Legal

Privacy Policy

Effective October 11, 2026 · Version 2026-10-11

The short version

  • We collect what's needed to run bookings: names, contact details, appointment addresses and booking history.
  • Client information belongs to the business you book with. We store and process it for them.
  • We don't sell personal information, and we don't use advertising trackers or cookies for analytics.
  • Our service providers store data in the United States.
  • You can access, correct, export or delete your information. Contact contact@jantr.com.

This summary is for convenience. The full text below is what applies.

1. Who we are

Jantr (https://jantr.com) is online booking and scheduling software for mobile and in-studio service businesses. It is operated by jantr ( “Jantr”, “we”, “us”), 123 abc street.

This policy explains how we handle personal information under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Alberta’s Personal Information Protection Act (PIPA) and applicable US state laws.

2. Our two roles

For businesses and their team members who use Jantr, we decide how your account information is used, and this policy applies directly.

For clients who book with a business through Jantr, the business decides what it does with your information. We store and process it on the business’s behalf, under our agreement with them, to provide the booking service. For questions about how a business uses your information, contact that business. If you contact us, we’ll pass your request on to them and help them respond.

3. Information we collect

Business accounts and team members

  • Name, email address and password (stored only as a secure hash).
  • Business details: business name, booking-page address, description, contact email and phone, website, logo and colours, time zone, region, and policies such as cancellation windows.
  • Locations (addresses and coordinates), services, prices, working hours and travel-fee settings.
  • Team member profiles: display name, bio, photo, working hours and, if entered, a home base address used to plan travel.

Clients

  • Name, email address and phone number.
  • Appointment address, including unit or hotel room number and any access notes you give (for example a buzzer code or parking instructions).
  • Booking details: the service, provider, date and time, price and travel fee, and status.
  • Notes that the business’s staff add about you, which only they can see.

Automatically

  • Sign-in sessions, including the IP address and browser type used to sign in, so you can see and end sessions and we can detect misuse.
  • IP addresses, kept briefly to limit repeated requests and prevent abuse.
  • Anonymous page-view statistics (see Cookies and analytics below).
  • Records of emails we send you, including their content, so we can deliver and retry them.
  • A log of important account actions (for example changes to permissions) for security.

Please don’t give us health information. Jantr isn’t designed to store medical or health records, and our terms prohibit businesses from using it for that. The name of a service you book (for example “prenatal massage”) may still suggest something about your health; see our Consumer Health Data Privacy Policy.

4. How we use information

  • To provide the service: show availability, calculate prices and travel fees, create and manage bookings, and plan providers' routes.
  • To send messages you'd expect: sign-in codes, booking confirmations, changes, cancellations, reminders and team invitations.
  • To keep Jantr secure: authenticate users, prevent fraud and abuse, and investigate reports.
  • To understand overall use of the website and improve it, using anonymous statistics.
  • To meet legal obligations and enforce our terms.

We don’t send marketing emails. If we ever do, we’ll ask for your consent first and include a way to unsubscribe, as Canada’s anti-spam law (CASL) requires.

We don’t sell personal information, share it for cross-context behavioural advertising, or use it to make decisions about you by automated means that have legal or similarly significant effects.

6. Who we share information with

  • The business you book with, and the team members it authorizes, see your booking and contact details.
  • When you book with a business, you see its public details and your provider's name.
  • Our service providers (below) process information for us under contracts that require them to protect it and use it only to provide their service.
  • Authorities, when the law requires it, or when necessary to protect someone's safety, investigate fraud, or enforce our terms.
  • A buyer or successor, if Jantr is sold or transferred, who would have to keep honouring this policy.

Service providers

Provider
Vercel Inc.
What they do
Website and application hosting, privacy-friendly page-view analytics
Data involved
All data processed by the app while serving requests; IP address
Location
United States
Provider
Neon (Databricks, Inc.)
What they do
Database hosting
Data involved
All stored account, business, client and booking data
Location
United States
Provider
Resend, Inc.
What they do
Sending email (sign-in codes, booking confirmations and reminders)
Data involved
Recipient name and email address, email content
Location
United States
Provider
Google LLC (Google Maps Platform)
What they do
Address search and drive-time estimates
Data involved
Addresses typed into address search; coordinates of appointment locations
Location
United States

The current list is also on our subprocessors page.

7. Storage outside Canada

Our service providers store and process information in the United States. While it is there, it is subject to US law and may be accessible to US courts, law enforcement and national security authorities. We choose providers with strong security practices and contractual protections. If you have questions about our practices or our service providers, contact our privacy officer.

8. How long we keep information

  • Account information: until you delete your account.
  • Business information, including client records and bookings: while the business account is open, then deleted 30 days after the business is closed.
  • Sign-in sessions: up to 30 days, then deleted.
  • Sign-in codes: expire after 10 minutes and are then deleted.
  • Email delivery records, including message content: 90 days.
  • IP addresses used to limit repeated requests: deleted within a day.
  • Security log of account actions: 2 years.

Deleted information may remain in encrypted database backups for a short time until those backups expire. A business can delete or anonymize a client’s record at any time.

9. How we protect information

We use encryption in transit (HTTPS), hashed passwords, access controls based on each person’s role, limits on repeated sign-in attempts, and providers with industry security certifications. Team members only see the information their role allows. No system is perfectly secure; if a breach of security safeguards creates a real risk of significant harm to you, we’ll notify you and the relevant privacy regulators as the law requires.

10. Cookies and analytics

We use only the cookies needed to keep you signed in and remember simple display preferences. Our page-view statistics (Vercel Web Analytics) use no cookies, don’t track you across websites, and we remove secrets and personal details (such as booking links and email addresses) from the page addresses they record. We don’t use advertising pixels or session recording. Details are in our Cookie Policy. Because we don’t track you across sites, we don’t change our behaviour in response to browser “Do Not Track” signals.

11. Your rights

You can ask to:

  • access the personal information we hold about you and learn how it's been used and shared;
  • correct information that's inaccurate or incomplete;
  • get a copy of your information in a portable format;
  • delete your information, subject to legal requirements to keep some records;
  • withdraw consent (see Consent above).

Signed-in users can download their data and delete their account from the account page. For anything else, email contact@jantr.com. We’ll verify your identity and respond within 30 days, and tell you if we need more time as the law allows. If your request is about a client record held by a business, we’ll forward it to that business.

Depending on where you live (for example California, Colorado, Connecticut, Virginia, Texas or Oregon), you may have similar rights under state law, including the right to appeal our decision on your request by replying to our response. We don’t discriminate against anyone for using their privacy rights.

If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or the Office of the Information and Privacy Commissioner of Alberta (oipc.ab.ca).

12. Children

Jantr isn’t directed to children. You must be at least 18 (or the age of majority where you live) to create an account. Bookings for a minor must be made by a parent or guardian. We don’t knowingly collect information directly from children under 13; if you believe we have, contact us and we’ll delete it.

13. Where Jantr is available

Jantr is offered to businesses in Canada (except Quebec, for now) and the United States. It isn’t intended for use in the European Union or the United Kingdom.

14. Changes to this policy

We’ll post any changes here with a new effective date. If a change is significant, we’ll tell account holders by email or in the app before it takes effect.

15. Contact our privacy officer

jantr is responsible for Jantr’s compliance with this policy. Email contact@jantr.com or write to jantr, 123 abc street.