Privacy Policy

Last updated: April 6, 2026

The System by Behavior Change Coach ("we," "our," or "us") operates the booking and client management platform at thebehaviorchangecoach.online/thesystem. This Privacy Policy explains how we collect, use, and protect your information.

Information We Collect

• Account information: Name, email address, and phone number provided when booking a session or creating a portal account.
• Booking details: Session type, date/time, and payment confirmation.
• Intake form responses: Information you provide on intake questionnaires before your session.
• Usage data: Login times, pages visited within the client portal, and lesson progress (if enrolled in a course).

Google Calendar Integration

When a practitioner connects their Google Calendar, our system accesses their Google account solely to:

• Create calendar events for confirmed bookings
• Check free/busy availability (not event details)
• Remove calendar events when bookings are cancelled
• Generate Google Meet video links for sessions

We do not read, store, or access any existing calendar events, email messages, contacts, or any other Google account data. The practitioner can disconnect their Google Calendar at any time, which immediately revokes all access.

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How We Use Your Information

• To process and confirm session bookings
• To send appointment reminders and follow-up emails
• To provide access to the client portal, courses, and resources
• To generate invoices and process payments via Stripe
• To improve our services

Payment Processing

All payments are processed securely by Stripe. We do not store credit card numbers or bank account details on our servers.

Data Sharing

We do not sell, trade, or share your personal information with third parties except:

• Service providers: Stripe (payments), Resend (email delivery), Supabase (database hosting), and Google (calendar integration) — each bound by their own privacy policies.
• Legal requirements: If required by law or to protect our rights.

Data Security

We use industry-standard security measures including encrypted connections (HTTPS), secure database hosting, and access controls to protect your data.

Your Rights

You may request to view, update, or delete your personal data at any time by contacting your practitioner or emailing us at the address below.

Contact

If you have questions about this Privacy Policy, contact us at:
[email protected]