Privacy Policy

1. Scope

This Privacy Policy applies to the Vee's Nail Studio website at veenailstudio.ca, the booking portal at booking.veenailstudio.ca, client accounts, appointment services, booking-related emails, and the studio's Google Calendar integration.

2. Information We Collect

Account and contact information

We may collect your name, email address, phone number, account login information, profile image, provider identifier, and optional profile details.

Booking and appointment information

We collect appointment dates and times, selected services, pricing options, design details, removal requests, notes, cancellation requests, booking status, and appointment history.

Deposit and payment-related information

We may store the deposit amount, payment method, whether an e-transfer was marked as sent or received, refund or credit status, final amount due, and payment notes. We do not intentionally collect full banking credentials through the booking portal.

Technical information

We may process IP addresses, device and browser information, timestamps, security events, and operational logs to run, secure, and improve the service.

3. Google User Data

If a client signs in with Google, we may receive basic account information that Google makes available with consent, such as the client's name, email address, profile image, and Google account identifier. We use this information only to authenticate the client and operate their booking account.

An authorized studio administrator may separately connect a Google account to the studio's calendar integration. The integration requests permission to view the administrator's calendar list and to create, update, and delete events on a calendar the administrator selects. We use this access only to list writable calendars and synchronize Vee's Nail Studio availability and appointment events.

For the calendar integration, we may store the connected account's email address, selected calendar identifier and name, an encrypted OAuth refresh token, identifiers for events created or managed by the booking portal, and sync status information. Short-lived access tokens are used to call Google's APIs and are not intentionally stored in our database.

The booking portal does not use Google user data for advertising, credit decisions, data brokerage, or training generalized artificial intelligence or machine learning models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

4. How We Use Information

• Create, authenticate, and manage client accounts.
• Process appointment requests, confirmations, cancellations, rescheduling, deposits, credits, and refunds.
• Display appointment details and history to clients and authorized studio administrators.
• Send authentication, booking, reminder, cancellation, and administrative emails.
• Synchronize studio availability and appointments with the studio's selected Google Calendar.
• Maintain security, prevent fraud, troubleshoot errors, and meet legal, tax, accounting, and dispute-resolution obligations.

5. Sharing and Disclosure

We do not sell or rent personal information or Google user data. We disclose information only as needed to provide and secure the service, including to:

• Authorized Vee's Nail Studio administrators who manage appointments.
• Service providers that support hosting, database, authentication, storage, email delivery, and security, including Vercel, Supabase, and Brevo.
• Google when a user chooses Google sign-in or an administrator uses the Google Calendar integration.
• Professional advisers, authorities, or other parties where required by law or reasonably necessary to protect legal rights and safety.

Service providers process information on our behalf and are not authorized by us to use it for unrelated purposes.

6. Security

We use reasonable administrative, technical, and organizational safeguards, including encrypted connections, encryption of stored Google OAuth refresh tokens, role-based access controls, database row-level security, audit logging, and limiting administrative access to authorized users. No transmission or storage method is completely secure, so we cannot guarantee absolute security.

7. Retention, Deletion, and Revoking Google Access

We retain information only as long as reasonably necessary for the purposes described in this policy and for legal, accounting, security, operational, and dispute-resolution requirements. Booking history, payment records, policy acceptances, and audit records may be retained where reasonably necessary for those purposes.

You may request access to, correction of, or deletion of your personal information by emailing admin@motchi.ca. We may need to verify your identity and may retain information when required by law or for legitimate security, accounting, or dispute-resolution needs.

A studio administrator can disconnect the calendar integration in the booking portal. A Google user can also revoke the app's access from their Google Account connections. When the integration is disconnected, the stored OAuth token is deleted from the active integration record.

8. Children

The booking portal is not intended for children to create accounts without appropriate consent. If we learn that we collected a child's information without appropriate consent, we will take reasonable steps to delete or restrict it where required.

9. International Processing

Some service providers may process or store information outside Ontario or Canada. Information processed elsewhere may be subject to the laws of that jurisdiction.

10. Changes to This Policy

We may update this Privacy Policy as our services or data practices change. We will publish the updated policy on this page with a revised effective date and provide additional notice where required.

11. Contact

For privacy questions, requests, or concerns, contact Vee's Nail Studio at admin@motchi.ca.