Privacy policy

1. What this policy covers

NotaryBook is a booking platform for mobile notary, Live Scan and apostille businesses. This policy explains what data we collect when you sign up, when a customer books through a NotaryBook business, and when a visitor lands on the marketing site.

It does not cover the businesses that use NotaryBook. Each business is the controller of the data its own customers give it; their own privacy practices apply to anything they collect directly.

2. Data we collect

To run the service we store: your account email and password hash; your business profile (name, address, hours, services, prices); the booking records created through your site; the documents customers upload for an order (held only for that order); and the operational messages we send and receive on your behalf.

When you contact us through the contact form we store what you submitted and the source IP address, used only to answer you and to keep spam out.

On the marketing site we use Plausible Analytics, which is cookie-free and does not identify individual visitors. We see page paths and referrers; we do not see who you are.

3. How we use it

We process the data above only to operate NotaryBook: rendering your site, taking bookings, sending confirmations and reminders, taking payments through Stripe, syncing with your Google Calendar if connected, and answering support requests.

Uploaded documents are held only for the order they belong to; they are deleted when the order is completed or, on request, sooner.

4. Who else sees it

Our service providers — hosting, transactional email, SMS and voice, payments — process data under written agreements that restrict them to running the service. They do not use it for their own marketing.

We do not sell your data or your customers' data. We do not share it with advertisers. Law-enforcement requests are honoured only when we are legally required to, and we will tell you when we can.

5. Retention

Bookings and customer records are kept for as long as the account is active plus a 24-month grace period so a returning customer is recognised. You can export and delete earlier.

Contact-form submissions are kept for 12 months. Uploaded documents are deleted when the order completes, or sooner on request. Backups follow a 14-day rolling retention.

6. Your rights

You can export the data on your account from the admin dashboard at any time. You can ask us to delete the rest; we will confirm within 30 days. California residents have the rights described in the CCPA, including the right to know and the right to delete; we honour them.

7. Contact

Questions about this policy, or a request to export or delete data: see the contact page for the current address.