Privacy Policy

Smoothbook (“we”, “us”) provides an online appointment-booking platform for service businesses. When a business uses Smoothbook to manage its bookings, that business is the data controller for its customers’ data and Smoothbook acts as a data processor on its behalf. For your Smoothbook account itself, we are the controller.

• Account data: name, email address, password (hashed), and sign-in method.
• Booking data: appointments, the service booked, your name, email, phone, and any notes or intake-form answers you provide.
• Payment data: billing details and payment status. Card details are handled directly by our payment processor — we never store full card numbers.
• Usage & device data: IP address, browser type, and pages visited (only where you have consented to optional analytics).
• Support data: messages you send us through live chat or email.

• To provide the service — manage your account and bookings (performance of a contract).
• Transactional messages — booking confirmations, reminders, and account emails (contract / legitimate interests).
• Payments — to take and reconcile payments (contract / legal obligation).
• Optional analytics & live chat — only with your consent, which you can withdraw at any time.
• Legal & accounting — to keep records we are legally required to retain (legal obligation).

We share personal data only with service providers that help us run Smoothbook:

• Supabase — database, authentication and hosting.
• Stripe — payment processing.
• Amazon SES (AWS) — sending transactional email.
• Intercom — live-chat support (loaded only with your consent).
• Lovable — application hosting and aggregate analytics.

We do not sell your personal data. Where a provider processes data outside your region, appropriate safeguards (such as standard contractual clauses) apply.

We keep personal data only as long as needed to provide the service and to meet legal obligations. Booking and account records are kept while your account is active; financial records are retained for the period required by tax law and then anonymised or deleted. Abandoned and expired records are purged automatically on a rolling basis.

Subject to applicable law, you have the right to:

• access a copy of your data (you can download it from your account);
• correct inaccurate data;
• erase your data (“right to be forgotten”) — you can delete your account from your account page;
• restrict or object to certain processing;
• data portability;
• withdraw consent for optional cookies at any time.

To exercise any of these rights, use the controls in your account or contact us at support@smoothbook.co.

We use strictly necessary cookies to run the app, and optional cookies for live chat and analytics that load only with your consent. See our Cookie Policy for details.

Questions about this policy or your data? Email support@smoothbook.co. You also have the right to lodge a complaint with your local data protection authority.