1. Operator and scope
MakeMeBooked is operated by Dyubbo LLC. Our business mailing address is 8735 Dunwoody Place, #11845, Dunwoody, GA 30350, USA. Contact support@makemebooked.com for privacy questions or requests, or write to that business address.
This Policy covers information handled through MakeMeBooked's owner accounts, business pages, scheduling, billing, support and operations. It accompanies the Terms of Service. It does not replace a service business's own privacy notice or the separate policies of payment and infrastructure providers.
Dyubbo LLC determines how account, billing, security and support information is used to operate MakeMeBooked. Business owners determine what information they request from customers and how they use it for their services. We process their booking records to provide the scheduling functions they use. The legal responsibilities of each party depend on the activity and applicable law. Owners must have a lawful basis and required permissions for the information and communications they request.
2. Information we handle
- Owner accounts and business pages: account email and authentication information; business and service names, public content, service area, hours, availability and selected settings. Public business information is visible on the business page.
- Customer bookings and requests: name, email, chosen or preferred time, appointment status and history, and answers, phone or address when the business enables those fields. Customers do not need a MakeMeBooked account. Optional email verification checks control of a mailbox; it does not create an account or reserve an appointment.
- Optional photos: images submitted privately to the relevant business. Photo collection is off by default until the owner enables it and remains optional for customers. Customer answers and photos are not displayed as public business-page content.
- Billing: Stripe customer, subscription, Checkout and invoice references; payment/access status, paid-through dates and page-address credits. Stripe collects payment-method and billing-location information directly. MakeMeBooked does not store full card numbers or bank credentials.
- Invitations and referral information: expiring private-invitation references, recipient hashes and redemption status; validated campaign or referral labels and timestamps when present in a link. A private invitation is tied to its intended recipient, rather than a public reusable coupon.
- Support and operational information: messages you send to support; authentication, request, security, notification and delivery-status records needed to operate and diagnose the service. Our hosting, authentication and email providers may also process technical information such as IP addresses, request details and device/browser information under their own policies.
Provide only information needed for the relevant service or request. Avoid sending passwords, complete card numbers, unnecessary sensitive records or private booking links in ordinary support email.
3. How we use information
We use information to authenticate and recover accounts; save and publish business pages; show availability; process bookings and approval requests; prevent appointment conflicts; provide scoped change/cancel/recovery links; deliver operational emails; manage subscriptions and page-address credits; respond to support and privacy requests; secure the product; investigate errors and abuse; and maintain backups and recovery.
Customer reminders and owner daily schedule emails follow the corresponding business settings. Essential owner billing notices go to the verified owner account email. Customer booking emails do not include owner subscription-billing information. Private customer links are scoped and expire; anyone with a valid link may be able to perform its permitted actions, so keep them confidential.
Referral labels help us understand which invitation or campaign led to signup. They are not used as proof of identity, authorization or payment. Current MakeMeBooked product functions do not sell personal information, use third-party advertising pixels, send automated cold outreach, or provide owner/customer AI chat.
Where applicable law requires a legal basis, processing may be needed to provide the requested service, comply with legal duties, protect legitimate security and operational interests, or follow consent where required. This Policy does not replace consent required for a particular activity.
4. Who receives information
The relevant business receives its customer bookings, answers and optional photos. Other business owners are not given access to those private records. Public business-page content is available to visitors and may be copied or indexed by others.
We use these providers for the stated functions:
| Provider | Function |
|---|---|
| Supabase | Database, owner authentication and private file storage |
| Render | Application and operator hosting |
| Resend | Transactional email and authentication email delivery |
| Stripe | Hosted payments, subscriptions, invoices and billing management |
| Cloudflare R2 | Encrypted coordinated backups |
| Healthchecks | Operational and missed-run monitoring |
| Porkbun | Domain registration and the support mailbox |
Provider access is used for the relevant function; not every provider receives every category of data. Their own terms, infrastructure logs and retention practices also apply. Authorized operators may access information when necessary to provide support, secure the service or handle a verified request.
We may disclose information when legally required or reasonably necessary to investigate abuse, defend rights or protect people and the service. If the business operating MakeMeBooked changes through a merger, sale or reorganization, information may be transferred with appropriate notice and safeguards required by law. A transfer does not authorize disregard of this Policy or mandatory rights.
5. Cookies and similar account storage
Account/session cookies support sign-in and recovery. Scoped customer-link cookies support permitted appointment or photo access. The private-offer cookie stores an invitation capability for up to 30 days; the invitation itself remains subject to eligibility, expiration and single-use checks.
When a supported campaign or referral label appears in a landing or signup URL, a first-party referral cookie stores validated first and latest labels and timestamps for up to 30 days from the first captured visit. Direct visits do not extend that window. At signup, valid referral information may be attached to owner account metadata; its account retention is separate from the browser cookie's expiration. This is not cross-site advertising tracking.
You can remove or block cookies using browser settings. Blocking essential cookies may prevent sign-in, invitation recovery or private-link functions. Removing the referral cookie does not delete information already saved to an account; contact support for an applicable data request. The current product has no separate cookie-preference panel. Where consent is required for optional measurement, it must be obtained before that processing.
6. Retention, deletion and backups
We retain information needed to provide the service and address active appointments, account recovery, disputes, financial records, security and legal obligations. Automatic general customer-history/photo deletion and backup pruning are not currently active. Subscription cancellation or expiry does not automatically delete records. Do not assume that an old or canceled booking has been erased.
Some expired one-use recovery or verification material and email-processing capabilities have narrower security cleanup. Provider logs and financial records follow their own retention obligations and practices; we do not promise one fixed deletion deadline for every provider.
Account erasure and customer-record deletion are handled through a verified, operator-assisted request. We consider the scope, the business's responsibilities, unresolved work, legal holds and applicable rights. We may retain records where law requires or permits it and explain relevant limitations. There is no public instant-delete account button.
Encrypted backups may retain earlier copies, including information deleted from active systems, until those archives are removed. Backup pruning is currently off, so this Policy does not promise a fixed maximum backup-deletion lag. Any restoration must account for applicable deletion requests before the restored information is returned to ordinary use.
7. Security
We use safeguards appropriate to the service, including authenticated owner access, separation of business records, private photo storage, bounded uploads, scoped expiring customer links, encrypted transport and encrypted coordinated backups. No system can guarantee complete security or uninterrupted operation. Protect passwords and private links, and report suspected unauthorized access to support. We will assess incidents and provide notifications where required by applicable law.
8. Processing locations
Dyubbo LLC is based in the United States. Information is processed in the United States and may be handled in other locations used by our providers. Laws and protections can differ between locations. Where applicable law requires contractual or other safeguards for a transfer, those requirements still apply. We do not claim certification under a data-transfer framework, universal data residency or compliance with every country's privacy law merely by publishing this Policy.
9. Privacy requests and choices
Depending on applicable law, you may have rights to access, correct, delete or obtain a portable copy of information; restrict or object to certain processing; withdraw consent where processing relies on it; or complain to a competent privacy authority. Withdrawing consent does not change the lawfulness of earlier processing. Rights, exceptions and required response times vary; we handle requests under the law that applies to them.
Email support@makemebooked.com with the account or appointment context and the request. We may ask for proportionate information to verify identity or an authorized representative's authority, without requesting passwords or full payment details. We will respond without undue delay and within applicable legal deadlines, explaining any lawful limitation and available review or appeal where required. We do not penalize the exercise of mandatory privacy rights.
For records held for a service business, that business is ordinarily the first contact about its use of your booking information. You may also contact us; we will assist or coordinate with the relevant business as appropriate. We do not disclose another person's records merely because someone requests them. Owners can edit available business settings and customer-reminder preferences; necessary account, security and billing communications may still be sent.
Support's ordinary target is two business days during Monday–Friday, 9am–5pm America/New_York. It is not a guaranteed response time and does not replace a statutory privacy-request deadline.
10. Children
MakeMeBooked is not directed to children under 13, and business-owner accounts are for adults with authority to act for the business. We do not knowingly seek personal information from children under 13. If you believe a child has provided information without appropriate authority, contact support so we can review it and take appropriate action, including deletion where required. Businesses must avoid requesting unnecessary information about children through optional questions or photos.
11. Changes and contact
Published versions will identify their effective date. We will give notice of material changes and obtain consent where required before using information in a materially different way. An updated notice does not remove mandatory rights or automatically authorize a new purpose.
For privacy questions, requests or complaints, contact Dyubbo LLC, 8735 Dunwoody Place, #11845, Dunwoody, GA 30350, USA, at support@makemebooked.com. Georgia is the governing jurisdiction specified in the Terms; that choice does not remove privacy rights that apply under other mandatory law.