Introduction

This privacy notice ("Privacy Notice") describes how Textbook Labs LLC ("Textbook Labs LLC", "we", or "us") collects, uses, and discloses your Personal Data in the course of our business. Throughout this document, we will use a few defined terms.

"Personal Data" when used in this Privacy Notice means any data relating to an identified or identifiable natural person that is processed by Textbook Labs LLC as described in this Privacy Notice when such information is protected as "personal data" or "personal information" or a similar term under applicable data protection laws.

"Services" when used in this Privacy Notice means all of Textbook Labs LLC's booking platform, applications (including mobile applications), tools, and services offered by Textbook Labs LLC, but excluding third party applications.

"Platform" when used in this Privacy Notice means the Textbook Labs LLC booking platform and any related websites owned by Textbook Labs LLC or that Textbook Labs LLC has the authority to manage and control.

Applicability

Unless stated otherwise, this Privacy Notice only applies to Personal Data for which Textbook Labs LLC acts as a controller, such as when you interact with our Platform or use our Services. Please note that when businesses use our Services to communicate with their customers, Textbook Labs LLC processes certain data on behalf of those businesses. If you have questions about how your data is processed by businesses using our platform or wish to exercise your rights with respect to that data, you should contact the business which collected your information.

Information We Collect and Process

Information You Provide Directly to Textbook Labs LLC

When you interact with our Platform or Services, we may collect Personal Data from you. For businesses using our platform, this includes business details such as name, type, address, and contact information. We also collect integration credentials for booking services and payment processors such as Stripe. Provider data including staff information, roles, and availability schedules is collected to facilitate service delivery. Service catalog information such as names, services, prices, and duration is gathered to enable booking functionality.

For customers booking services through our platform, we collect your contact information such as name, email, phone number, and other identifiers. We maintain booking information such as booking history and preferences to provide seamless service. For transactional bookings, we collect information such as name, contact details, pickup and destination addresses, and appointment times as necessary to complete your booking.

Information Collected Automatically From You

We and our authorized third parties use cookies, pixels, web beacons, and other technologies to receive and store certain types of information when you interact with us through your computer or mobile device, subject to your consent, opt-out preferences, or other appropriate legal basis where legally required. Using these technologies helps us customize your experience with our Platform and Services, improve your experience, tailor communications, and detect and prevent fraud and security risks.

When you access the Platform or Services, we may automatically record certain log data, including information that your browser or device sends. This log data may include information such as the web address you came from or are going to, your device model, operating system, browser type, unique device identifier, IP address, mobile network carrier, and time zone or location information. Whether we collect some or all of this information often depends on what type of device you're using and its settings.

We collect thread IDs and metadata, usage analytics and system performance data, as well as technical data such as device information and connection details. We also gather fraud and abuse heuristics, security logs, and other security-related information to protect our platform and users.

Platform usage logs and analytics including clicks, QR scans, conversation metrics, dashboard events, and other usage data help us understand how our Services are used and improve functionality. We collect usage patterns, preferences, and other behavioral data to personalize your experience and provide better service.

Information from Third Party Sources

We may obtain Personal Data about you from third party sources, including [PLACEHOLDER FOR THIRD-PARTY ANALYTICS AND OTHER SERVICES]. This Personal Data may include information that helps us provide and improve our Services.

How We Use Your Information

We may use information that we collect about you, including Personal Data, for various purposes to provide and improve our Services.

We use your information to facilitate booking processes between you and businesses on our platform. Service personalization such as remembering past bookings, preferred time slots, and other preferences helps create a better user experience. We provide businesses with dashboard analytics about their services and performance to help them optimize their offerings.

Feature development including improved search, routing logic, and other platform enhancements relies on analyzing how our Services are used. Platform performance optimization and technical improvements ensure our Services operate smoothly and efficiently. We use your information for customer support and issue resolution, as well as regulatory compliance including audit logs, reporting, and other legal requirements.

Research, product innovation, and service development help us create new features and improve existing ones. We also create anonymized, aggregated data products and analytics services that provide value to businesses and other parties while protecting individual privacy.

AI and Automated Processing

We use artificial intelligence and automated systems to operate and improve our platform. This includes automated processing to enhance user experience, optimize platform performance, provide relevant services, and support our business operations. We may expand our use of AI and automated systems over time to better serve our users and improve our services.

Information Sharing

Operational Sharing

We share information as needed to provide our Services. This includes sharing with communication providers as needed for notifications, and with payment processors such as Stripe to handle transactions. We share information with businesses on our platform to fulfill your booking requests and with [PLACEHOLDER FOR THIRD-PARTY ANALYTICS AND OTHER SERVICES] and other service providers necessary for platform operations.

Commercial Data Products and Services

We may also share anonymized, aggregated data to provide additional services. Trend analytics including industry and service trend reports may be provided to businesses such as salons, franchises, and consultancies. Location intelligence such as saturation and performance heatmaps may be shared with developers, business chains, and other commercial users.

Consumer behavior insights including analysis of time-of-day booking patterns, cancellation trends, price sensitivity, and other behavioral data may be provided to interested parties. Competitive benchmarking through performance comparison services and analytics may be offered to businesses on our platform. Market research through anonymized booking trend data and insights may be shared with researchers, industry groups, and other parties.

We may develop other data products and services that provide value while protecting individual privacy. All commercial data sharing uses only anonymized and aggregated information that cannot be traced back to individual users. We will never sell your personal, identifiable information to third parties.

Other Sharing

We may disclose your information if we believe that disclosure is reasonably necessary to comply with a law, regulation, legal, or governmental request; to respond to a subpoena, court order, warrant, or other legal process; to enforce applicable terms or this Privacy Notice; to protect the safety, rights, or property of the public, any person, or Textbook Labs LLC; to detect, prevent, or otherwise address security or technical issues, illegal, or suspected illegal activities; or as evidence in litigation or as part of a judicial or regulatory proceeding.

International Data Transfers

Your information may be processed and stored in the United States, where our primary data centers are located, regardless of where you are located globally. When we transfer your data internationally, we implement appropriate safeguards such as standard contractual clauses approved by relevant authorities, adequacy decisions where applicable, and other legally recognized transfer mechanisms to protect your information.

Data Retention

We retain your information only as long as necessary to fulfill the purposes for which it was collected, meet our legal and contractual obligations, and protect our legitimate business interests. Our retention practices are designed to balance providing you with continuous, personalized service while respecting your privacy rights.

Active customer conversations are retained indefinitely while you actively use our services to ensure seamless booking experiences and maintain conversation context. Inactive conversation threads are archived after 2 years to allow for potential service resumption, then anonymized or deleted to protect your privacy. Booking history is retained for 3 years to provide continuity for repeat bookings, enable customer service support, and meet business record-keeping requirements. Analytics and system data are kept for 2-5 years as needed for service improvement, security monitoring, and compliance with legal obligations.

Your Rights and Choices

Communication Controls

You can control your communication preferences in several ways. To opt out of communications from a specific business, use the unsubscribe option in any email or contact their support. For assistance with communications, contact customer support. Please note that standard rates may apply for any communications.

By using our Services, you consent to receive both transactional communications (such as booking confirmations and appointment reminders) and promotional communications (such as special offers and service updates) from businesses on our platform. Communication frequency varies based on your booking activity and the businesses you interact with. You can opt out of promotional communications at any time while continuing to receive important transactional communications related to your bookings.

Your Data Rights

Under applicable privacy laws, you have various rights regarding your personal information. You have the right to access and receive a copy of the personal information we have about you, including the categories of Personal Data we have collected, the sources of Personal Data, the purposes of collection, and how we used, disclosed, or shared Personal Data.

You have the right to correct inaccurate Personal Data that we maintain about you and to delete your Personal Data under specific circumstances. You may opt out of certain types of processing, such as targeted advertising, direct marketing, and certain types of profiling and automated decision-making. You can request the restriction of processing of your Personal Data and request data portability, which means receiving a copy of your Personal Data in an accessible format.

Where processing is based on consent, you have the right to withdraw your consent. You also have the right to lodge a complaint with the relevant data protection supervisory authority in your jurisdiction.

To exercise these rights, contact us at privacy@usetextbook.com. We will take steps to verify your identity before processing certain requests and will respond within applicable timeframes under local law.

Legal Basis for Processing

We process your information based on several legal bases. We process information for contract performance to provide our booking services and fulfill our agreements with you. We rely on legitimate interests to improve our platform, prevent fraud, develop new features, and provide commercial data services. Where you've given specific consent for certain processing activities, we process information based on that consent. We also process information to comply with applicable laws and regulations where required by legal obligations.

Automated Decision-Making

We may use automated systems to make decisions about how our services function and how we interact with users. You have the right to request human review of automated decisions where they significantly affect you.

Data Security

We use industry-standard security measures to protect your information, including encryption, access controls, and regular security audits. However, given the nature of communications and information processing technology, there is no guarantee that Personal Data will be absolutely safe from access, alteration, or destruction by a breach of any of our physical, technical, and managerial safeguards. We are not responsible for any lost, stolen, or compromised information or for any activity on your account via unauthorized access.

SUGGESTION: Data Breach Notification In the unlikely event of a data breach that may affect our users' rights and freedoms, we are committed to transparency and prompt action. We will assess any security incident to determine if personal data has been compromised and, where required by applicable law, notify relevant supervisory authorities within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users without undue delay, providing clear information about what happened, what data may have been involved, what we're doing to address the issue, and what steps you can take to protect yourself. We maintain incident response procedures to quickly contain and remediate any security issues while preserving evidence for investigation purposes.

Children's Privacy

Age restrictions for using our Services may vary depending on the type of service being booked. and applicable legal requirements. Some businesses on our platform may impose age restrictions or require parental consent for certain services, particularly those involving sensitive information or regulated industries such as healthcare.

We do not knowingly collect personal information from children without appropriate consent as required by applicable law. If we become aware that we have collected personal information from a child without proper consent, we will take steps to delete such information promptly. Businesses using our platform are responsible for complying with applicable laws regarding age restrictions and parental consent requirements for their specific services.

Changes to This Privacy Notice

We may update this Privacy Notice periodically to reflect changes in our practices or regulatory requirements. We'll notify you of significant changes by posting the updated policy on our platform, sending notification through our messaging services where appropriate, and updating the "Last Updated" date. We encourage you to review this policy regularly to stay informed about how we are protecting your personal information.

Contact Us

For questions about this Privacy Notice or your data, contact us at:

Email: privacy@usetextbook.com
Address: 8 THE GRN STE B Dover, DE 19901 United States

Region-Specific Information

California Residents (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information is collected, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information as defined by California law. For more information or to exercise your rights, contact us at privacy@usetextbook.com.

European Union and United Kingdom (GDPR/UK GDPR)

If you are in the EU or UK, you have additional rights under data protection law, including enhanced rights to access, rectify, erase, restrict processing, data portability, and object to processing. You may also withdraw consent and lodge complaints with supervisory authorities. Our legal basis for processing is described above. For EU/UK-specific inquiries, contact privacy@usetextbook.com.

Asia-Pacific Region

We comply with applicable data protection laws in Asia-Pacific jurisdictions where we operate, including Thailand, Vietnam, and the Philippines. In Thailand, we comply with the Personal Data Protection Act (PDPA). In Vietnam, we adhere to applicable data protection regulations. In the Philippines, we follow the Data Privacy Act and related regulations. Specific rights and protections may vary by country. For region-specific information about your data protection rights, contact privacy@usetextbook.com.

Brazil (LGPD)

Brazilian residents have rights under the Lei Geral de Proteção de Dados, including rights to access, correct, delete, and port personal data. You may also object to processing and withdraw consent. For Brazil-specific inquiries, contact privacy@usetextbook.com.

Other Jurisdictions

We comply with applicable data protection and privacy laws in all jurisdictions where we operate. If you have questions about your rights under local law, contact privacy@usetextbook.com.

This Privacy Notice applies to all users of the Textbook Labs LLC platform and booking services.