Privacy Policy

The short version

We store what it takes to run bookings and rewards for a shop — nothing more. We don't sell data, we don't run ads, and we don't use tracking cookies. Shop owners control their client records; clients can ask their shop (or us) about theirs.

1. What we store

If you run a shop: your name, email, password (stored hashed — we can't read it), and your shop's setup: services, hours, branding, rewards, and billing status.

If you book with a shop: the name, mobile number, and ZIP code you give when booking (that combination is how the shop recognizes you next time — no account or app needed), an email address if you choose to leave one, your appointments, and your visit and reward history at that shop.

2. What it's used for

Running the service: taking bookings, sending confirmations and appointment reminders, keeping reward balances, and updating wallet passes. That's it. No advertising, no selling or renting data, no profiling beyond the shop seeing its own clients' visit history.

3. Who else touches the data

Regularz runs on a small set of processors, each doing one job: Vercel (hosting), Neon (database), Resend (sending emails), Stripe (payments — card details go straight to Stripe and never touch our servers), Telnyx (text messages and missed-call text-backs), Anthropic (the AI that answers questions typed into a shop's Front Desk chat — it receives the question and the shop's own details), Google Calendar (only if a shop owner connects their calendar, to read when they're busy), and Apple or Google (only if you add a wallet pass). Each receives only what its job needs. Beyond these, we disclose data only if the law requires it. Mobile numbers and SMS opt-in consent are not shared with third parties or affiliates for marketing purposes.

4. Cookies

One cookie, and only when you sign in: it keeps your session. No analytics cookies, no third-party trackers.

5. How long we keep it

As long as the shop's account exists — a lapsed subscription locks data but never deletes it, because a shop's client book shouldn't vanish over a missed payment. Shop owners can export everything at any time and can delete their shop entirely from the dashboard (Security). Records of text-message consent and opt-outs (the phone number, the wording shown, and when and where it was given) are kept even after a client's record is deleted, so consent can be proven if it is ever questioned; they are deleted along with the shop's account.

6. Your rights

If you booked with a shop, that shop controls your record — ask them first, and they can correct or remove it. You can also contact us directly and we'll help. Shop owners can access, export, and correct their data from the dashboard, and delete their shop from Security. For anything else, email us at bookings@getregularz.com.

7. Changes and contact

If this policy changes in a way that matters, shops get an email before it takes effect. Questions: email bookings@getregularz.com. See also the Terms of Service.