Privacy Policy

Last updated: August 2, 2026

PikaSchedule ("we", "us", "our") provides scheduling, client management, and payment software for beauty and wellness businesses ("Service"). This policy explains what information we collect, how we use it, and the choices you have. It applies to business owners and staff who create an account ("Tenants") and to their clients who book appointments through a Tenant's booking widget ("Clients").

1. Information we collect

We collect the following categories of information:

• Account information: name, email address, password (hashed), business name, and business type, provided when a Tenant signs up.
• Staff information: names, emails, roles, and schedules entered by a Tenant to manage their team.
• Client information: names, emails, phone numbers, appointment history, and notes entered by a Tenant to manage bookings and client relationships.
• Booking data: appointment times, services selected, and related notes.
• Payment information: processed directly by Stripe; we do not store full card numbers on our servers.
• Calendar data (optional): if a Tenant connects Google Calendar, we access and sync appointment event details (time, service name, client name) to keep their calendars up to date. See Section 5 for details.
• Usage data: log data such as IP address, browser type, and pages visited, collected automatically for security and performance.

2. How we use information

• To provide and operate the Service, including booking, calendar, CRM, POS, payroll, and reporting features
• To send transactional emails, such as booking confirmations, account verification, password resets, and staff invitations
• To process payments and subscription billing through Stripe
• To sync appointments to a Tenant's connected Google Calendar, if enabled
• To detect, prevent, and address technical issues, fraud, or abuse
• To communicate with Tenants about their account or the Service

We do not sell personal information, and we do not use client or booking data to serve advertising.

3. Data isolation between businesses

PikaSchedule is a multi-tenant platform. Each Tenant's data — including staff, clients, bookings, and reports — is logically isolated and accessible only to that Tenant's authorized users. Tenants do not have access to another business's data.

4. Third-party service providers

We share information with the following service providers, solely to operate the Service:

• Neon (PostgreSQL hosting): stores application data.
• Vercel: hosts and serves the application.
• Stripe: processes subscription payments and client payments made through POS checkout.
• Resend: sends transactional emails on our behalf.
• Google (Calendar API): syncs appointments to a Tenant's Google Calendar, only when a Tenant explicitly connects their account.

Each provider is contractually restricted to using data only to provide their service to us.

5. Google Calendar integration

PikaSchedule offers an optional integration that lets a Tenant connect their Google Calendar so bookings automatically appear on it. This feature is off by default and requires the Tenant to explicitly authorize access through Google's OAuth consent flow.

• We request access only to the Tenant's calendar events (via the Google Calendar API) — specifically, the ability to create, read, and update events that correspond to PikaSchedule bookings.
• We do not access, read, or store any calendar events that were not created through PikaSchedule.
• We do not access Gmail, contacts, or any other Google service.
• A Tenant can disconnect Google Calendar at any time from their dashboard settings, which revokes PikaSchedule's access.
• PikaSchedule's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Data retention

We retain Tenant and Client data for as long as the Tenant's account is active, or as needed to provide the Service. A Tenant may request deletion of their account and associated data by contacting us at admin@pikaschedule.com. Some information may be retained where required by law, such as payment records for tax purposes.

7. Your rights and choices

• Tenants can access, update, or delete staff, client, and booking data directly within their dashboard.
• Clients who book through a Tenant's widget can manage or cancel their own bookings via the self-service link sent to them by email, or can contact the Tenant directly.
• You may request a copy of your data, or request deletion, by emailing admin@pikaschedule.com.
• You may disconnect the Google Calendar integration at any time from Dashboard → Calendar settings.

8. Data security

We use industry-standard measures to protect data in transit (HTTPS/TLS) and at rest, including hashed passwords and access controls scoped to each Tenant. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Children's privacy

The Service is intended for business use by adults. We do not knowingly collect information from children under 13.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the updated policy.

11. Contact us

Questions about this policy or your data can be sent to admin@pikaschedule.com.