Privacy Policy

Businesses (our customers) sign up for ZOROLIQ to run their bookings. For their own account information, ZOROLIQ is responsible for that information.

Clients book appointments with those businesses through ZOROLIQ booking pages. Client information belongs to the business the client booked with. ZOROLIQ stores and processes it on the business’s behalf and only to provide the service to that business. If you’re a client with a question about your information, please contact the business you booked with first. We’ll help them respond.

From businesses and their team members: name, email, phone, business name and address, time zone, login details (passwords are stored hashed by our authentication provider, never in plain text), staff details and photos, services, prices, settings, logo and cover photos, and subscription and billing status.

From clients (on behalf of the business): name, email, phone number, appointment details, answers to the business’s intake questions, consent forms the client signs (the form text, the name typed, the drawn signature, the date and time, and the IP address and browser used to sign), notes the business adds, visit history, and checkout records (amounts, tips, discounts and how you paid).

Payments: card payments (booking deposits and ZOROLIQ subscriptions) are processed by Stripe. ZOROLIQ never sees or stores full card numbers. We receive limited details such as payment status, amount and a reference ID.

Technical information: basic logs our hosting providers keep automatically (such as IP address, browser type and request times) for security and troubleshooting, and cookies that are strictly necessary to keep you signed in. We don’t use advertising or tracking cookies.

• To provide the service: showing availability, creating and managing bookings, confirmations, reminders, follow-up and review emails the business has turned on, receipts, reports and inventory.
• To take deposits and subscription payments through Stripe, and to issue refunds.
• To keep accounts secure, prevent fraud and abuse, and fix problems.
• To contact businesses about their account, billing and important changes.
• To meet legal, tax and accounting obligations.

We don’t sell personal information, and we don’t use client information for our own marketing.

We share information only with providers that help us run ZOROLIQ, under agreements that limit how they can use it:

• Supabase: database, file storage and sign-in.
• Vercel: website and application hosting.
• Stripe: payments, deposits, refunds and subscriptions.
• Resend: sending emails such as confirmations, reminders and receipts.

Some of these providers store or process information outside Canada, including in the United States, where it may be accessible to authorities under local law.

Each business’s data is kept separate from every other business at the database level. Within a business, access follows the roles the owner sets: owners and managers can see all clients and bookings, and employees see only their own bookings and the clients booked with them.

We keep business and client information for as long as the business’s account is active, so they can see visit history. When a business closes its account, we delete or anonymize its data within a reasonable period, except records we must keep for legal, tax or accounting reasons (for example, payment records), which we keep only as long as required. Backup copies are deleted or overwritten over time.

We use encryption in transit (HTTPS), access controls, role-based permissions, encrypted booking-management links, and trusted infrastructure providers. No system is perfectly secure, but we work to protect your information and will notify affected people and regulators of a serious breach as required by law.

You can ask to access or correct your personal information, or ask us to delete it, subject to legal exceptions. You can withdraw consent to optional uses. Clients can also cancel or reschedule online, within the business’s rules, from the link in their confirmation email.

Clients: because the business controls your information, please contact the business first. You can also email us and we’ll pass your request to them.

If you’re not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or, in Alberta, the Office of the Information and Privacy Commissioner of Alberta.

ZOROLIQ isn’t intended for children to use directly. Businesses are responsible for obtaining any required consent when booking services for minors.

We may update this policy as ZOROLIQ changes. We’ll post the new version here and update the date above, and tell businesses by email about significant changes.

Questions or requests: support@zoroliq.com. See also our Terms of Service.