Legal
Privacy Policy
Last updated: August 3, 2026
In plain English
- We collect only what we need to run the platform for you.
- We do not sell your data, or your customers' data, ever.
- Payment info is handled by Stripe. We never see full card numbers.
- You can export or delete your data any time from the admin panel.
- US-based hosting. Subprocessor list available on request.
1. Data we collect
Two categories:
- Account data: your email, org name and slug, team member emails, invite records, billing state. This is required to run your account.
- Operational data: the records you create inside the platform (customer contacts, water reports, agreements, deals, campaign copy, site briefs). This is your data. We store and process it so the product works.
We do not track visitors with third-party ad pixels. No Facebook Pixel, no Google Ads pixel. Basic anonymous product analytics only.
2. Why we collect it
- To provide the service you signed up for.
- To send transactional email (OTP codes, receipts, urgent alerts).
- To improve reliability (crash reports and error monitoring).
- To bill you and prevent fraud.
We do not use your operational data to train AI models. AI features draft content for your team only, using the LLM providers listed in Section 4.
3. Who we share with
Only when needed to run the service, and always under a written data processing agreement.
- Vercel - app hosting
- Convex - database and realtime backend
- Resend - transactional email (OTP codes, notifications)
- Stripe - billing and subscriptions
- Anthropic - LLM inference for AI features
- Sentry - error monitoring
We do not sell, rent, or trade personal information under any circumstances.
4. AI processing
When you use an AI feature (draft an email, generate a report summary, critique a landing page), we send the relevant context to Anthropic's API. Anthropic operates under a zero-retention agreement for our API traffic; they do not train models on that data. The generated draft is stored with your operational data until you delete it.
5. How long we keep data
For as long as your account is active. When you close your account, we delete operational data within 30 days and retain only what we need for legal or accounting purposes (typically billing records for 7 years).
6. Your rights
You can:
- Access and export your data from the admin panel
- Correct anything wrong through the app UI
- Delete your account and all associated data at any time
- Ask us for a copy of what we hold about you (GDPR / CCPA / PIPEDA)
- Opt out of non-essential communications
Contact team@nowbookedmarketing.com for any request. We respond within 7 business days.
7. Cookies
We use only the cookies required to keep you signed in and remember your organization context. No advertising or third-party tracking cookies.
8. Children
The service is intended for business use by adults. We do not knowingly collect data from anyone under 16.
9. Changes to this policy
We will announce material changes by email at least 30 days before they take effect. The "Last updated" date at the top always reflects the current version.
10. Contact
Privacy questions or requests: team@nowbookedmarketing.com.