Privacy Policy
This Policy explains how Placefull Acquisition Inc, a Washington corporation ("PlaceFull," "we," "us"), handles personal information on the PlaceFull booking platform (the "Platform"), including studio booking pages, embedded booking widgets, the studio console, and placefull.com.
If you book or buy from a studio, that studio is responsible for your information. We process it on the studio's behalf to run the software. See §1.
1. Two roles
Studios, venues, and similar businesses ("studios") use the Platform to take reservations and payments. We never take possession of your payment; the studio is the merchant of record, and the studio's payment processor handles your card.
When you book, join a waitlist, buy a pass, or start a membership, the studio named at checkout is the controller of the information needed for that relationship (name, contact details, booking, answers to its questions, marketing choice, and payment status). We process that information solely on the studio's behalf and instructions to run checkout, the studio's register, receipts, booking links, waitlists, and the emails that go with a booking. We do not use it for our own marketing, and we never market to a studio's customers.
We are the controller of the information for your PlaceFull login and cross-studio account page, for studio operators' accounts, for visitors to placefull.com, and for records we must keep for ourselves (such as your acceptance of the Terms).
A studio sees only its own relationship with you. We do not give one studio another studio's customers. We are not responsible for a studio's own privacy notice, waiver, or marketing; direct those requests to the studio.
2. What we collect
From you, or from the studio through us:
- identity and contact: name, email, and phone if given;
- booking activity: bookings, waitlist entries, passes, memberships, attendance, and payment metadata (amount, status, card brand and last four digits as the payment processor returns them, never the card number);
- answers to questions the studio asks at checkout, which may include health, allergy, emergency-contact, photo-consent, or waiver acknowledgements;
- a name and optional email for someone else you book for;
- your marketing choice for that studio;
- for studio operators: business details, staff emails, listing content, images, tax settings, payment-processor account status and connection details, and prompts typed into the console's assistant;
- for someone who connects a Google Calendar: what §10 describes.
Automatically: IP address, browser and device information, timestamps, and the identifiers in §7. When you accept the Terms and this Policy we record the time, the version, your email, and IP and browser information as evidence.
We do not collect full card numbers, security codes, bank account numbers, or precise location.
3. How we use it
- run checkout, holds, bookings, passes, memberships, waitlists, and booking links;
- send transactional email about your booking, waitlist, payment, or membership, including a message a studio sends to a class you booked (these are sent whether or not you opted in to marketing);
- text you about your booking (your confirmation, a reminder on the day, and any change or cancellation) when the studio you booked with uses texts;
- send a studio's marketing email only if you opted in to that studio;
- show a studio its own register, reports, and exports;
- sign you in with a one-time email code;
- prevent fraud, abuse, and security incidents, and keep records of legal acceptance;
- operate, debug, and improve the software;
- comply with law and enforce our agreements.
We do not sell personal information, and we do not share it for targeted advertising.
4. Who receives it
- The studio you booked with, as controller, including staff it authorizes.
- The studio's payment processor (currently Stripe, Inc. or TRX Services LLC), for payments, refunds, and disputes on the studio's own account with it, and, where it is Stripe, memberships and operator identity checks. Each processor's privacy policy governs what it processes.
- Service providers acting on our instructions: cloud hosting and database, file storage, email and text-message delivery, and product analytics.
- AI providers. When a studio operator uses the console's assistant, the operator's prompt and the studio records the assistant retrieves, which may include that studio's customer names, contact details, and bookings, are sent to a model provider (currently Anthropic) or to a model the operator runs on their own systems. We do not use this to advertise.
- Connected tools a studio operator authorizes, which can access that studio's data.
- Google, for the bookings and classes we add to a Google Calendar someone connects (§10).
- Digital wallet providers (Apple Pay, Google Pay) for what you submit to them.
- Authorities and others where the law requires it, to enforce our agreements, or to protect the Platform, a studio, or a person from fraud or harm.
- A successor if PlaceFull is involved in a merger, acquisition, or sale of assets; this Policy continues to apply.
All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.
5. Email and text messages
Booking email is part of the transaction. The marketing-email box for a studio starts ticked; unticking it declines. Unsubscribe with the link in any marketing email or at /preferences; we honor opt-outs promptly. Email is sent through our provider in the studio's name, and replies go to the studio where we have its address.
Our email provider includes standard delivery tracking — a pixel confirming an email was opened, and rewritten links confirming one was clicked — so we know a message was delivered. We use this to diagnose delivery problems, not to build an advertising profile or to sell or share it with ad networks.
When the studio you booked with uses texts, PlaceFull sends booking texts for that studio to a mobile number only after you tick the box for it, at checkout or in your account: your confirmation, a reminder on the day, and any change or cancellation. Message frequency varies with your bookings. Message and data rates may apply. Reply STOP to stop texts from us for every studio, or HELP for help. Withdraw consent for a number in your account, or by replying STOP. We send no marketing texts, and receipts and other money messages always go by email. Mobile numbers and text-messaging consent are not shared with third parties or affiliates for their marketing purposes.
6. Sensitive information and children
A studio may ask health, emergency-contact, photo-consent, or waiver questions. Your answers are stored on the booking for that studio; the studio is responsible for asking lawfully and for how it uses them. A studio waiver or photo release is an agreement with the studio, not with us.
The Platform is for adults. We do not knowingly collect information from a child under 13. A parent or guardian may book for a child and enter the child's name; information a studio collects about a child is the studio's to handle lawfully. If you believe a child has provided information to us directly, email legal@placefull.com and we will delete it.
7. Cookies, storage, and links
We use only what is necessary to run the service: a browser storage entry for your signed-in session, a cart cookie (up to 30 days) so your cart survives page loads, including on a studio's own website where our widget is embedded, and short-lived cookies for security in operator flows. On booking pages, our analytics provider records the pages you view, your browser and device, how quickly the pages load, and whether a booking was completed, under a random identifier kept in your browser's storage; it carries no name, email, or payment details. We set no advertising or analytics cookies, so there is no cookie banner. Because we do not track you across sites, "Do Not Track" and Global Privacy Control signals make no difference to how we process your information.
Booking, cart, and membership links are keys: anyone holding one can view the booking and, where the page allows, cancel, reschedule, or pay, without signing in. Treat them like tickets.
8. How long we keep it
We keep studio-controlled information for as long as the studio's account is active and as long as the studio needs it for its bookings, payments, and legal obligations. We keep our own records (login, acceptance evidence, security logs) for as long as your account exists and as long as needed for security, dispute resolution, and legal compliance.
If we delete your PlaceFull login at your request, we unlink it from studios' records; a studio's own record of you remains with the studio, so ask the studio to remove you from its register. When a studio owner closes their account, we delete the businesses they own and the data in them, except what we must keep by law or for a dispute; their account with their payment processor remains with that processor. Published versions of our legal documents remain published.
9. Your rights and choices
About the class, a refund, or the studio's record of you: contact the studio. It is the controller, and we will help it respond.
About your PlaceFull login, your cross-studio marketing choices, or this Policy: email legal@placefull.com, or use /preferences and your account page. Unsubscribe stops a studio's marketing email; replying STOP stops texts (§5).
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to opt out of sale, sharing, or targeted advertising (which we do not do). To exercise a right, email legal@placefull.com. We will verify the request, usually by confirming control of the email address on file, and respond within 45 days, extendable once where the law allows. An authorized agent may act for you if they show your written permission. We will not discriminate against you for exercising a right. If we decline a request, we will say why, and you may appeal by replying to our response; we will answer the appeal within 45 days. We may decline a request that is unlawful, that we cannot verify, or that would require deleting a booking, payment, or legal record we must keep.
A request about studio-controlled information will be forwarded to the studio, or we will ask you to contact it directly, because it is the studio's record to correct or erase.
California and other US states: we do not sell personal information, do not share it for cross-context behavioral advertising, and do not use sensitive personal information to infer characteristics about you. The categories we collect, why, and who receives them are in §§2–4.
Studios using the Platform are responsible for their own customers' privacy and may request our data processing terms at legal@placefull.com.
10. Google Calendar
A studio owner, manager, or team member can connect a Google Calendar. With their permission, we:
- read the list of their calendars, and when they are busy in the calendars they choose, so booking times that clash are not offered. We use busy times as we read them and do not store them. We never read event titles, descriptions, or guests;
- add, change, and remove the studio's bookings and classes on the one calendar they choose, or on one we create for them. These events are private, have no guests, and may show the booked customer's name.
We keep the Google account's email address, the calendars chosen and their names, the events we added, and access tokens, which are encrypted. Disconnecting stops our access at once; we then delete the future events we added, revoke our access, and delete the tokens. You can also remove our access in your Google Account.
We do not use information from Google for advertising, do not sell it, do not send it to AI providers or use it to train AI models, and do not let people read it except with your consent, for security, or as the law requires. PlaceFull's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
11. Where it is processed
We are a US company and host the Platform in the United States. If you use the Platform from elsewhere, your information is processed in the United States, whose laws may differ from your country's. Our providers may also process information in other countries where they operate.
12. Security
We use reasonable technical, administrative, and physical safeguards, including encryption in transit and access controls. No method of transmission or storage is completely secure. If we learn of a breach affecting your information, we will notify the studio or you as the law requires.
13. Changes
We may publish an updated Policy as a new version at /privacy, and each checkout and studio go-live records the version then in force. If a change materially reduces your rights, we will give notice on the Platform or by email before it takes effect.
14. Contact
Placefull Acquisition Inc, 1285 Ash Street, Denver, CO 80220 · legal@placefull.com
For the class, a refund, or your record with a studio: contact the studio.
This Policy does not replace the Terms of Use, the Merchant Agreement, a payment processor's policies, or a studio's own privacy notice.