Privacy Policy

Effective Date: January 2026

Last Updated: January 2026

Jendays ("we," "us," or "our") operates the Jendays platform (jendays.com) and provides the JWTMS/Bookwell white-label booking software to wellness businesses. This Privacy Policy explains how we collect, use, disclose, and protect information.

1. Information We Collect

1.1 Information You Provide

Business Account Information:

• Business name, address, website
• Contact name, email, phone number
• Role/title within the business
• Business details (services offered, booking volume)

Payment Information:

• Billing address
• Payment method details (processed securely by Stripe)

Communications:

• Support requests and correspondence
• Feedback and survey responses

1.2 Information Collected Automatically

Usage Data:

• Pages visited, features used
• Browser type, device information
• IP address, approximate location
• Referring website

Cookies and Tracking:

• Essential cookies for site functionality
• Analytics cookies (Google Analytics) for service improvement
• You can control cookies through your browser settings

1.3 Information from Third Parties

• OAuth providers (Google, Microsoft) when you choose to sign in
• Payment status from Stripe (not full card details)
• Calendar availability from Google Calendar or Microsoft Calendar (if you enable sync)

2. How We Use Your Information

We use collected information to:

• Provide Services: Create and manage your account, deploy your booking website, process payments
• Communicate: Send transactional emails, service updates, support responses
• Improve: Analyze usage patterns, fix bugs, develop new features
• Protect: Detect fraud, enforce terms, maintain security
• Legal Compliance: Meet regulatory requirements, respond to legal requests

We do NOT:

• Sell your personal information
• Use your data for unrelated advertising
• Share your client data with other Jendays customers

3. Data Sharing and Disclosure

We share information only in these circumstances:

3.1 Service Providers

3.2 Legal Requirements

We may disclose information when required by law, court order, or to protect rights, safety, or property.

3.3 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred. We will notify you of any change in ownership.

4. Your Rights and Choices

4.1 Access and Correction

You can access and update your account information through your dashboard or by contacting us.

4.2 Data Portability

Request a copy of your data in a machine-readable format.

4.3 Deletion

Request deletion of your account and associated data. Some data may be retained for legal or operational purposes.

4.4 Marketing Communications

Opt out of promotional emails using the unsubscribe link. Transactional emails (receipts, service updates) cannot be opted out.

4.5 Cookie Preferences

Control cookies through your browser settings. Disabling cookies may affect site functionality.

5. Data Retention

After account deletion, we retain only what is legally required or necessary for legitimate business purposes.

6. Data Security

We implement industry-standard security measures:

• TLS/HTTPS encryption for data in transit
• AES-256 encryption for sensitive data at rest
• Regular security assessments
• Access controls and authentication
• Secure payment processing via PCI-compliant Stripe

No system is 100% secure. We cannot guarantee absolute security but will notify you of any breach affecting your data.

7. International Data Transfers

Our services are hosted in the United States. If you access from outside the US, your data will be transferred to and processed in the US. We use standard contractual clauses and other safeguards for international transfers.

8. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to Know: What personal information we collect and how it's used
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: We do not sell personal information
• Non-Discrimination: Equal service regardless of privacy choices

To exercise these rights, contact privacy@jendays.com.

9. Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect information from children. If we learn we have collected such information, we will delete it promptly.

10. JWTMS/Bookwell Platform Data

When you use our JWTMS/Bookwell booking platform:

10.1 Your Role as Data Controller

You (the business owner) are the data controller for your clients' information. You are responsible for:

• Obtaining appropriate consent from your clients
• Providing your own privacy policy to your clients
• Handling client data requests
• Complying with applicable laws in your jurisdiction

10.2 Our Role as Data Processor

Jendays processes your clients' data on your behalf to provide the booking service. We:

• Process data only as instructed by you
• Implement appropriate security measures
• Assist with data subject requests
• Delete client data upon account termination (per retention schedule)

10.3 Client Data We Process

For your booking platform, we process:

• Client names and contact information
• Appointment history and preferences
• Payment transactions (via Stripe)
• Session notes (if you use this feature)

This data belongs to you and your clients, not Jendays.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent notice on our website. Continued use after changes constitutes acceptance.

12. Contact Us

For privacy questions or to exercise your rights:

Email: privacy@jendays.com

For general support: support@jendays.com