Data & security
Your records. Clear responsibilities.
Your business controls its client relationship. DivineBooking processes the information needed to run the calendar. We do not sell personal information or operate a consumer booking marketplace.
Team access
Staff sign in, and workspace roles control what each person can view or change. Important calendar changes leave a record.
Private records
Private booking responses use no-store caching instructions. Application logging is configured to redact sensitive fields.
Export & questions
Owners can export supported scheduling records. Confirm the scope and treatment of attachments before closing a workspace.
Who processes what?
Processing locations depend on the provider and deployment. We do not promise that all data stays in Canada. Open a provider below for the data involved. Optional import suggestions can include personal information and require the disclosed, user-initiated action.
ClerkUsed by the application
- Purpose
- Staff sign-in and session management
- Data
- Account identifiers, email, session and security metadata
- Location
- Vendor-managed processing; may occur outside Canada
RailwayUsed by the application
- Purpose
- Application services and PostgreSQL infrastructure
- Data
- Workspace, client, appointment, service and operational data
- Location
- Deployment-specific; DivineBooking does not make an all-data-in-Canada promise
CloudflareActive where configured
- Purpose
- Object storage and edge services
- Data
- Stored files, request metadata and network-security information
- Location
- Vendor network and configured storage locations
InngestUsed when configured
- Purpose
- Scheduled and retryable background jobs
- Data
- Job events, workspace identifiers and execution metadata
- Location
- Vendor-managed processing; may occur outside Canada
ResendUsed when configured
- Purpose
- Booking confirmations and reminder email
- Data
- Recipient address, message content and delivery metadata
- Location
- Vendor-managed processing; may occur outside Canada
SentryActive where configured
- Purpose
- Application error reporting
- Data
- Error, device, request and diagnostic metadata
- Location
- Vendor-managed processing; may occur outside Canada
GoogleOptional
- Purpose
- One-way calendar connection selected by a staff member
- Data
- Connected-account identifier and appointment event details
- Location
- Google-managed processing
AnthropicOptional, user initiated
- Purpose
- Suggesting column or event mappings during an import
- Data
- CSV column names and up to three sample rows, or unparsed iCalendar event fields in batches; samples can contain names, email, phone, notes, or appointment details
- Location
- Vendor-managed processing; may occur outside Canada
VercelMarketing site only
- Purpose
- Hosting, aggregate website analytics, and performance measurement
- Data
- Public-site route and referrer, device and browser details, approximate location, request and performance metadata; not the booking database
- Location
- Vendor network
StripeWorkspace subscription billing
- Purpose
- Secure checkout, recurring billing, invoices, and the billing portal
- Data
- Billing contact and payment details entered with Stripe; DivineBooking retains customer, subscription, status, and renewal identifiers but not full card details
- Location
- Vendor-managed processing; may occur outside Canada
Twilio: SMS delivery is not currently offered as a live plan feature.
Read the Privacy Policy and Terms of Service. For access, export or data questions, email privacy@divinebooking.app.