Privacy Policy

Last updated:

PurpleCal is operated by H.R. Solomon IT Consulting LLC ("we," "us," or "our"), which is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our scheduling and booking platform.

1. Information We Collect

We collect information you provide directly to us, including:

  • Account information: name, email address, and password when you create an account.
  • Business information: business name, location addresses, and team member details.
  • Booking information: appointment dates, times, services, and contact details (name, email, phone number) provided by customers when booking an appointment.
  • Contact list information: where a business using the Service uses our marketing email features, it may provide us with contact details — name, email address, and phone number — for people it intends to email. These details may be entered directly, collected when someone books an appointment, or imported in bulk. The business decides who appears on its contact lists and what it sends them.
  • Payment information: billing details processed securely through our payment provider, Stripe. We do not store full payment card details.
  • Verification information: where you collect payments from your customers, Stripe collects identity and business verification details directly from you as part of its onboarding and compliance checks. We receive the resulting verification status and account requirements, not the underlying identity documents.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain our scheduling platform.
  • Send appointment confirmations, reminders, and notifications by email, and appointment reminders and updates by SMS when you have opted in.
  • Deliver marketing email campaigns on behalf of businesses using the Service, and record the delivery outcome of each message so that the business can see what happened and so that we can suppress addresses that should no longer be contacted.
  • Process payments and manage subscriptions.
  • Respond to customer support requests.
  • Improve and develop our services.
  • Detect, investigate, and prevent fraud, abuse, and security incidents, and to protect our users, our payment processor, and ourselves from loss.
  • Comply with legal obligations.

3. SMS Messaging

We send SMS messages only to customers who opt in. You opt in by checking the SMS consent box on a booking form and providing your mobile number; providing a phone number alone does not opt you in. SMS is used only for appointment reminders, and for updates when an appointment is cancelled or rescheduled. These messages are sent by PurpleCal about appointments you book through it. See our SMS Messaging Terms for details.

Message frequency varies based on your appointment schedule. Standard message and data rates may apply. You may opt out of SMS messages at any time by replying STOP to any message. Reply HELP for assistance.

We do not share your phone number or SMS opt-in consent with third parties or affiliates for marketing or promotional purposes.

4. Google User Data

PurpleCal integrates with Google Calendar to add PurpleCal bookings to your calendar and, when you enable conflict checking, prevent bookings during busy times. When you connect your Google account, we request access to:

  • Google Calendar data: read and write access so PurpleCal can create, update, and cancel booking events and check selected calendars for scheduling conflicts.

We use Google Calendar data solely to provide the calendar sync features you explicitly enable. We do not use this data for advertising, profiling, or any purpose unrelated to the scheduling functionality you have requested.

For conflict checking, we request only the event identifiers, timing, availability status, and response information needed to determine whether a time is busy. PurpleCal does not import external event titles, descriptions, locations, or attendee lists into your booking dashboard. Busy intervals may be cached briefly to provide responsive availability.

We do not share your Google user data with third parties except as necessary to operate the platform. We do not sell Google user data.

You may revoke PurpleCal's access to your Google account at any time via your Google Account permissions page or from your PurpleCal account settings. Revoking access will disconnect calendar sync; your existing booking data will be retained unless you delete your account.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

5. Microsoft Calendar Data

PurpleCal integrates with Outlook and Microsoft 365 calendars to add PurpleCal bookings to your calendar and, when you enable conflict checking, prevent bookings during busy times. When you connect your Microsoft account, we request access to:

  • Microsoft Calendar data: read and write access so PurpleCal can create, update, and cancel booking events and check selected calendars for scheduling conflicts.

We use Microsoft calendar data solely to provide the calendar features you explicitly enable. We do not use this data for advertising or profiling, and we do not sell it.

For conflict checking, we request only the event identifiers, timing, availability status, and response information needed to determine whether a time is busy. PurpleCal does not import external event subjects, bodies, locations, or attendee lists into your booking dashboard. Busy intervals may be cached briefly to provide responsive availability.

You may revoke PurpleCal's access at any time by disconnecting Microsoft Calendar in your PurpleCal settings, or through your Microsoft account's app permissions. Work and school accounts are managed through your organization's portal. Disconnecting ends calendar sync; your existing booking data is retained unless you delete your account.

6. Sharing of Information

We do not sell your personal information. We may share your information with:

  • Service providers: third-party vendors who help us operate our platform, including payment processing (Stripe), SMS delivery (Twilio), transactional email delivery (turboSMTP), and marketing email delivery (SMTP2GO). These providers are contractually obligated to protect your information.
  • Fraud prevention: account, booking, and transaction signals may be shared with our payment processor and other service providers to detect, investigate, and prevent fraud, abuse, and other harmful activity.
  • Legal requirements: when required by law or to protect our rights.

6a. Contact Lists and Marketing Email

Where a business uses our marketing email features, it decides who to contact and what to send. We provide the means to send and record what happened; we do not decide who receives a campaign, and we do not use contact lists for our own marketing or share them with other businesses using the Service.

A business using these features is required to have permission from each person it emails, as set out in our Terms of Service.

When a campaign is sent, we record whether the provider accepted the message, whether delivery was confirmed, and whether it was rejected or reported as spam. These records include the recipient’s email address and are retained for up to 90 days. An address that unsubscribes, permanently rejects mail, or reports a campaign as spam is suppressed for that business and cannot be re-added by importing it again.

Every campaign includes a working unsubscribe link, and unsubscribing takes effect for that business immediately.

If you have received a campaign sent through the Service and want your details corrected or removed, you can unsubscribe using the link in the message, or contact the business that sent it, which controls the list. You may also contact us at support@purplecal.com and we will pass the request on.

We do not currently track whether recipients open campaigns or click links in them.

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data by contacting us.

Records of marketing email delivery received from our email provider are retained for up to 90 days. Contact lists are retained for as long as the business that provided them keeps them, and are deleted when that business deletes them or closes its account.

8. Security

We implement industry-standard security measures to protect your information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We monitor account and transaction activity for signs of fraud and abuse. Where we identify activity that presents a risk to our users, our payment processor, or ourselves, we may restrict or suspend the account involved as described in our Terms of Service.

9. Your Rights

Depending on your location, you may have the right to access, correct, or delete your personal information. To exercise these rights, please contact us.

10. Cookies

We use cookies and similar tracking technologies to operate our platform and remember your preferences. You can control cookie settings through your browser.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.

12. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at support@purplecal.com.