Privacy Policy

Bookfront is an intelligent booking product for creators and sellers (“Bookfront”, “we”, “us”). This policy explains what we collect, why, and the choices you have. It covers two kinds of people: creators who run a booking page, and attendees who book with them.

Account information (creators): your name, email, profile details, timezone, and the content you add to your booking page.

Booking and intake information (attendees): your name, email, the answers you give to a creator’s intake questions, the session you select, and the time you choose.

Payment information: when a session is paid, payments are processed by Stripe. We receive confirmation and limited metadata (amount, status) — we never see or store full card numbers.

Calendar data: if a creator connects Google Calendar, we access free/busy information to show real availability and create or update the event for a booking, using the access you grant.

Technical data: standard logs (such as IP address and device/browser information) needed to operate and secure the service.

• Provide the booking experience — show availability, take bookings, and keep creators and attendees informed.
• Generate AI prep briefs from intake answers so a creator can prepare for the session.
• Send transactional email (confirmations, notifications, reschedules, cancellations).
• Process payments and platform fees through Stripe.
• Create, update, and cancel calendar events when a calendar is connected.
• Secure the service, prevent abuse, and meet legal obligations.

To produce a prep brief, the intake answers an attendee submits may be sent to our AI provider (Anthropic) to generate a short summary, suggested questions, and a recommended next step for the creator. This data is used only to generate that brief and is not used to train AI models. When AI is unavailable or not configured, briefs are generated deterministically from the same answers.

We do not sell personal information. We share it with vendors who process it on our behalf, under contract, only to run the service:

• Supabase — database and authentication hosting.
• Stripe — payments and payouts.
• Google — calendar availability and event sync (only when a creator connects it).
• Anthropic — AI prep-brief generation.
• Resend — transactional email delivery.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and the service.

We keep booking and account data for as long as an account is active and as needed to provide the service, resolve disputes, and meet legal requirements. Creators can delete bookings, and attendees can request deletion of their data (see below).

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, and to object to or restrict certain processing.

Attendees: to access or delete the information tied to your booking, email us and reference the creator and the email you booked with.

Creators: you can edit your profile and remove bookings from your dashboard, and you can disconnect Stripe or Google Calendar at any time.

We use industry-standard measures including encryption in transit, row-level access controls on the database, and scoped server-side access to sensitive operations. Connected calendar tokens and payment processing are handled by trusted providers. No system is perfectly secure, but we work to protect your data and limit who can access it.

Bookfront and its providers may process data in countries other than where you live. Where required, we rely on appropriate safeguards for those transfers.

Bookfront is not directed to children under 16, and we do not knowingly collect their personal information.

We may update this policy as the product changes. We’ll revise the “updated” date above and, for material changes, provide a more prominent notice.