Legal

Privacy Policy

Last updated: May 6, 2026

This page is a placeholder. The final document will be reviewed by counsel before launch. The structure below describes the topics that will be covered.

1. What we collect

We collect information you provide when you create an account (name, email, business information), information your business imports about its clients (names, contact information, appointment history), and operational data generated by your use of the Service (messages sent, replies received, appointments booked).

We also collect basic technical information such as IP address, browser type, and pages visited, to operate and secure the Service.

2. How we use your information

We use your information to provide the Service, communicate with you about your account, improve the Service, ensure security, and comply with legal obligations. Client data you import is processed solely to deliver the Service to you.

3. Sharing

We do not sell your data. We share information with vendors who help us operate the Service (hosting, email delivery, SMS delivery, analytics) under contracts that restrict their use of the data to providing services to us. We may share information when required by law or to protect the rights and safety of Rebook, our users, and the public.

4. Data security

We maintain administrative, technical, and physical safeguards designed to protect your information. Each tenant’s data is isolated at the database level, and access to production data is restricted to authorized personnel only.

5. Your rights

You may access, update, export, or delete your data at any time from your account settings. If you are located in a jurisdiction that grants you additional rights (such as the EU’s GDPR or California’s CCPA), you may exercise those rights by contacting us at the address below.

6. Cookies and tracking

We use a small set of cookies to keep you signed in and to remember your interface preferences (such as light or dark mode). We do not use third-party advertising or cross-site tracking cookies on our marketing site or in the Service.

7. Children

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

8. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service at least 30 days before the changes take effect.

9. Contact

Questions about this policy can be sent to privacy@flowstate.app.