Our Commitment
At BookingBridge AI, we respect your privacy and are committed to protecting personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information in connection with our Services, in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws in Canada.
Who This Policy Applies To
This policy applies to two groups:
- Clinic subscribers ("you") — businesses that use BookingBridge services. We collect your information to operate and deliver the platform.
- Website visitors and patients of clinics using BookingBridge — individuals who interact with the Widget on a clinic's website. For visitor data, BookingBridge acts as a service provider on behalf of the subscribing clinic. The clinic is accountable for how that data is used.
If you are a patient of a clinic using BookingBridge and have questions about your data, contact that clinic directly. You may also reach us at info@bookingbridge.ca.
What Information We Collect
From clinic subscribers
- Contact information — name, email address, phone number
- Business details — clinic name, address, services, booking links
- Billing information — processed securely through Stripe. BookingBridge never holds card data.
- Communications — support emails and onboarding information you send us
From Widget visitors (on behalf of clinics)
When a visitor chooses to submit a lead form through the Widget, the following is collected and delivered to the clinic:
- Name
- Email address or phone number
- Service interest (e.g. physiotherapy, massage)
- Preferred callback time (optional)
Conversation content between a visitor and the Widget is processed in real time by Anthropic's Claude API to generate responses. BookingBridge does not store conversation transcripts.
How We Use Information
Subscriber information is used to:
- Provide, configure, and maintain the Widget
- Manage your account and billing
- Communicate about your account, updates, and support
- Comply with legal and regulatory obligations
Visitor/lead data is used solely to deliver leads to the subscribing clinic. We do not use visitor data for our own marketing, analytics, or AI training purposes.
How We Share Information
We do not sell or rent personal information. Information may be shared only in these circumstances:
- Sub-processors — with trusted third-party vendors necessary to deliver the Services (see sub-processors section below)
- Legal requirements — when required by law, court order, or regulatory authority
- Business transfers — in connection with a merger or acquisition, with advance notice to affected parties
- With your consent — in any other circumstance, only with your explicit prior consent
Sub-Processors
BookingBridge uses the following third-party services to deliver the Widget:
- Anthropic (Claude API) — AI response generation for Widget conversations. Processed under Anthropic's privacy policy. No personal health information is transmitted.
- Cloudflare — API proxy, Widget hosting, DNS. Data processed in accordance with Cloudflare's privacy policy.
- Google (Sheets, Gmail) — Lead data logging to a clinic-owned Google Sheet and email delivery of lead alerts.
- Resend.com — Transactional email delivery for lead notifications to clinics.
- Stripe — Secure payment processing. Card data is never accessible to BookingBridge.
International Data Transfer
BookingBridge's infrastructure relies on services whose servers may be located in the United States. Data processed through the Widget may be transferred to and processed in the United States. PIPEDA permits cross-border processing when adequate safeguards are in place. BookingBridge implements safeguards through encryption, access controls, and sub-processor selection. By using our Services, you acknowledge this cross-border transfer.
CASL Compliance
Lead capture through the Widget represents visitor-initiated contact and express consent under CASL for the clinic to follow up. Clinics are responsible for maintaining consent records and honouring opt-out requests in all subsequent communications. BookingBridge is not responsible for CASL violations arising from a clinic's use of lead data.
Data Retention
- Active subscribers — account data retained for the duration of the subscription and 30 days after cancellation
- Lead data — delivered to clinic in real time. BookingBridge does not retain visitor lead submissions beyond delivery confirmation.
- Billing records — retained for 7 years in accordance with Canadian tax requirements
- Conversation data — not stored by BookingBridge. Processed in real time by Anthropic and subject to Anthropic's data retention policies.
Security
We protect personal information through:
- TLS encryption for all data in transit
- API keys stored in Cloudflare Workers environment variables — never exposed in client-side code
- No database of patient or visitor records maintained by BookingBridge
- Google Sheets access restricted to the clinic's own Google account
In the event of a security incident affecting clinic data, BookingBridge will notify affected clients within 72 hours of confirming the incident, where technically feasible.
Your Rights Under PIPEDA
You have the right to:
- Request access to personal information we hold about you
- Request corrections to inaccurate information
- Withdraw consent for specific uses
- Request deletion of your data, subject to legal retention obligations
- File a complaint with the Office of the Privacy Commissioner of Canada at priv.gc.ca
To exercise any of these rights, contact us at info@bookingbridge.ca. We will respond within 30 calendar days.
Cookies
BookingBridge's website (bookingbridge.ca) uses minimal cookies for basic website functionality. The Widget embedded on clinic websites does not set any cookies on visitors' browsers. We do not use advertising or tracking pixels on any clinic website.
Changes to This Policy
We may update this Privacy Policy from time to time. The most current version will always be posted at bookingbridge.ca/privacy. Material changes will be communicated to existing clients by email with 30 days notice.
Contact & Privacy Officer
Privacy contact: Mudit Mogla
Email: info@bookingbridge.ca
Address: Ottawa, Ontario, Canada
Website: bookingbridge.ca