Effective date: May 5, 2026 · Last updated: September 14, 2026
This Privacy Policy describes how Neptune Booking (“Neptune,” “we,” “us,” or “our”) collects, uses, and shares information when you use our websites, admin dashboard, booking tools, and related services (collectively, the “Services”). Our website is https://neptunebooking.com.
This document is provided for your convenience and does not constitute legal advice. You should have qualified counsel review it for your business, jurisdiction, and use of SMS or other regulated channels.
1. Information we collect
We may collect the following categories of information, depending on how you use the Services:
Account and contact data. For example, name, email address, business name, password (stored using industry-standard hashing—we do not store your password in plain text), and phone number if you provide one or use phone-based sign-in.
Booking and operational data. Information you or your customers submit through booking flows (such as appointment details, messages or notes tied to bookings, and configuration you enter in the dashboard).
Google Account and Calendar data (optional). If you connect Google Calendar from Admin → Integrations, we receive OAuth tokens and limited Google account profile information (such as email) needed to maintain the connection, and we access Google Calendar data as described in Section 4.
Communications. Messages you send us (for example, support requests) and related metadata.
Technical and usage data. Such as IP address, device and browser type, general location derived from IP, pages or features accessed, and diagnostic logs used to operate and secure the Services.
Payment data. If you use payment features, payment processing is typically handled by third-party processors. We may receive limited payment-related information (for example, confirmation of a transaction) but not your full card number.
2. How we use information
We use the information above to:
Provide, maintain, and improve the Services (including authentication, scheduling, notifications, and customer-facing booking experiences).
Sync confirmed bookings to a Google Calendar you choose, when you explicitly connect that integration.
Communicate with you about your account, security, product updates, and support.
Send transactional or service-related messages when appropriate (for example, booking confirmations or account alerts), in line with your settings and applicable law.
Detect, prevent, and address fraud, abuse, and technical issues.
Comply with legal obligations and enforce our terms.
3. SMS and text messages
If you opt in to receive text messages from Neptune (for example, marketing, product tips, or optional notifications), we will use the mobile number you provide for that purpose. Message and data rates may apply. Message frequency varies.
You can withdraw consent for optional marketing or non-essential texts at any time by following the opt-out instructions we provide (for example, replying STOP to a message where supported) or by contacting us. After opting out, you may still receive transactional messages strictly necessary to provide the Services, where permitted by law.
We do not sell your phone number. We may use vendors (such as telecommunications or messaging providers) solely to deliver messages on our behalf, subject to confidentiality and security obligations.
4. Google Calendar and Google user data
Connecting Google Calendar is optional. When you connect your Google account:
Access. We request permission to manage calendar events (create, update, and delete events related to Neptune bookings) and to read your calendar list so you can choose which calendar to sync into. We may also receive basic profile information such as your Google account email.
Use. We use this access solely to keep your chosen Google Calendar in sync with confirmed bookings in Neptune (for example, adding an event when a booking is confirmed and removing or updating it when a booking changes or is cancelled in Neptune).
Storage. We store OAuth access and refresh tokens, the selected calendar identifier, and Google event identifiers associated with Neptune bookings on our servers so the integration can continue to work. We do not download or permanently store the full contents of your Google Calendar beyond what is needed for that sync.
Sharing. We do not sell Google user data. We do not share Google user data with third parties for advertising or for unrelated independent products. Service providers that host or operate our infrastructure may process data only as needed to run the Services, under appropriate safeguards.
Revocation. You can disconnect Google Calendar at any time in Admin → Integrations. You can also revoke Neptune’s access in your Google Account security settings. After disconnect or revocation, we stop using Google Calendar APIs for your account and remove or invalidate stored tokens as reasonably practicable.
Google API Services User Data Policy — Limited Use. Neptune’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
5. How we share information
We may share information with:
Service providers who assist us (for example, hosting, email delivery, analytics, security, or payment processing), bound by appropriate safeguards.
Google, when you choose to connect Google Calendar, solely to authenticate and sync bookings as described in Section 4.
Legal and safety recipients when we believe disclosure is required by law, regulation, legal process, or to protect rights, safety, and security.
Business transfers in connection with a merger, acquisition, financing, or sale of assets, subject to standard protections.
We do not sell personal information for money as a primary business practice. Where required by law, we honor applicable rights regarding “sale” or “sharing” as those terms are defined locally.
6. Retention
We retain information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may differ by data category and jurisdiction. Google OAuth tokens and related sync metadata are retained while the integration remains connected, and are removed or invalidated after you disconnect or revoke access, subject to short-lived backups and logs.
7. Security
We implement reasonable technical and organizational measures designed to protect information, including protecting OAuth credentials used for Google Calendar. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export certain personal information, or to object to or restrict certain processing. You may also have the right to lodge a complaint with a supervisory authority. To exercise rights, contact us using the details below. We may need to verify your request.
For Google Calendar specifically, you may disconnect in the Neptune admin dashboard or revoke access via Google Account permissions.
9. International transfers
If you access the Services from outside the country where we operate, your information may be processed in countries that may have different data protection laws. Where required, we use appropriate safeguards for cross-border transfers.
10. Children’s privacy
The Services are not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, contact us and we will take appropriate steps.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated version and revise the “Last updated” date. For material changes, we may provide additional notice (for example, by email or a dashboard notice) where appropriate.