Effective 2026-10-14. Version 2026-10-14.

Privacy Policy

This policy describes how Liaison, Inc., operator of Start Booking (“Start Booking,” “we,” “us”), handles personal information through our scheduling software, hosted booking pages, websites and supported applications (“Services”). A “Merchant” uses our software for its business; a “Booking Customer” books or purchases a Merchant’s offerings. Personal information includes identifiers and device data where applicable law treats them as identifying or linkable; an IP address or cookie identifier is not automatically anonymous.

1. Our role and scope

We determine the purposes of processing for our own account administration, billing, security, support and website activities. For booking and customer records processed on a Merchant’s instructions, the Merchant generally determines the purposes and is responsible for its own notice and lawful basis; our role is governed by applicable law and the Merchant’s agreement. This policy does not turn Merchant-controlled records into our unrestricted marketing data.

Ask the relevant Merchant about its appointment records, refunds, marketing and privacy choices. You may contact us for assistance identifying the appropriate route. Third-party sites, payment services and integrations also have their own notices; this policy does not control their independent activities.

2. Information and sources

• Account and business details: names, email addresses, credentials, business settings, location/contact details, staff permissions, plan selection and signup legal-acceptance version and time.
• Booking information: customer contact details, appointment/class selections, times, responses to Merchant-configured fields, notes and related communications supplied by Merchants and Booking Customers. Do not submit unnecessary sensitive information.
• Billing and transactions: subscription, invoice, payment status, transaction identifiers and payment-method details returned by payment providers. Designated payment interfaces use Stripe; do not send full card details to support or enter them in booking notes.
• Support and communications: messages, attachments and information you provide when asking for help or interacting with us.
• Devices and usage: IP addresses, browser/device details, request and error logs, pages and interaction events, referring URLs and cookie or similar identifiers where the relevant technologies run.
• Connected services: authorization tokens, provider identifiers, selected calendar settings, event links and information needed for integrations you enable. Calendar integration can read availability and create, update or remove linked events; Zoom integration handles authorization and meeting information. We do not claim these integrations store no personal information.

Sources include you, your organization or Merchant, Booking Customers, devices, connected providers and service providers involved in delivering the Services. Public business content you intentionally publish on a booking page may be visible to others; private account activity is not described here as public by default.

3. Purposes and legal bases

We use information to create and administer accounts, schedule and manage bookings, process payments, operate integrations, deliver confirmations and reminders, provide support, investigate abuse, secure and troubleshoot the Services, comply with law and enforce agreements. Usage analysis may help improve the product. Where enabled and lawful, analytics and advertising technologies measure visits and campaign performance and support advertising audiences.

Where a legal basis is required, the appropriate basis may be performance of a contract, compliance with a legal obligation, consent for optional tracking or marketing when required, or legitimate interests in operating and protecting the Services after considering individual rights. Merchant-directed processing must have the Merchant’s appropriate lawful basis and instructions. Acknowledging this policy or accepting the Terms is not blanket consent to every processing purpose. Withdrawing consent does not invalidate prior lawful processing. Start Booking is offered globally; your applicable local rights are not waived by using the Services.

4. Recipients and integrations

Information is disclosed as needed to the Merchant and authorized staff for a booking; providers supporting hosting/storage, payments, email/SMS delivery, support, error monitoring, security and integrations; and analytics/advertising providers where those technologies are enabled and lawful. Providers may process device and usage information when their scripts load. Independent providers may have their own legal responsibilities and may process information under their own notices.

We may disclose information when reasonably necessary to comply with legal process, protect rights and safety, investigate abuse or fraud, or complete a merger, acquisition or business transfer subject to legal safeguards. We do not grant an unlimited right to sell private booking records. Merchant-authorized data transfers to a connected calendar, payment, video or marketing provider are separate from Start Booking’s own website advertising practices.

5. Cookies, Google and Meta technologies

Essential cookies support sessions, authentication, security and requested functionality. Optional measurement or advertising tools can use cookies, pixels and similar technologies to collect identifiers, IP/device details, visited URLs and interactions; depending on settings, vendors may link events to other information. These identifiers and events are not necessarily anonymous.

Start Booking uses Google and Meta/Facebook technologies for measurement and advertising where enabled. Google Tag Manager can load remotely configured tags, and marketing, booking and signed-in pages may use different configurations. Signed-in measurement may include a user identifier. The events and destinations depend on the page, account, vendor configuration and choices available to you.

Disclosing browser identifiers or activity for cross-context behavioral advertising may constitute “sharing,” “sale” or targeted advertising under applicable privacy law, even without money changing hands. Applicability depends on the business, jurisdiction and actual configuration. We do not claim that no sale/sharing occurs merely because we do not sell a mailing list.

This notice does not itself block browser transmissions or provide a site-wide tracking switch. Do not assume that accepting or declining the Terms controls optional tags, or that a privacy signal automatically disables all tags on every page. Applicable requirements for prior consent, opt-out signals such as Global Privacy Control, and consent withdrawal remain in force; this policy does not waive them.

6. Privacy choices and requests

Send privacy requests to support@startbooking.com with subject “Privacy request.” Explain whether you are requesting access, correction, deletion, a copy, consent withdrawal, an objection, or an advertising/sale/sharing opt-out, and identify the relevant account or Merchant without sending passwords or full payment details. Applicable law may provide these rights, limits on sensitive-information use, portability, nondiscrimination, an authorized-agent process, appeal rights, or a right to complain to a regulator. We may need proportionate identity or authority verification, but not more information than reasonably necessary. Applicable response periods and exemptions govern; no universal response deadline is promised here.

Advertising/tracking request: you may email a request to stop optional advertising uses associated with information we can identify. Email alone does not identify or disable every browser or device, erase earlier vendor events, or substitute for required on-page controls and privacy-signal handling. Vendor tools, browser cookie settings and blocking technologies may reduce collection but are not represented as complete site-level compliance controls. The support inbox is monitored. Requests are not an automatic browser-level tracking block.

Marketing email: unsubscribe using a marketing message’s link where provided, or email support requesting “Marketing unsubscribe.” This is distinct from a tracking opt-out and does not delete an account. Necessary service, billing, security and legal messages may continue where lawful. Merchants manage their own customer communications; contact the sending Merchant for its marketing list.

Deletion and account closure: request these separately. Canceling a subscription does not itself delete records, and deletion does not automatically cancel a paid subscription. Some information may need to remain for legal, security, dispute or accounting purposes. Requests about Merchant-controlled booking data may need to be directed to that Merchant. Disconnecting an integration stops future authorized access subject to actual provider behavior; it does not necessarily delete already transferred records.

Where consent is legally required, you may withdraw it through the mechanism used to obtain it or by contacting support. An email route does not replace browser-based withdrawal where required. Depending on your location, you may also contact your local data-protection authority or other competent regulator. Mandatory regional protections apply even if not individually listed here.

7. Retention and deletion

We retain information for as long as reasonably necessary for the purposes described in this policy, considering account status, Merchant instructions, transaction/accounting duties, applicable limitation periods, legal holds, security needs and backup cycles. Account and booking records may be needed while providing the Services; billing records may be needed for accounting and disputes; security logs may be needed to investigate abuse; and legal-acceptance evidence may be needed to demonstrate the agreement that applied. Cancellation does not itself delete these records. We do not promise immediate erasure from backups, indefinite retention of everything, automated deletion or a self-service export. Contact support about retention or deletion of particular information.

8. Security and international processing

We use safeguards intended to protect the Services; no internet transmission, storage system or integration can be guaranteed secure. Protect credentials and report suspected security issues to support. This limitation does not waive required security or breach-notification duties. We do not claim an unverified certification or that all data is encrypted in every context.

Our providers and integrations may process information in countries other than yours, whose laws may differ. International processing remains subject to applicable transfer restrictions and required safeguards; merely using the Services is not consent that replaces those protections. This policy does not guarantee storage in a particular country or identify a universal transfer mechanism. Contact support with questions about the locations and safeguards relevant to your information.

9. Children

Merchant accounts are intended for adults. Merchants are responsible for lawful handling of minors’ appointment data, including parental permission where required. If you believe a child’s information has been provided unlawfully, contact support so it can be assessed. We do not claim that an adult-account rule means no minors’ booking data can ever be processed.

10. Policy changes and contact

We may revise this policy prospectively for lawful reasons and will identify its version and effective date. We will give notices and obtain consent where required for material new practices. Posting a revision does not retroactively authorize incompatible processing or eliminate accrued rights. Please review the current policy periodically.

Privacy questions and requests may be directed to:

The support inbox is monitored. Please identify the request type and relevant account or Merchant so your request can be routed appropriately. Do not send passwords, full payment-card details or unnecessary sensitive information.