Privacy Policy.

Overview

WagBooking is a scheduling and client-management tool for pet groomers. Handling personal information — yours, your staff’s, and your clients’ — is a big part of what the software does, so we take it seriously.

This policy explains what personal information we collect, why we collect it, who we share it with, and what rights you have. It applies to wagbooking.com, our web app, and any mobile apps we distribute under the WagBooking name. This policy is aligned with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Two roles: account holder vs. client

WagBooking involves two different kinds of people whose personal information moves through the service:

• Account holders — the pet groomer or business that signs up for WagBooking. We are the “controller” of your account information: we decide how it’s used and we’re responsible for it.
• Your clients — the pet owners you book, message, and keep records for. When their information lives in your WagBooking account, you are the controller and WagBooking acts as a service provider on your behalf. You’re responsible for collecting that information lawfully (with your clients’ knowledge and consent) and for the way you use it inside our service. We handle it under the security and access rules described below.

What we collect from account holders

• Account details: your email address, password (stored hashed — we never see the plain text), and optionally a Google account identifier if you sign in with Google.
• Business details you enter: your business name, business hours, service menu, and other settings.
• Billing details: plan choice and subscription status. Payment information (credit card, billing address) is collected and stored by Stripe, our payment processor — we don’t see or store your card number.
• Usage and technical data: basic log data your browser sends when you use the service (IP address, browser type, pages requested, timestamps). We use this for security, debugging, and keeping the service running.

What flows through the service from your clients

When you use WagBooking to run your business, your clients’ personal information can include:

• Name, phone number, email address, and mailing address (if you enter one)
• Pet details (name, breed, age, weight, medical notes, temperament notes, groom preferences)
• Appointments, checkouts, and payment method used (cash, e-transfer, etc. — the actual money doesn’t flow through us)
• Photos you or your staff attach to a pet or appointment
• Text messages and emails you send them through WagBooking, plus their replies
• Signed intake forms, agreement acceptances, and any answers they gave in your booking or intake flow

Some of this information is submitted directly by your client — for example when they book online through your booking page or accept a contract through a signing link you sent them.

Why we collect it

We use personal information to:

• Provide, maintain, and improve the service (show you your calendar, look up a client, send a message you scheduled).
• Authenticate you and keep your account secure.
• Process your subscription payment and manage billing.
• Send you service-related emails (account confirmation, billing receipts, security alerts, service announcements).
• Send messages you configure on your clients’ behalf (reminders, review requests, booking confirmations).
• Detect, investigate, and prevent abuse of the service.
• Comply with legal obligations (for example, keeping tax and payment records).

We do not sell your personal information or your clients’ personal information. We do not use it to train machine-learning or AI models. We do not use it for advertising or profiling.

Cookies and local storage

Our marketing site uses no third-party tracking cookies. When you’re signed into the app, we use browser local storage to hold your authentication session (so you don’t have to sign in on every page load) and to cache data for offline use. Clearing your browser storage signs you out.

Who we share information with

We only share personal information with third parties when it’s necessary to deliver the service, comply with the law, or protect rights. The service providers we rely on (“sub-processors”) are:

• Supabase — hosts the database and file storage that keep your account and client information ( supabase.com/privacy ).
• Stripe — processes subscription payments and stores your billing details ( stripe.com/privacy ).
• Twilio — delivers text messages (SMS) to your clients ( twilio.com/legal/privacy ).
• Postmark — delivers transactional emails (account confirmations, reminders you enable) ( postmarkapp.com/eu-privacy ).
• Cloudflare — provides network delivery, DNS, and protection against abuse ( cloudflare.com/privacypolicy ).
• Google — if you choose to sign in with Google, Google authenticates you ( policies.google.com/privacy ).

Each of these providers only receives the information they need for their piece of the job (for example, Twilio receives the phone number and message body it’s asked to send; Stripe receives the billing details you enter into its payment form). They’re bound by their own privacy commitments and by our agreements with them.

We may also disclose personal information to comply with a valid legal request (subpoena, court order), to enforce our Terms, to prevent fraud, or to protect the rights, safety, or property of WagBooking, our users, or the public.

Where information is stored

Most of our service providers are U.S.-based companies and store data on servers in the United States. Personal information handled by WagBooking is therefore subject to the laws of the United States, in addition to the laws of your province and Canada. By using WagBooking you consent to this transfer.

How long we keep it

We keep your account and its data for as long as the account is active. If you cancel your subscription:

• Your account moves to a read-only state and you have 60 days to sign in and export or delete anything you need.
• After that grace period, your account and all associated business data (clients, pets, appointments, notes, photos, message history) are permanently deleted from our production systems within 30 days, and from routine backups within an additional 90 days.
• Payment records that we’re required to keep for tax and audit purposes are retained by Stripe and by us for up to 7 years, as required by Canadian law.
• You can ask us to delete your account sooner — see the “Your rights” section below.

Your rights

Under PIPEDA and applicable provincial privacy laws, you have the right to:

• Access the personal information we hold about you.
• Correct information that’s inaccurate or incomplete.
• Ask us to delete your personal information (subject to legal retention obligations, such as tax records).
• Withdraw consent to non-essential processing at any time.
• Ask questions about how we handle your information.

To exercise any of these rights, email [email protected]. We’ll respond within 30 days.

If your personal information is in someone else’s WagBooking account (for example, you’re a client of a pet grooming business that uses WagBooking), please contact that business first — they control the data and can update or remove it directly. If you can’t reach them, contact us and we’ll help.

If you’re not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada or your provincial privacy regulator.

How we protect it

We take security seriously:

• All connections to WagBooking use encryption in transit (HTTPS/TLS).
• Data at rest is stored on providers that encrypt storage volumes.
• Access to each business’s data is enforced at the database level (row-level security), so one business can’t see or modify another’s data even if there’s a bug in the app.
• Passwords are stored hashed; we never see plain-text passwords.
• Sign-in supports strong passwords and Google OAuth. Session tokens expire and rotate.
• Administrative access to production systems is restricted to WagBooking’s operator and audited.

No system is perfectly secure. If we ever have reason to believe your personal information has been compromised in a way that creates a real risk of significant harm, we’ll notify you as required by law.

Children

WagBooking is a business tool. It’s not directed at children under 13, and we don’t knowingly collect personal information from children under 13. If you believe we’ve inadvertently collected such information, contact us and we’ll delete it.

Changes to this policy

We may update this policy as the service evolves. When we make a change, we’ll update the “Effective” date at the top. For material changes, we’ll notify account holders by email or through the app before the change takes effect.

Contact

Questions, requests, or concerns about privacy? Email [email protected]. A real person reads it — usually within a day.

Privacy inquiries: William Herrington, WagBooking, Ontario, Canada · [email protected].

See also our Terms of Service.