Privacy Policy

Last updated: 5 November 2026

1. Introduction

This Privacy Policy explains how Fintech Development Pty Ltd, trading as BookAndGo ("we", "us", "our") collects, uses, discloses, and protects personal information through the BookAndGo platform ("Platform"), accessible at bookandgo.com.au.

BookAndGo is a multi-tenant booking platform for appointment-based service businesses. This policy applies to all users of the Platform, including business owners ("Providers") and their customers ("Clients").

By using the Platform, you consent to the collection and use of your information as described in this policy.

2. Information We Collect

From Providers (Business Owners)

  • Name, email address, and phone number
  • Business name, address, and contact details
  • Services offered, pricing, and availability schedules
  • Client lists and appointment records
  • Payment and billing information (processed via Stripe)

From Clients (End Customers)

  • Name, email address, and phone number
  • Appointment history and booking preferences
  • Review text and ratings submitted for businesses
  • Messages sent via the AI chat assistant

Automatically Collected

  • Device information, browser type, and IP address
  • Authentication session data via Firebase Auth cookies

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Platform
  • Process bookings, appointments, and payments
  • Send transactional communications (confirmations, reminders, receipts) by email, and by text on paid plans
  • Power AI-assisted booking via our chat assistant
  • Generate invoices and manage billing
  • Improve the Platform through analytics and usage data
  • Respond to support enquiries and provide customer service
  • Comply with legal obligations

4. Authentication & Google Account Access

The Platform uses Firebase Authentication to manage user accounts. You may sign in using Google OAuth or an email and password combination. We do not store your Google or third-party account passwords. Authentication sessions are maintained via secure cookies.

Google Calendar Integration

BookAndGo has an optional Google Calendar integration. When a Provider chooses to connect their Google Calendar, BookAndGo requests access to the Google Calendar API (the calendar.events scope) solely to create, update, and delete calendar events that correspond to their BookAndGo appointments, so their bookings stay in sync with their calendar. This integration is entirely optional, can be disconnected at any time from Settings, and is never enabled without the Provider's explicit consent.

We access this Google user data only to provide and improve the calendar-sync feature. We do not use it for advertising, we do not sell it, and we do not allow humans to read it except where necessary for security, to comply with applicable law, or with the user's explicit consent.

Limited Use Disclosure

BookAndGo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Payments

All payment processing is handled by Stripe, which is PCI DSS compliant. BookAndGo does not store, process, or have access to your full credit card details. Payment information is collected and processed directly by Stripe in accordance with their Privacy Policy.

6. AI Chat Assistant

BookAndGo uses AI services to power AI chat assistants on business booking pages and on our own website. When you interact with these assistants, your messages are sent to that service to generate responses, in the United States. Conversation context is maintained in our database to provide continuity within a session.

7. Third-Party Service Providers

We share personal information only with trusted service providers who assist in operating the Platform. We never sell your personal information to third parties.

  • Google Cloud / Firebase - hosting, authentication, and database
  • Stripe - payment processing
  • Twilio - text messages, where used
  • SendGrid - transactional email delivery
  • AI services - AI chat assistant processing
  • Google (Places) - finding your Google listing and showing your Google rating and reviews
  • MyAndGo email service - sending email
  • Google (reCAPTCHA) - website bot protection
  • Sentry - error reports from the BookAndGo app
  • Expo - app notifications

Each provider operates under their own privacy policy and is contractually required to handle your data securely and only for the purposes of providing their services to us.

Our help centre includes how-to videos hosted on YouTube (Google, United States). A video loads from YouTube only when you press play on it, and from then YouTube receives your device's address and what you watch, under Google's privacy policy. Until you press play, nothing on the page loads from YouTube.

8. Cookies and Tracking

The Platform uses the following cookies and tracking technologies:

  • Firebase Auth session cookies - essential for maintaining your login session
  • Google Analytics 4 cookies - used to understand how users interact with the Platform

You can control cookie preferences through your browser settings. Disabling essential cookies may affect your ability to use certain features of the Platform.

9. Data Storage and Security

We store your data in Sydney, Australia. Some services run outside Australia; the New Zealand section of this policy lists them. We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, and access controls to protect your personal information.

While we take all reasonable steps to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security.

10. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide services to you. If you request account deletion, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Providers are responsible for managing the personal information of their Clients within the Platform in accordance with their own privacy obligations.

If you are a Client - someone who booked with a business that uses BookAndGo - we hold your details on that business's behalf and only to provide the booking service to them. We do not use them for our own marketing and we do not sell them. We keep them for as long as that business keeps its account, because they are that business's customer records. If the business deletes its account, your details are deleted with it, within 30 days. If the business simply stops using BookAndGo without deleting its account, we keep its records so they are intact if it returns.

To have your details removed, ask the business you booked with: they can delete you from their records directly, which erases your name and contact details and removes you from their client list. You can also write to us at support@bookandgo.com.au and we will action it with that business. We ask you to go to the business first because your records belong to their business, and they can confirm who you are - we generally cannot.

11. Your Rights

Under the Australian Privacy Act 1988, you have the right to:

  • Access - request a copy of the personal information we hold about you
  • Correction - request correction of inaccurate or incomplete information
  • Deletion - request deletion of your personal information
  • Complaint - lodge a complaint with us if you believe your privacy has been breached. If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner (privacy.org.nz).

To exercise any of these rights, contact us at support@bookandgo.com.au.

12. Children's Privacy

The Platform is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Your personal information and New Zealand's privacy law

New Zealand's Privacy Act 2020 applies to the personal information we handle for New Zealand customers. This section explains what that means for you and what you can ask of us. The rest of this policy applies to you too.

Where your personal information is held

We store your documents, records and files in Sydney, Australia, and your account details are held in Sydney too. Some services run outside Australia: sign-in (United States), payments (United States), AI assistants you choose to connect (their providers, in the United States or other countries), website bot protection (United States), our AI chat assistant (outside Australia), text messages (United States), error reports (United States), app notifications (United States), analytics on our website and in the BookAndGo app (United States), sending email (Australia or the United States), and support access (from Australia). Our New Zealand website uses Google Analytics to understand how visitors find and use the site. It records the pages viewed, the site you came from, your device and browser type and your approximate location. It never runs on any page that carries a link or code, and it uses no advertising features. Google processes this information in the United States. The BookAndGo app also uses analytics, as listed above.

Fintech Development Pty Ltd is an Australian company. We protect what we hold in Australia under our own policies and Australia's Privacy Act 1988, which protects personal information in ways comparable to New Zealand's law. Other companies that handle personal information for us outside New Zealand must protect it under their contract with us.

Who is responsible for what

For your own account details (your sign-in, profile, organisation, team members and billing), we are responsible for your personal information.

For what you put into BookAndGo, such as bookings, clients and calendars, and for the people you share it with, we hold that information on your behalf and use it only to provide BookAndGo to you. You are responsible for having the right to add and share it. If someone asks us about information you control, we pass the request to you.

Seeing and correcting your personal information

You can ask to see the personal information we hold about you, or ask us to correct it, by writing to our privacy contact below. We'll confirm who you are first and answer within 20 working days. We don't charge for these requests. You can correct most of your account details yourself in Settings.

If something goes wrong

If a privacy breach is likely to cause serious harm, we'll tell the people affected and New Zealand's Privacy Commissioner as soon as we practicably can. If it affects information we hold on your behalf, we'll tell you without undue delay.

Information from Google

If you connect your Google account, for example to sync your Google Calendar, we use the information we receive from Google only to provide that feature. BookAndGo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Questions and complaints

Write to our privacy contact with any question or complaint. We'll acknowledge it within 5 business days and answer within 20 working days. If you're not satisfied with our answer, you can complain to New Zealand's Office of the Privacy Commissioner at privacy.org.nz.

Privacy contact

Privacy officer: Andy Carey. Contact: privacy@support.myandgo.com.au.