Privacy Policy
Last updated September 6, 2026
Book AZ handles two kinds of information: information about shops (our customers) and information about clients of those shops (the people who book). This policy covers both. We follow Canada’s PIPEDA and British Columbia’s PIPA.
What we collect
- Shop owners and staff: name, email, phone, business details, login and role, and how you use the app.
- Clients who book: name, mobile number and/or email, the appointments they book, notes the shop keeps, loyalty balance, and consent choices. Signing in with Google or Apple gives us only your name and email (or a relay email) — no password.
- Payments: handled by Stripe. We keep the last 4 digits and the card brand for display; the full card number never touches our servers.
- Technical: IP address, browser, device and pages visited, to keep the service secure and working.
- Location: only if you tap “Near me” on the shop finder, and only to sort results. It is not stored.
How we use it
- To run the service: bookings, reminders, receipts, loyalty, waitlist alerts and the features a shop turns on.
- To bill shops and prevent fraud.
- To send shops important notices about their account. Product news is optional and can be turned off.
- To improve Book AZ, using aggregated statistics that do not identify anyone.
Who sees a client’s information
- Only the shop the client booked with. Book AZ is not a marketplace; we do not show a client’s information to other shops and we do not market other shops to them.
- A client’s Book AZ account lets them see their own appointments and rewards across the shops they have visited. Each shop still only sees its own records.
- Service providers that help us run Book AZ (hosting in Canada, Stripe for payments, Twilio for text messages, our email provider, an AI provider when a shop turns on the AI receptionist). They may only use the data to provide the service to us.
- Authorities, if the law requires it.
Text messages and marketing
Clients choose whether to receive reminders by text and whether to receive marketing. Every marketing message includes a way to opt out, and replying STOP to any text ends texts from that shop. Shops are responsible for using these tools within Canadian anti-spam law.
Keeping it safe
Data is encrypted in transit and at rest, stored on servers in Canada, backed up nightly, and access inside Book AZ is limited to staff who need it to support you. No system is perfectly secure; if we ever discover a breach that affects you, we will tell you promptly.
Your choices
- Clients: see and update your details, opt out of texts or marketing, or ask a shop (or us) to delete your record. Sign in at book.bookaz.ca/me.
- Shops: export your client list any time; close your account from Plan & billing. Data is kept 90 days after closure, then deleted (except records we must keep by law).
- Cookies: we use only the cookies needed to keep you signed in and remember settings like language. No advertising trackers.
Children
Book AZ is for businesses and their adult clients. We do not knowingly collect information from anyone under 13.
Changes and contact
If we change this policy in a meaningful way we will post the new date here and notify shop owners by email. Questions or requests: use the contact details on bookaz.ca.