This Privacy Policy describes how Development Technologies Hub LLC ("Company," "we," "us," or "our"), a Utah limited liability company, collects, uses, and shares information when you use the Corterra Book platform ("Service"). By using the Service, you agree to the practices described in this policy.
1. Who This Policy Covers
This policy applies to two groups of people:
- Tenants — businesses and individuals who subscribe to Corterra Book to manage their appointments, availability, and customers.
- End Customers — people who book appointments through a Tenant's booking page hosted on the Service.
Tenants act as independent data controllers for the personal information they collect about their End Customers. We process that data on their behalf as a service provider.
Some Tenants publish branded mobile apps powered by the Corterra Book platform. If you downloaded a mobile app that displays a business's own name and branding, that app is built on Corterra Book infrastructure. Your data in that app is handled under this Privacy Policy even though the app shows the business's branding rather than Corterra Book's.
2. Information We Collect
2.1 Information You Provide
- Tenant account data — name, business name, email address, password, and billing information collected during sign-up and account management.
- End Customer booking data — first name, last name, email address, and/or phone number submitted when booking an appointment. If a customer provides a phone number and checks the SMS opt-in checkbox, we also record that explicit consent.
- Communications — messages you send us via email or contact forms.
2.2 Information Collected Automatically
- Log data — IP address, browser type and version, pages visited, time and date of access, and referring URLs.
- Device information — operating system, device type, and screen resolution.
- Heatmaps — on our marketing website and blog only (never on the booking pages of the businesses that use our Service), our self-hosted analytics records where on a page visitors click and how far down they scroll, so we can see which parts of a page get attention. It records positions only: nothing you type, no screenshots of the page, and no recordings of individual visits. It stores nothing on your device.
- Cookies and similar technologies — session cookies used to keep you logged in and maintain booking flow state, and, on our marketing website and blog only, one first-party analytics cookie described in Section 6. We do not use third-party advertising cookies.
- Mobile authentication tokens — when you use a Corterra Book-powered mobile app, a JSON Web Token (JWT) is stored on your device to keep you logged in between sessions. This token identifies your account and is transmitted with requests to the Service. It is not shared with third parties.
- Mobile device information — when you access the Service through a mobile app, we may collect your device's operating system version and device model to support app compatibility and troubleshooting.
2.3 Payment Information
Tenant subscription payments are processed by Stripe. We do not store full credit card numbers or bank account details on our servers. Stripe's handling of payment data is governed by Stripe's Privacy Policy.
End Customer payments are collected directly by the Tenant (in person). We do not process or store End Customer payment information.
3. How We Use Information
We use the information we collect to:
- Provide, operate, and improve the Service;
- Process Tenant subscriptions and send billing-related communications;
- Send appointment confirmation, reminder, and cancellation emails on behalf of Tenants;
- Send automated SMS appointment reminders on behalf of Tenants to End Customers who have explicitly opted in at the time of booking;
- Respond to support requests and inquiries;
- Detect and prevent fraud, abuse, or security incidents;
- Comply with legal obligations.
We do not sell personal information to third parties. We do not use End Customer booking data for our own marketing purposes.
4. How We Share Information
We share information only in the following circumstances:
- Service providers — we share data with vendors who help us operate the Service, including Stripe (payment processing), Resend (transactional email), and Twilio (SMS appointment reminders). These providers are contractually required to protect your data and may only use it to perform services for us.
- Tenants — End Customer booking information is visible to and controlled by the Tenant whose booking page was used.
- AI apps a Tenant connects — a Tenant's owner can connect an AI app, such as ChatGPT or Claude, to their account. Only the owner can connect one, and they can disconnect it at any time from their dashboard. Once connected, the app can read the Tenant's business information when the owner asks it to, including End Customer details, booking history and forms they have filled out, and can change it only if the owner allows that. Revenue figures are shared only if the owner turns that on. No payment can be taken, refunded or moved through a connected app. The app provider handles what it receives under its own privacy policy; we do not control it.
- Legal requirements — we may disclose information if required by law, court order, or government authority, or to protect the rights, property, or safety of the Company, our users, or the public.
- Business transfers — if the Company is acquired or merges with another entity, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
- App store platforms — mobile apps powered by Corterra Book are distributed through the Apple App Store and Google Play Store. Apple and Google may collect their own usage and diagnostic data pursuant to their respective privacy policies. We do not control that collection.
5. Data Retention
We retain Tenant account data for as long as your account is active or as needed to provide the Service. After account closure, we retain data for up to 90 days before deletion, unless a longer period is required by law.
End Customer booking records are retained for as long as the associated Tenant's account is active. Tenants may delete customer records at any time from their admin console.
6. Cookies
We use session cookies to keep you logged in and to store booking flow selections (such as date, time and service). These are deleted when your browser session ends.
On our marketing website and blog (never on the booking pages of the businesses that use our Service), we also set one first-party analytics cookie. It holds a random identifier so our self-hosted analytics can tell when the same browser visits more than once, and which pages lead to a sign-up. It contains no name, email address or other information you give us, it is not shared with anyone, and it expires after one year. We do not use third-party advertising cookies or tracking pixels.
You can set your browser to refuse or delete cookies. Refusing the analytics cookie does not affect how the site works. Refusing session cookies may stop the booking flow from working.
7. Security
We implement reasonable technical and organizational measures to protect information against unauthorized access, loss, or disclosure. These include encrypted connections (TLS), hashed passwords, and access controls. No method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
The Service is not directed to children under 13 years of age, and we do not knowingly collect personal information from children under 13. If we learn that we have inadvertently collected such information, we will delete it promptly.
9. Your Rights and Choices
Depending on your location, you may have rights regarding your personal information, including the right to access, correct, or delete data we hold about you. To exercise these rights, contact us at support@corterrabook.com. We will respond within a reasonable time.
End Customers: requests to access or delete booking data should be directed to the Tenant whose booking page you used. We will assist Tenants in responding to such requests as required by applicable law.
Unsubscribe: you may opt out of non-transactional emails at any time by clicking the unsubscribe link in any such email or contacting us directly. Transactional emails (such as booking confirmations) cannot be disabled while your account or booking is active.
10. SMS / Text Message Reminders
Tenants may enable automated SMS appointment reminders for their customers. The following applies when this feature is in use:
- Consent: SMS reminders are sent only to End Customers who explicitly opt in by checking an unchecked-by-default checkbox on the booking details step. The checkbox and all disclosures are shown only after the customer enters a phone number. Consent is collected per booking — customers re-consent each time they book.
- Message content: Messages are appointment reminders only. No marketing or promotional content is sent via SMS.
- Frequency: No more than one SMS reminder is sent per booking. Message frequency varies based on the number of appointments booked.
- Carrier charges: Message and data rates may apply depending on the recipient's mobile carrier plan.
- Opt-out: Reply STOP to any reminder message at any time to opt out. Reply HELP for help. Opting out unsubscribes the phone number from future reminders.
- Delivery: SMS messages are delivered via Twilio. Carriers are not liable for delayed or undelivered messages.
- No sharing: Phone numbers collected for SMS reminders are not sold or shared with third parties for marketing purposes.
For full details on the opt-in form and disclosures shown to customers, see our SMS Opt-In Disclosure page.
11. Third-Party Links
The Service may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to review their privacy policies.
12. Governing Law
This Privacy Policy is governed by the laws of the State of Utah, without regard to its conflict-of-law provisions.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or by email at least 14 days before the changes take effect. Your continued use of the Service after the effective date constitutes your acceptance of the revised policy.
14. Contact
Questions or concerns about this Privacy Policy?
Development Technologies Hub LLC
Email: support@corterrabook.com
Website: corterrabook.com