Privacy Policy

Kapi ("Kapi", "we", "us") provides a booking platform for service businesses (salons, wellness studios, consultants, and similar). This policy explains what data we collect, why, and how it's used across the business dashboard, the public booking pages, and any integrations you connect — including Google Calendar.

Data we collect

• Business account data — name, email, password (hashed), business name, address, and settings you configure.
• Client/booking data — a business's own clients' name, phone number, email, and appointment details, entered by the business or submitted by the client through the public booking page.
• Google Calendar data — when a business connects their Google Calendar, we read and write calendar events strictly to keep bookings in sync (creating an event when a booking is made, removing it when cancelled, and blocking times that are already busy on the connected calendar). We do not read calendar data unrelated to availability and booking sync, and we do not use this data for advertising.
• Communication data — phone numbers and message content needed to deliver booking confirmations and reminders via SMS, WhatsApp, or Telegram, when a business enables those channels.
• Payment data — for subscription and credit purchases, payment is handled by our third-party payment processor (Cardcom); we do not store full card numbers ourselves.

How we use it

Data is used only to operate the booking platform: authenticating accounts, computing availability, creating/cancelling bookings, syncing with Google Calendar when connected, sending the notifications a business has opted into, and processing billing. We do not sell personal data, and we do not use Google user data for serving ads.

Google user data

When a business signs in with Google or connects Google Calendar, Kapi requests the calendar.events and calendar.readonly scopes plus basic profile (name, email). We use them only to: read busy times so clients can't book over existing events, create and remove events for Kapi bookings, and receive change notifications for the connected calendar. Google data is not used for advertising, not sold, not used to train AI/ML models, and not read by humans except with the business's explicit consent for support, for security purposes, or where required by law.

Kapi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Third parties

We share data only with the service providers needed to run the platform on a business's behalf: Google (Calendar sync, when connected), Twilio (SMS/WhatsApp delivery), Telegram (bot notifications), Resend (transactional email), Cardcom (payments), and our hosting infrastructure. Each processes data only as needed to provide its service to Kapi.

Data retention & deletion

Business and booking data is retained for as long as the account is active. A business can disconnect Google Calendar at any time from their dashboard, which revokes Kapi's access to that calendar. To request deletion of an account or client data, contact us at the address below.

Contact

Questions about this policy or your data: hello@kapi.app