Privacy Policy
Last updated: May 25, 2026
This policy explains what personal information BookyTails (“we,” “us,” or “BookyTails”) collects, how we use it, who we share it with, and the rights you have over it. We wrote this in plain language because legalese helps no one.
1. Who we are
BookyTails is a software-as-a-service (SaaS) platform for independent dog groomers and mobile pet-grooming businesses. It's operated by Toan Duy Bui, a Texas sole proprietor, doing business as BookyTails. For privacy questions, contact privacy@bookytails.com.
2. Whose data this covers
BookyTails handles two categories of people:
- Groomers (our subscribers). The independent businesses that pay BookyTails for the service. We are the data controller for groomer data.
- Pet parents (groomers' customers). The people who book grooming through a groomer using BookyTails. We are the data processor for this data, the groomer is the controller. See our Data Processing Addendum for details on that relationship.
3. What we collect
From groomers
- Account info: name, email, password (stored hashed), business name, business phone, business address.
- Billing info: billing address and tax ID, handled by Stripe; card numbers never reach our servers.
- Operational data: services and pricing, business hours, time-off blocks, deposit policy, branding (logo upload).
- Usage data: log timestamps, IP address, browser, which features you use, to operate the service and detect abuse.
From pet parents (collected via the groomer)
- Contact info: name, phone number, optional email.
- Pet info: name, breed, weight, size, coat condition, vaccination expiration date, behavior notes.
- Photos: photos uploaded during the AI intake and before/after grooming report-card photos.
- Appointment data: service requested, date/time, address, price, payment method, tip, status, notes.
- Messaging metadata: SMS delivery status, opt-in/opt-out state.
4. How we use it
- To run the service the groomer subscribed to.
- To generate AI quote estimates from intake photos (via Anthropic Claude). Photos and notes are sent to the AI provider but are not used by Anthropic to train models, see the Sub-processors section below.
- To send transactional SMS (appointment reminders, departure SMS, receipts, review requests) on behalf of the groomer to their customers.
- To bill the groomer for their subscription.
- To detect abuse, fraud, and security incidents and to defend our legal rights.
- To improve the product, in aggregated and de-identified form. We do not sell or rent personal data to third parties for advertising or any other purpose.
5. Legal bases (EU/UK users)
If you are in the EU/UK, our legal bases for processing are: contractual necessity (delivering the service you signed up for), legitimate interest (security, abuse prevention, product improvement), legal obligation (tax records, retention for chargebacks), and consent (where you've explicitly opted in, e.g. marketing emails, which we don't currently send).
6. Sub-processors
BookyTails relies on a small set of vendors to operate. Each one receives only the data necessary for their function and is contractually bound to security and confidentiality terms.
- Supabase (USA), Postgres database, authentication, object storage. Hosts most of our application data.
- Vercel (USA), application hosting, edge network, DDoS protection.
- Stripe (USA), subscription billing. Handles all card data; we never see card numbers.
- Anthropic (USA), Claude AI for intake photo analysis, quote estimation, and receipt OCR. Anthropic does not train models on data sent via our API.
- Brevo (France), transactional SMS delivery for appointment reminders and customer-facing messages.
- Cloudflare (USA), DNS resolution for bookytails.com.
We update this list as our infrastructure evolves. The version above is the current canonical list.
7. International transfers
BookyTails is operated from the USA, and most sub-processors are also US-based. Brevo is based in the EU. If you access the service from outside these regions, your information may be transferred to and processed in the US under appropriate safeguards (Standard Contractual Clauses where applicable).
8. How long we keep it
- Active accounts: for as long as the account is active, plus 90 days after cancellation to allow recovery.
- Billing/tax records: 7 years (US tax recordkeeping requirement).
- Customer photos: retained while the appointment exists; deleted within 90 days when an appointment is hard-deleted.
- SMS message logs: 12 months for delivery debugging and chargeback defense.
- Backups: rolling 30-day backups in our Supabase database; deletions propagate within that window.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, port, or restrict processing of your personal information. California residents have rights under the CCPA/CPRA (including the right to know what categories of personal info we collect and the right to delete). EU/UK residents have rights under the GDPR. To exercise any of these rights, email privacy@bookytails.com from the email associated with your BookyTails account. We will respond within the timeframe required by law (45 days in California; 30 days in the EU/UK).
If you are a pet parent (a groomer's customer), please direct deletion or correction requests to your groomer first; they are the controller of that data. We will assist them in fulfilling your request.
10. Security
We take reasonable and industry-standard measures to protect your data: encryption in transit (TLS 1.2+) and at rest (AES-256, provided by Supabase), strict role-based access in our database (Postgres Row Level Security), and quarterly review of vendor security postures. Read more on our Security page.
11. Children
BookyTails is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has submitted information through our service, contact us and we will delete it.
12. Changes to this policy
We'll update this page when our practices change. The “Last updated” date at the top of this policy reflects the most recent change. For material changes that affect groomer accounts, we'll also email registered account holders at least 30 days before the change takes effect.
13. Contact
Privacy questions, rights requests, or concerns: privacy@bookytails.com. General support: support@bookytails.com.