Privacy Policy

Last updated: August 2026

Cast-A-Booking ("the Service"), operated by Cast-A-Booking LLC, an Arizona limited liability company ("we", "us"), helps appointment-based businesses — such as barbershops, salons, spas, pet groomers, and other local service providers — schedule appointments with their customers through a chat page. This policy explains what information we handle and how. It covers both customers who book appointments and the businesses that subscribe to the Service.

Information we collect

From customers booking an appointment: your name (if you provide it), a phone number if you share one, an email address if you choose to leave one for reminders and updates, the messages you send to book or manage an appointment, and the appointment details (service, staff member if you choose one, date, and time). If you turn on reminders, your browser or device creates a notification subscription that we store so reminders can reach that device. If you pay a business at booking, the payment is handled by Stripe; we record the appointment's amount and payment status but never see or store card numbers.

From businesses that sign up: business name and type, contact name, email (which also serves as your account login), optional phone, chosen plan, the services, prices, hours, and team-member names you add to your booking page, any logo or photos you upload, and your account password (stored only as a secure one-way hash — never in plain text). Businesses may also keep their own notes about their clients; those notes belong to the business.

Automatically: basic technical records needed to run and protect the Service — such as the network address of a request (used for rate limiting and abuse prevention) and error logs. We run no third-party analytics or advertising trackers on any page.

How we use it

We use customer information to schedule appointments and answer questions about the business's services, to notify the business of its bookings, and to send you the appointment-related messages described below. We use business information to operate the account, the booking page, and the subscription. We do not sell anyone's information, and we do not use it for advertising.

The AI assistant

The booking chat is an automated AI assistant. To generate its replies, the messages you type — together with the business's booking details (services, prices, hours) — are processed by our AI providers, OpenAI, Google and Anthropic, acting as service providers to us. They receive only what the conversation needs, and we use the results solely to run the chat.

Your conversations are not used to train AI models. We use these providers on paid API plans whose terms prohibit training on our customers' content. A provider may retain messages for a short period solely to detect abuse of its service, and we do not use your conversations to train or improve any model of our own.

Appointment reminders and messages

Depending on what you shared and allowed, appointment messages reach you by email (booking-related notes, and — where the business has turned them on — a post-visit review request or a "we miss you" note; these marketing-style emails always include an unsubscribe link), by browser/app notification (only after you grant permission; you can revoke it at any time in your browser or device settings), or by text message where available. Unsubscribing or opting out never cancels an appointment.

Text message (SMS) reminders, where offered: if you provide your mobile number and opt in while booking, the business you are booking with may send you an automated appointment reminder text — typically one message about 24 hours before your appointment. Message frequency is limited to these reminders, and message and data rates may apply. These reminders are sent from a shared messaging number used by multiple businesses on our platform. You can opt out at any time by replying STOP to a reminder; because the number is shared, replying STOP stops reminder texts from every business on our platform that uses it, and replying START resumes them (reply HELP for help).

We do not sell, rent, or share your mobile phone number or your SMS consent with any third party or affiliate for their own marketing or promotional purposes. Mobile opt-in information is used solely to deliver the reminders you requested.

Data sharing

Customer information is shared only with the business you are booking with and the providers required to run the Service: our hosting provider (Render), our encrypted off-site backup storage (Cloudflare), our AI providers (OpenAI, Google and Anthropic, to process booking messages), our email provider (Resend, to send booking notifications and reminders), our SMS provider (Twilio, where text reminders are offered), the notification services built into your own browser or device (Apple, Google, or Mozilla, which deliver reminders you opted into), and our payment processor, Stripe (for business subscriptions and for client payments made to a business). Each receives only what its job requires. We never share your information for advertising, and we do not sell it. Card and payment details are handled directly by Stripe; we do not store card numbers.

Businesses and their client data

As between a business and Cast-A-Booking, the business's client list — names, contact details, visit history, and any notes it keeps — belongs to the business. We process it on the business's behalf to operate the Service, and businesses are responsible for handling their customers' information lawfully, including only directing messages to clients they have the right to contact.

Cookies and local storage

We use only functional cookies and browser storage: a secure, HttpOnly session cookie that keeps a business signed in to its dashboard, and local preferences such as language and theme. There are no advertising or cross-site tracking cookies anywhere on the Service.

Data retention

We keep appointment and conversation records only as long as needed to provide the service to the business. Some data expires on its own — for example, a chat's booking pointer is pruned after about 60 days of inactivity, and the short-lived links used to hand a poster from a computer to a phone expire within minutes. Chat transcripts are deleted automatically after about 18 months. We keep them that long because a transcript is the only record of what the assistant told a customer, which matters if a booking is ever disputed — but not indefinitely, because after that it is data with no purpose. When a business is deleted, its appointments, conversations, client records, and reminder subscriptions are deleted with it; encrypted backups age out on a rolling basis afterward. You can request deletion of your data at any time by contacting the business or us.

Your choices

You can unsubscribe from marketing-style emails using the link in any such email, turn off notification reminders in your browser or device settings, and stop text reminders by replying STOP (reply START to resume). You may also request a copy of your data, or its deletion, by contacting the business you booked with or by emailing us — we answer either way.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

Security

All traffic is encrypted in transit, account passwords are stored only as one-way hashes, access to business data is enforced on the server per account and per business, and we deliberately collect little: the Service works without a customer ever creating an account. No system is perfectly secure, but less data held is less data at risk.

Changes to this policy

We may update this policy from time to time. Changes are posted here with an updated date; material changes affecting subscribers will also be noted in the dashboard or by email. This policy is offered in English and Spanish; if the two versions ever conflict, the English version controls.

Contact

This Service is operated by Cast-A-Booking LLC. For any privacy questions or requests, contact: support@castabooking.com

Terms of Service