You can ask us for a copy of your personal information, to correct it, or to delete it. We'll respond within 30 days. We may need to confirm your identity first, and we may keep information the law requires us to keep.
• You can unsubscribe from any marketing email using the link in it. We'll still send service emails about your account and purchases.

Depending on where you live, you may have additional privacy rights under state law. Contact us to use them; we won't treat you differently for doing so.

7. Do Not Track and other sites

We don't track you across other websites, and we don't allow other companies to collect information about your browsing on our site for advertising. Because we don't do that kind of tracking, our site doesn't change its behavior in response to browser “Do Not Track” signals.

8. Children

Our site is for adults running or starting businesses. It isn't directed to children under 13, and you must be 18 or older to create an account. If we learn that we've collected information from a child under 13, we'll delete it.

9. California residents

This policy is intended to meet the California Online Privacy Protection Act. You can review and update your account information as described in section 6, and we announce changes as described in section 10.

10. Changes to this policy

If we change this policy, we'll post the new version here with a new effective date. If the changes are significant, we'll also email account holders or show a notice on the site before they take effect.

11. Contact us

Questions or privacy requests: