Privacy Policy
Last updated:
This Privacy Policy explains how Clint Labs ("Bookingpod", "we", "us") handles personal information when you use Bookingpod: this website, the public restaurant booking and event pages, the operator application, and related emails (the "Service"). It applies to guests who book or buy tickets, to restaurant owners, managers, and staff, and to people who contact us.
We collect only what we need to run reservations and events. We do not sell personal information, we do not share it for cross-context behavioral advertising, and the Service does not use advertising or analytics trackers.
1. Our role
When you book a table or buy a ticket, you deal with the restaurant or event organizer (the "Business"). We process your reservation and ticket information on the Business's behalf, to provide the Service to it. The Business decides how it uses that information for its own purposes, under its own privacy notice. For account, security, billing, and website information, Bookingpod decides how the information is used.
2. Information we collect
Guests making a reservation:
- full name, email address, and phone number;
- date, time, party size, chosen dining area, any notes you add, and your preferred language;
- the reservation's status and history, such as confirmation, seating, completion, cancellation, or no-show, including which Business account made each change.
Guests buying or receiving tickets:
- full name and email address, the event, the tickets and amounts ordered, and check-in records;
- payment references from Stripe. Card details are entered on Stripe's checkout and are never received or stored by Bookingpod;
- short-lived one-time codes sent to your email to confirm access to your tickets.
Restaurant owners, managers, and staff:
- name, email address, and a password, which we store only as a secure hash;
- your organization, Businesses, roles, and permissions;
- a record of the reservation and event actions taken with your account, and sign-in attempts for security;
- the Business information you publish, such as name, address, contact details, hours, images, floor plans, and events.
Technical and security information:
- IP address, browser type, and request details, processed to deliver pages, prevent abuse, and keep request logs. Our logs are designed to exclude guest details, passwords, and access tokens;
- an anonymous identifier stored in a cookie and kept on our servers only in hashed form, used to limit repeated booking attempts;
- signals from Cloudflare Turnstile that help tell people from automated bots on booking, ticket, and sign-in forms.
When you email us, we receive your name, email address, and whatever you include in your message.
3. How we use information
- to create, confirm, change, and manage reservations and ticket orders, and to show them to the Business you booked with;
- to send operational emails, such as reservation confirmations and updates, tickets, and access codes, to guests and to the Business;
- to process ticket payments through Stripe;
- to operate accounts, permissions, and sign-in, and to keep an audit trail of changes;
- to prevent fraud, abuse, fake reservations, and automated attacks, and to keep the Service secure;
- to calculate fees, resolve billing disputes, and monitor reservation integrity, as described in our Terms of Service;
- to answer your questions and, for restaurant owners who contact us, to discuss the Service;
- to comply with legal obligations and enforce our Terms of Service.
Bookingpod does not send marketing emails to guests. A Business that wants to send you marketing must obtain any consent required by law.
6. How long we keep information
- Reservation and ticket records, and their change history, are kept while the Business uses Bookingpod and afterwards for as long as needed for billing, disputes, accounting, and legal obligations.
- Copies of sent emails in our delivery queue are deleted after 30 days; messages that could not be delivered are deleted after 90 days.
- Ticket access codes and sessions expire within minutes; sign-in sessions expire after 14 days.
- Account information is kept while the account is active and deleted or anonymized within a reasonable time after it is closed, unless we must keep it longer by law.
7. Security
We protect information with encryption in transit, hashed passwords, hashed access tokens, access controls limited to authorized Businesses and staff, bot protection, rate limits, and audit trails. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as required by law.
8. Your choices and rights
Depending on where you live, including under the laws of California and other U.S. states, you may have the right to know what personal information we hold about you, to get a copy, and to ask us to correct or delete it. We will not discriminate against you for exercising these rights.
If your request concerns a reservation or ticket, we may refer it to, or handle it together with, the Business you booked with. To make a request, email business@clintlab.com. We will verify your request, usually by confirming control of the email address involved, and respond within the time the law requires. An authorized agent may make a request on your behalf with proof of authorization.
9. Children
The Service is not directed to children under 13, and we do not knowingly collect their personal information. Restaurant accounts require users to be at least 18. If you believe a child has given us personal information, contact us and we will delete it.
10. Where information is processed
Bookingpod is operated from, and primarily stores information in, the United States. If you use the Service from another country, your information will be transferred to and processed in the United States and other places where our service providers operate.
11. Changes to this Policy
We may update this Policy. We will change the "Last updated" date and, for material changes, notify restaurant account holders by email or in the app before the changes take effect.
12. Contact
Questions or requests about privacy: business@clintlab.com.