Privacy policy

Last updated October 23, 2026.

Booking CRM is a booking and customer management app for service businesses, run by IA a la Orden. This policy explains what information Booking CRM handles, why, and the choices you have. Questions: hola@ialaorden.com.

Who this covers

• Businesses that use Booking CRM, and the people who sign in to it for them.
• Their customers, who book through a business's website. For this information the business decides what is collected and why; Booking CRM handles it on the business's behalf.

What we collect

• Your sign-in: your name and email address. You sign in with a code sent to that email; there is no password.
• Your business's settings: services, opening hours, the people and places that can be booked, and how messages are sent.
• Bookings and leads: what a customer enters when they book (such as name, email, phone, address and answers to your questions), the time booked, and your notes.
• Google Calendar, only if you connect it: see the next section.

Google Calendar

If you connect your Google account, Booking CRM asks Google for three permissions and uses them only for these purposes:

• Free and busy times of the calendars you choose, to show customers only the times you are free. Booking CRM reads when you are busy, not what your events say.
• Your list of calendars (their names), so you can choose which ones count as busy.
• The events it creates: it adds an event for each booking to your main calendar, and moves or removes that same event when the booking changes. It does not change events it did not create.

The keys Google gives Booking CRM are stored encrypted. You can disconnect your calendar at any time in Settings: Booking CRM then hands the permission back to Google and deletes the keys. You can also remove access from your Google account at any time.

Booking CRM's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, not used for advertising, not used to train AI models, and not read by people except when you ask us to help with a problem, when the law requires it, or to keep the service secure.

How we use information

Only to run the service: to take and manage bookings, show availability, send the confirmations and reminders a business turns on, keep its list of leads, and keep the service working and secure. We do not sell information or use it for advertising.

Who we share it with

Only the companies that run parts of the service for us, each for that part alone:

• Railway, which hosts the app and its database.
• Vercel, which hosts the dashboard and this website.
• Cloudflare, which stores encrypted backup copies.
• Resend, which sends emails; Twilio, which sends texts when a business turns them on.
• Google, when you connect your Google Calendar.

How long we keep it

As long as a business uses Booking CRM. Encrypted backup copies are kept for up to a year and then deleted automatically. When a business leaves, or a customer asks to be removed, we delete their information from the app; it disappears from the backup copies as they expire.

Your choices

You can ask us for a copy of your information, to correct it, or to delete it, by writing to hola@ialaorden.com. Customers of a business can also ask that business directly.

Changes

If this policy changes, the new version is posted here with a new date. Important changes are announced to businesses by email.