Privacy Policy

Last updated: March 2026

SessionBook ("we," "our," or "us") operates https://sessionbook.io and provides photography studio booking and management software ("Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service.

1. Information We Collect

Information you provide directly

When you create an account or use our Service, we may collect:

• Name, email address, and phone number
• Business name and studio information
• Payment information (processed securely by Stripe — we do not store card numbers)
• Booking and session details
• Photos and media you upload to our gallery system
• Communications and support requests

Information collected automatically

When you use our Service, we automatically collect:

• Log data (IP address, browser type, pages visited, timestamps)
• Device information (operating system, screen resolution)
• Cookies and similar tracking technologies
• Usage data and feature interactions

Information from third parties

We may receive information from:

• Google (when you connect Google Calendar for calendar sync)
• Stripe (payment processing and subscription status)
• Twilio (SMS delivery receipts)

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service
• Process bookings, payments, and transactions
• Send booking confirmations, reminders, and service notifications
• Deliver photo galleries and digital downloads to your guests
• Sync calendar events when you authorize Google Calendar access
• Respond to support requests and communicate with you
• Detect and prevent fraud and abuse
• Comply with legal obligations
• Analyze usage to improve the Service

3. Google Calendar Integration

When you connect Google Calendar, we request access to read and write calendar events on your behalf. We use this access solely to:

• Create calendar events for new bookings
• Update or delete events when bookings change
• Read existing events to check for scheduling conflicts

We do not share your Google Calendar data with third parties, use it for advertising, or store calendar content beyond what is necessary to provide the booking sync feature. Your Google Calendar access tokens are stored securely and encrypted. You can revoke access at any time through your Google Account settings or through our dashboard.

Our use of Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. How We Share Your Information

We do not sell your personal information. We may share information with:

• Service providers — Stripe (payments), Supabase (database), Vercel (hosting), Resend (email), Twilio (SMS), who are contractually bound to protect your data
• Studio tenants — if you are a guest making a booking, your name, email, and booking information are shared with the photography studio you are booking with
• Legal requirements — if required by law, court order, or to protect our rights
• Business transfers — in connection with a merger, acquisition, or sale of assets

5. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Studio tenants may delete their account and associated data at any time. Guest booking data is retained for accounting and legal compliance purposes for a minimum of 7 years. Gallery photos are stored until the gallery expires or is deleted by the studio.

6. Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, row-level security on our database, and regular security reviews. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information
• Data portability
• Withdraw consent at any time

To exercise these rights, contact us at privacy@sessionbook.io.

8. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and analyze usage. Essential cookies are required for the Service to function. You can control non-essential cookies through your browser settings, though this may affect functionality.

9. Children's Privacy

Our Service is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

SessionBook
privacy@sessionbook.io
https://sessionbook.io