Legal

Privacy Policy

Effective October 26, 2026

BookingLoop is a product of Sixteen9, LLC ("BookingLoop," "we," "us"). This policy explains what information we collect through bookingloop.io and the BookingLoop service, how we use it, and the choices you have.

What BookingLoop does

BookingLoop is the conversion and selling layer for Zenoti businesses. It connects a business's website, Zenoti, CRM, and Google Ads so the business can book more guests, recover missed bookings, and report paid revenue back to its ad accounts. Zenoti stays the system of record.

Information we collect

• From visitors to bookingloop.io: what you enter in our demo and waitlist forms (name, business, email, phone), and basic technical data such as browser type and pages viewed. Forms are protected by Cloudflare Turnstile.
• From businesses that use BookingLoop (our clients): business contact and billing details, and the account connections the client authorizes, such as Zenoti, the client's CRM, and Google services.
• From a client's own systems: the appointment and transaction outcomes needed for booking, recovery, and reporting. Clinical records, intake, and charting stay in the systems built to manage them.

Google user data

When a client connects a Google account to BookingLoop, we ask only for the access the service needs, and we use it only to provide the features the client asked for:

• Google Ads: read campaign, keyword, and performance data to report results, and make the account changes the client directs, such as campaigns, keywords, budgets, and negative keywords.
• Google Ads conversions and audiences (Data Manager API): send paid conversion outcomes back to the client's Google Ads account, and upload customer lists the client chooses. Personal identifiers are hashed before they are sent.
• Google Analytics: read-only reports on the client's website traffic and conversions.
• Google Search Console: read-only search performance data for the client's websites.

BookingLoop's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular, we do not:

• sell Google user data or any client data;
• use Google user data to serve or target ads, or to build advertising profiles;
• use Google user data to develop, improve, or train generalized AI or machine learning models;
• transfer Google user data to anyone except as needed to provide the service the client asked for, to comply with law, or as part of a merger or acquisition with notice to the client.

People at BookingLoop read Google user data only when the client asks us to, when it is needed for security or to investigate abuse, or when the law requires it.

How we use information

• To provide, operate, and support the BookingLoop service for our clients.
• To respond to demo requests and questions.
• To keep the service secure and prevent abuse.
• To meet legal and contractual obligations.

We do not build advertising audiences from health information, and we do not use identifiable healthcare data to train AI models. BookingLoop does not store or process payment card data. Payments stay with Zenoti or the client's existing processor.

How we share information

We share information only with service providers that help us run BookingLoop (for example, hosting, email, and security providers), under agreements that limit their use of it, and with the systems a client tells us to connect. We may disclose information if the law requires it. We do not sell personal information.

Healthcare clients

A Business Associate Agreement (BAA) is available for eligible healthcare clients. Healthcare data is stored and processed in the United States. More detail is on our Healthcare Privacy & Security page.

Security

Data is encrypted in transit and at rest. Client data is isolated with row-level security and restricted access, and multi-factor authentication is required for accounts with access to identifiable healthcare booking data.

Retention and deletion

We keep client data, including Google user data, only as long as needed to provide the service or meet legal obligations. A client can disconnect BookingLoop from its Google account at any time at myaccount.google.com/permissions. To ask us to delete data we hold, email jason@sixteen9llc.com. We will delete it within 30 days unless the law requires us to keep it.

Children

BookingLoop is a business service and is not directed to children under 13.

Changes to this policy

If we change this policy, we will post the new version here with a new effective date. If a change is material, we will tell clients before it takes effect.

Contact

Sixteen9, LLC, Texas. Email jason@sixteen9llc.com.