Privacy Policy
Effective date: May 24, 2026 · Winnipeg, Manitoba, Canada
This Privacy Policy explains how BookWithZara ("we", "us", or "our") collects, uses, and protects information when you use our AI booking assistant service ("Zara") and related products, including our booking page product.
1. Information We Collect
We collect information in the following ways:
- Messages you send: When you interact with Zara via Instagram Direct Messages or SMS, we receive and process the content of those messages to provide our booking service.
- Booking information: When you make a booking, we collect your name, email address, phone number, and the details of your appointment (service, date, time).
- Instagram profile data: When you message a business using our service via Instagram, we receive your Instagram sender ID as provided by Meta's Messaging API.
- Business owner information: If you are a business owner using our platform, we collect your business name, contact details, service offerings, business hours, and Google Calendar credentials necessary to operate the service.
2. How We Use Your Information
- To respond to your messages and facilitate appointment bookings
- To create and manage calendar events on behalf of the business you are booking with
- To send booking confirmation and reminder emails
- To maintain conversation history so our AI assistant can provide context-aware responses
- To improve the quality and reliability of our service
3. How We Store Your Information
Your data is stored in Google Firebase Firestore, hosted in Google's Toronto (Canada) data centre. We retain conversation messages and booking records for up to 12 months. Business owner configuration data is retained for the duration of the service agreement.
4. Sharing of Information
We do not sell your personal information. We share data only as follows:
- With the business you are booking with: Your name, contact details, and booking information are shared with the salon or service business you are communicating with.
- With Google: We use Google Calendar API to create and manage appointments. Your booking details are submitted to Google's services subject to Google's Privacy Policy.
- With Meta Platforms: Our Instagram messaging integration operates through Meta's Messaging API. Your use of Instagram is subject to Meta's Privacy Policy.
- With Resend: We use Resend to deliver transactional emails. Your email address and booking details are transmitted to Resend for this purpose.
- With Google AI (Gemini): Message content is processed by Google's Gemini AI to generate responses. Please refer to Google's AI privacy terms for details.
5. Your Rights (Canadian Privacy Law — PIPEDA)
Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to:
- Know what personal information we hold about you
- Request access to your personal information
- Request correction of inaccurate information
- Withdraw consent and request deletion of your data
To exercise any of these rights, contact us at hello@bookwithzara.ca.
6. Data Security
We implement reasonable technical measures to protect your information, including encrypted connections (HTTPS/TLS), restricted database access controls, and secure credential storage. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
7. Children's Privacy
Our service is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.
8. Instagram and Meta Platform Data
Our use of data received through Meta's Messaging APIs complies with Meta's Platform Terms and Developer Policies. We use Instagram messaging data solely to provide our AI booking assistant service and do not use it for advertising, profiling, or any purpose unrelated to the requested service.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated policy at this URL with a revised effective date. Continued use of our service after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact us:
BookWithZara
Winnipeg, Manitoba, Canada
hello@bookwithzara.ca
bookwithzara.ca