BookNext privacy policy

Last updated October 17, 2026

BookNext is a Shopify app that lets stores take appointment and event bookings. This policy explains what information the app collects when a store installs it and when that store's customers make a booking, what it's used for, who it's shared with, and how it's deleted.

Information about the store

When a store installs BookNext, the app receives from Shopify:

• the store's Shopify address, name, email, timezone and currency;
• the name and email address of staff members who open the app, so a store can control what each person may do;
• access tokens that let the app act for the store within the permissions the store approved.

The app also stores the settings the store enters: appointment types, opening hours, store location, email wording, booking page design and team members. If the store chooses products for customers to pick from, the app keeps those products' names and IDs.

Information about the store's customers

When a customer books, the app stores:

• their name, email address and, if they give one, phone number;
• any notes they write, and the product they chose, if asked;
• what they booked, when, and where;
• for paid bookings, the Shopify draft order used for payment and whether it was paid. Card details are handled entirely by Shopify checkout and never reach BookNext.

This is used only to run the booking: show it to the store, send the customer their confirmation and reminder emails, and let them reschedule or cancel from a private link.

Connected services

If a store connects Google Calendar or Zoom, the app stores an encrypted sign-in for that account and the IDs of the calendar events or meetings it creates. It uses them only to add, move and remove the store's bookings and to check when the store is busy. The store can disconnect at any time in the app's Settings.

Who we share information with

We don't sell or rent personal information, and we don't use it for advertising. It is processed by these services only as needed to run the app:

• Shopify, the platform the app runs in, including checkout for paid bookings;
• Railway, which hosts the app and its database;
• Brevo, which delivers the booking emails;
• Google and Zoom, only for stores that connect them.

How long information is kept

Bookings, with the customer details on them, are deleted automatically two years after the appointment. Other information is kept while the store uses BookNext. When a store uninstalls the app, Shopify asks us to delete the store's data, and we delete its bookings, settings and connections when that request arrives. When Shopify passes on a customer's request to delete their information, we delete that customer's bookings.

Security

All traffic to the app uses HTTPS. Sign-ins and access tokens for connected services are stored encrypted.

Your rights

Customers who booked with a store can ask that store for a copy of their information or for it to be deleted; the store can see and cancel bookings in the app, and Shopify passes deletion requests on to us. Stores and customers can also contact us directly.

Changes

If we change this policy, we'll update this page and the date at the top.

Contact

Questions about this policy or your information: ralph.kaawach09@gmail.com