Privacy policy
Last updated: 15 September 2026
About this policy
This policy explains how Citapami handles personal information when you visit our website, use our booking software, or connect Google Calendar. The business you book with determines how it uses your booking information. Citapami processes booking information to provide the software to that business.
Information we process
Account and business information includes names, email addresses, login credentials, team members, services and availability. Booking information can include customer names, email addresses, telephone numbers, appointment details, class attendance and messages used to arrange a booking. Technical information includes device and browser details, activity events, diagnostic logs and marketing referral information.
Why we use information
We use information to create and secure accounts, provide scheduling and customer self-service, deliver booking messages, support users and diagnose problems. Where applicable, processing is based on performing our agreement, legal obligations, legitimate interests in operating and securing the service, or consent. Businesses are responsible for establishing the appropriate basis for their customer processing.
Google Calendar
Connecting Google Calendar is optional. We request access to your calendar list so you can choose a destination, and calendar event access to create, update and remove Citapami booking events. Exported events may include customer names, service details, times and class attendee information. Access and refresh tokens are stored encrypted. The integration exports from Citapami to Google; editing Google Calendar does not change Citapami availability. You can disconnect in Citapami or revoke access through your Google Account. Disconnecting does not necessarily remove events already exported to Google.
Google user data
Google user data is used to provide the calendar integration you request. It is not sold, used for advertising, or used to train general-purpose artificial intelligence models. Citapami’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.
Service providers and sharing
Providing the service involves infrastructure and database providers, email delivery, WhatsApp messaging and optional Google Calendar. The implementation uses Cloudflare, Turso, Resend, Meta/WhatsApp through Kapso, and PostHog analytics when configured. Booking information is available to the business handling your booking and its authorised team. Information may also be disclosed when required by law or necessary to protect the service and its users.
Cookies and analytics
Authentication uses cookies and related storage. The website and application can use PostHog for usage analytics and browser storage for referral attribution. Browser controls can restrict cookies and storage; doing so may affect sign-in and other features.
Retention and security
Information is retained for the purposes described here, including providing an active account, handling support and disputes, and meeting legal obligations. Retention depends on the type of record and the business’s instructions for booking data. Deletion requests may be subject to legal retention requirements and backup cycles. We use access controls and encrypted transport; no system can guarantee absolute security.
Your choices and rights
Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your information, object to processing, or withdraw consent. For information held by the business you booked with, contact that business first. You may complain to your local data protection authority. Changes to this policy will be reflected in the date above.
Contact
For privacy questions, data requests or help with the service: info@citapami.com.