DRAFT — adapted from J3 Software's base Privacy Policy; pending Jeremy's / legal counsel's final review. Not a final GDPR-compliant policy.

Privacy Policy

Last Updated: July 7, 2026

This Privacy Policy describes how iSchedule, operated by J3 Software, collects, uses, and protects information for our two kinds of users — patrons, who book appointments through iSchedule, and providers, who list their business and accept bookings. We encourage you to read this policy before submitting any personal information or using iSchedule in any other manner.

1. Information We Collect

When you create a patron account, we collect: your name, email address, password, phone number, and language preference.

When you register as a provider, we additionally collect: your business name, description, service category, business address, staff information, and payment configuration (see Section 5, Payment Information).

When you book, provide, or manage an appointment, we collect appointment details (service, staff, time, location), any notes you provide, deposit/payment status, and, if you leave one, your review rating and text.

If you allow it, we use your approximate location to show nearby providers in search results.

When you use our website or app, our servers automatically record technical information such as your IP address, browser type and language, device type, and one or more cookies or similar identifiers used to recognize your browser or app session.

2. How We Use Your Information

We use the information we collect to: create and maintain your account; match patrons with providers and process bookings; process deposits and payments (through Stripe or, for providers using their own payment gateway, Authorize.net); send booking confirmations, reminders, and other transactional notifications; display reviews and ratings; detect and prevent fraud or abuse; and maintain, secure, and improve the Services.

3. Payment Information

iSchedule does not store your full payment card number. Card details you enter are sent directly to our payment processors, Stripe or Authorize.net, which tokenize the information; we store only a payment token and the last few digits needed to identify your payment method, along with billing address information where applicable.

4. Information Sharing

We do not sell or rent your personal information. When you book an appointment, we share the information necessary to fulfill that booking (your name, contact information, and appointment details) with the specific provider you booked with, and share provider information (business name, address, availability) with patrons browsing or booking that provider. We may share aggregated or de-identified information that does not identify you with third parties to help us understand and improve the Services. We may also disclose information where required by law, to protect the rights, property, or safety of iSchedule, our users, or the public, or in connection with a merger, acquisition, or sale of assets.

5. Your Rights

You have the right to access, correct, export, and delete your personal information.

Access and correction: You can review and update most of your account information directly in your account settings.

Export: You can request a copy of your personal data by contacting us at privacy@ischedule.com.

Deletion: You can request deletion of your account and personal information at any time. When you do, we will first check for any blockers, such as outstanding deposits or an appointment scheduled within the next 24 hours. Once confirmed, your account enters a 14-day grace period: it is deactivated (you cannot book, and providers’ listings are hidden from search) but not yet erased, and logging back in during this window automatically cancels the deletion. After 14 days, we permanently delete personally identifying information from our systems (name, email, phone number, and any linked social login), anonymize your records tied to past bookings (so that a booking history is retained for the provider’s records, but with your name and contact information replaced by a generic placeholder), and delete reviews you authored. We retain anonymized financial transaction records after this point, as required for accounting and tax purposes.

To exercise any of these rights, contact us at privacy@ischedule.com. We may need to verify your identity before completing your request. You may make one deletion request per account every 30 days.

6. Data Retention

We retain your personal information for as long as your account is active, and for the 14-day grace period described above after you request deletion. Anonymized financial transaction records are retained beyond that point as required for accounting and legal compliance. Aggregated or de-identified data that no longer relates to a specific person may be retained indefinitely.

7. Children's Privacy

iSchedule is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13, we will delete it.

8. Cookies

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Services are used. You can control cookies through your browser settings, though disabling them may limit some features of the Services.

9. International Users

iSchedule is operated from, and your information is processed and stored in, the United States. If you access the Services from outside the United States, your information will be transferred to, processed, and stored in the United States, which may have data protection laws different from those in your country.

10. Information Security

We use industry-standard security measures to protect your information, including encryption of data in transit, restricted internal access to personal information (limited to personnel and contractors who need it to operate, develop, or improve the Services and who are bound by confidentiality obligations), and regular backups. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Enforcement and Complaints

If you have a question or complaint about this Privacy Policy or our data practices, contact us at privacy@ischedule.com. We will investigate and respond, and will cooperate with the appropriate regulatory authorities to resolve complaints that cannot be resolved directly with you.

12. Changes to This Policy

If we change this Privacy Policy, we will post the updated policy on this page and update the “Last Updated” date above. We encourage you to review this policy periodically.

13. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@ischedule.com.