Privacy Policy
Last updated: October 3, 2026
This policy explains how Ringenious Solutions LLC ("Ringenious", "we", "us"), which operates BookMarvels at bookmarvels.com, handles personal information.
Our role
- Client data (processor). When you book with a salon or barbershop that uses BookMarvels (a "Business"), the Business decides what information is collected and how it is used. We process it on the Business's behalf. If you are a client, contact the Business first about your information; we will help them respond.
- Business users, visitors and leads (controller). We decide how we use account and billing information about Business owners and team members, and information about visitors to our marketing website and people who ask us about BookMarvels.
Information we collect
From Businesses and their teams
Name, email, mobile number, password (stored hashed), role, business details (address, hours, EIN and legal name for carrier registration), billing details (handled by Stripe; we keep the card brand and last four digits), records of documents you accepted (version, time, IP address and browser), and audit logs of sensitive actions.
About clients, on a Business's behalf
Name, email, mobile, booking history, services, notes the Business adds, payment records (amounts, status; card details stay with Clover), message history and delivery status, and consent records for texts and marketing email (time, source, IP address and the exact wording shown).
From website visitors
Information you submit in forms, and device and usage data. Analytics and advertising cookies are used only if you accept them. See the Cookie Policy.
How we use information
- To provide the Service: bookings, reminders, payments, messaging, marketing tools and support.
- To bill Businesses for add-ons and keep financial records.
- To register Businesses with mobile carriers for texting.
- To keep the Service secure, prevent abuse and protect sending reputation (for example, suppressing addresses that bounce or complain).
- To communicate with Business users about their account and, where allowed, about BookMarvels and Merchant Marvels.
- To meet legal obligations.
We do not sell personal information, and we do not use client data for our own marketing.
Mobile information
Mobile phone numbers and text opt-in data and consent are not sold or shared with third parties or affiliates for their marketing or promotional purposes. Mobile information is shared only with the providers needed to deliver messages (such as Twilio and mobile carriers). See the SMS Policy.
Subprocessors
We use these service providers to run BookMarvels:
| Provider | Purpose | Location |
|---|---|---|
| Hostinger | Servers and hosting | United States |
| Amazon Web Services | Email delivery (Amazon SES) | United States |
| Resend | Transactional email delivery | United States |
| Twilio | Text messaging (SMS) and carrier registration | United States |
| Stripe | Platform billing for Businesses | United States |
| Clover / Fiserv | Card payments for Businesses' clients | United States |
| Cloudflare | DNS and security | United States and global network |
On our marketing website only, Google Analytics 4, Google Ads and Meta Pixel load after you accept analytics and advertising cookies. We may also disclose information if the law requires it, to protect rights and safety, or as part of a merger or sale of the business.
Data retention
- Account data is kept while the account is open.
- A Business can export all its data at any time (CSV, or a ZIP using "Export everything").
- After an account closes, its data is deleted or anonymized within 90 days, except records we must keep for legal, tax or dispute reasons.
- Backups roll off on their own schedule.
- Consent records are kept as long as needed to prove consent.
Security
Data is encrypted in transit with TLS. Credentials for payment and texting providers are encrypted at rest. Access is role-based, sensitive actions are recorded in audit logs, and actions that move money require the user to re-enter their password. No system is perfectly secure; we will notify affected Businesses of a breach as described in the Data Processing Addendum.
Your privacy rights
Depending on where you live (for example California under the CCPA/CPRA, and other states with privacy laws), you may have the right to know what personal information we hold, get a copy, correct it, delete it, and opt out of sale, sharing for targeted advertising, or profiling. We will not discriminate against you for using these rights. You can decline advertising cookies on our website at any time.
To make a request, email support@bookmarvels.com. We will verify your identity before acting. If you are a client of a Business, we will pass your request to that Business, which decides how to respond. You may use an authorized agent where state law allows.
Clients in the EU, UK or elsewhere. BookMarvels is US-based and data is stored in the United States. Where the GDPR applies, the Business is the controller of client data and its legal basis is usually performance of a contract (your booking) or your consent (marketing). You have rights of access, rectification, erasure, restriction, portability and objection, and may complain to your data protection authority.
Children
BookMarvels is not directed to children under 13, and we do not knowingly collect their information. Businesses must not use it to send marketing to children.
Changes to this policy
We will post updates here with a new date and, for material changes, notify Business account owners.
Contact
Ringenious Solutions LLC, 8 The Green, Dover, DE 19901, USA. Email: support@bookmarvels.com.