Privacy Policy
Last updated: July 29, 2026
1. What we collect
Merchant accounts: Company name, email address, and password when you register. We also store your Stripe account ID when you connect payments.
Customer bookings: When a customer books through a merchant's widget, we collect their name, email, phone number, service address, and booking details. Payment card information is collected and stored solely by Stripe — we never see or store raw card numbers.
2. How we use it
- Operate and improve the booking platform
- Send booking confirmation emails to customers
- Process payments through Stripe
- Provide merchants with their booking dashboard
- Send product updates and receipts to merchants (you can unsubscribe)
We do not sell your data to third parties.
3. Data sharing
We share data only with:
- Stripe — payment processing. See Stripe's Privacy Policy.
- Supabase — database hosting. Data is stored in secure, encrypted US-based servers.
- Resend — transactional email delivery.
- The relevant merchant — customers' booking details are visible to the merchant whose widget was used.
4. Cookies
We use a single session cookie to keep you logged in to your merchant dashboard. The booking widget embedded on third-party websites does not set tracking cookies.
5. Data retention
Booking records are retained for 3 years to support merchant accounting needs. Merchant accounts and associated data are deleted within 30 days of account closure upon request.
6. Your rights
You may request a copy of your data, correction of inaccurate data, or deletion of your account by emailing hello@tryliftwell.com. We will respond within 30 days.
7. Security
We use industry-standard encryption in transit (TLS) and at rest. Payment data is handled exclusively by Stripe, which is PCI DSS Level 1 certified. We conduct regular security reviews of our codebase.
8. Contact
Privacy questions: hello@tryliftwell.com