Privacy Policy
This Privacy Policy explains how NextAppt.ai collects, uses, discloses, and retains personal information for both Consumer Users and Business Users. It also describes location information, appointment-search data, business-account information, integrations, communications, U.S. state privacy rights, and future platform features.
Contents
Scope and the People Covered
Our Role and Independent Businesses
Information We Collect From Consumer Users
Information We Collect From Business Users
Location Information
Information Collected Automatically
Cookies and Similar Technologies
Information From Businesses, Integrations, Public Sources, and Other Third Parties
Inferences, AI, and Automated Processing
How We Use Personal Information
How We Disclose Personal Information
Public Information
Sensitive Personal Information
Health Information and HIPAA
Marketing Communications
Sale, Sharing, Targeted Advertising, and Global Privacy Control
U.S. State Privacy Rights
California Privacy Notice
Texas and Other State Privacy Notices
Data Retention
Security
Business Privacy Responsibilities
Children
Deidentified and Aggregated Information
Third-Party Services
Changes to This Privacy Policy
Contact and Privacy Requests
1. Scope and the People Covered
This Privacy Policy applies to personal information processed by NextAppt.ai in connection with its United States-facing websites, appointment-search services, consumer accounts, appointment alerts, business listings, business accounts and dashboards, integrations, widgets, analytics, subscriptions, communications, and future features that link to this Policy. For clarity:- Consumer Users are people who search, browse, create consumer accounts, request alerts, save preferences, follow booking links, submit reviews or feedback, or use consumer-facing features.
- Business Users are owners, employees, contractors, practitioners, or other authorized representatives who claim, verify, manage, advertise, integrate, or subscribe on behalf of a business.
2. Our Role and Independent Businesses
NextAppt.ai operates an appointment discovery and technology platform. Businesses listed on NextAppt.ai are generally independent organizations with their own privacy practices. When you leave NextAppt.ai, use a third-party booking system, submit information directly to a provider, or receive a service from a provider, that provider or third party may independently collect and use information under its own privacy policy. Where a business connects an integration or supplies data to NextAppt.ai, the business is responsible for having the rights, notices, and consents required to provide that information.3. Information We Collect From Consumer Users
Depending on the features you use, we may collect:- name, email address, telephone number, account identifier, login and verification information;
- saved businesses, favorite services, appointment preferences, preferred dates or times, preferred locations, notification settings, and marketing preferences;
- search queries, viewed businesses, viewed appointments, clicked booking links, alert requests, booking-referral activity, and interactions with search results;
- reviews, ratings, feedback, messages, support requests, profile content, and other information you submit;
- transaction, deposit, booking, cancellation, or payment-related information if those features are introduced; and
- other information you choose to provide.
4. Information We Collect From Business Users
For Business Users we may collect:- name, work email, telephone number, job title or role, business affiliation, and account identifiers;
- business-claim and verification information, including evidence of ownership, employment, authorization, domain control, professional credentials, or identity where reasonably necessary;
- business profile, listing, service, price, staff, practitioner, availability, address, location, logo, image, promotion, and contact information;
- subscription plan, billing contact, transaction, and payment-related information;
- booking-platform, CRM, calendar, API, widget, or other integration configuration;
- API keys, tokens, site IDs, location IDs, or other credentials submitted to connect an integration, which we treat as confidential security information;
- analytics, lead, click, referral, and account-activity information; and
- support, verification, dispute, and other communications.
5. Location Information
With permission from your browser, device, or application, NextAppt.ai may collect precise geolocation such as latitude and longitude. We may also receive or infer approximate location, city, metropolitan area, or region from information such as an IP address. We may use location to show nearby businesses and appointments, calculate distance, rank search results, center maps, identify relevant markets, reduce fraud, secure accounts, and improve the Services. You may deny or revoke device-location permission through your browser or device settings. Some proximity features may work less accurately without precise location. Where precise geolocation is treated as sensitive personal information, we process it in accordance with applicable law.6. Information Collected Automatically
When you use NextAppt.ai, we or our service providers may automatically collect technical and usage information such as:- IP address;
- browser type and version;
- device type and operating system;
- device or browser identifiers;
- language and approximate region;
- referring and exit pages;
- pages, searches, links, buttons, and appointment cards viewed or clicked;
- dates, timestamps, session information, crash data, performance data, and security logs; and
- cookie, local-storage, or similar technology identifiers.
7. Cookies and Similar Technologies
NextAppt.ai and service providers may use cookies, local storage, pixels, tags, SDKs, session technologies, and similar tools for authentication, security, account persistence, preferences, maps, functionality, analytics, performance, attribution, fraud prevention, and—if introduced—advertising or personalization. Your browser may allow you to delete or block cookies or manage site permissions. Blocking certain technologies may prevent account or platform features from working. If NextAppt.ai introduces technologies that require consent or an opt-out mechanism, we will provide the legally required controls.8. Information From Businesses, Integrations, Public Sources, and Other Third Parties
We may receive information from listed businesses, booking platforms, CRMs, calendars, payment processors, maps, geolocation services, email providers, analytics providers, identity or fraud-prevention providers, referral sources, public websites, public business directories, professional listings, public social-media pages, and other lawful sources. Business listing information can include business names, addresses, phone numbers, websites, booking URLs, coordinates, hours, service menus, durations, prices, staff or practitioner names, appointment availability, logos, images, descriptions, specialties, amenities, reviews, offers, and other business information.9. Inferences, AI, and Automated Processing
NextAppt.ai may derive or infer information such as likely service interests, preferred areas, search intent, recommended appointments, inferred appointment availability, duplicate records, business relevance, fraud or security signals, or likely user preferences. We may use artificial intelligence or machine-learning systems for search assistance, recommendations, business-content tools, support, classification, availability inference, fraud detection, analytics, and product development. AI-generated or inferred outputs may be incomplete or inaccurate. We do not intend to use automated systems to make decisions producing legal or similarly significant effects about consumers without providing notices and rights required by applicable law.10. How We Use Personal Information
We may use personal information to:- provide appointment search, maps, distance calculations, business profiles, accounts, alerts, booking links, dashboards, integrations, widgets, analytics, and support;
- authenticate users, send login codes, maintain sessions, and protect account security;
- match searches with businesses or appointments and personalize or improve relevance;
- operate business claims, verification, subscriptions, promotions, advertising features, lead attribution, and business analytics;
- facilitate future booking, transaction, payment, refund, or billing functionality;
- send requested alerts and other transactional or relationship communications;
- send marketing communications where permitted and subject to applicable choices;
- measure, test, maintain, debug, develop, and improve NextAppt.ai;
- detect fraud, abuse, security incidents, prohibited conduct, and technical problems;
- enforce agreements and protect NextAppt.ai, users, businesses, and others; and
- comply with law, legal process, accounting obligations, tax requirements, and legitimate legal claims.
11. How We Disclose Personal Information
We may disclose personal information to the following categories of recipients as reasonably necessary:Businesses and providers
When a Consumer User directs an interaction with a business, clicks through to booking, submits a request, books or pays through a feature, or otherwise asks us to connect the parties, relevant information may be disclosed to the business.Service providers
We may use vendors for hosting, databases, cloud infrastructure, email, communications, maps, geolocation, analytics, security, customer support, identity verification, fraud prevention, payment processing, and professional services.Booking and integration partners
We may exchange information with booking platforms, CRMs, calendars, APIs, widgets, and other connected services to retrieve availability, synchronize business information, facilitate booking, or provide requested integrations.Payment and transaction parties
If payment features are offered, information may be disclosed to payment processors, banks, card networks, fraud-prevention providers, and the business involved in the transaction.Analytics, attribution, and advertising partners
We may disclose device, usage, approximate location, and interaction information to analytics or attribution providers. If we introduce targeted advertising or cross-context advertising disclosures, we will update this Policy and provide legally required choices.Business account administrators
Authorized administrators of a business account may be able to view business-account users, billing information, analytics, leads, profile activity, and integration information associated with that business.Legal, safety, and corporate transactions
We may disclose information to comply with law, respond to legal process, investigate fraud or misconduct, protect rights or safety, establish or defend legal claims, or in connection with financing, formation of an operating entity, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction.At your direction
We may disclose information when you direct us to or otherwise provide legally valid authorization.12. Public Information
Business listings, public business profiles, logos, photos, descriptions, promotions, reviews, ratings, and other information designated for public display may be visible to anyone, indexed by search engines, displayed through widgets or APIs, cached, copied, or shared by others. Do not include private, confidential, credential, or sensitive information in fields intended for public display.13. Sensitive Personal Information
Depending on applicable law and how you use the Services, sensitive personal information may include precise geolocation, account credentials, integration credentials, payment information, government identification used for verification, or data that reveals or suggests health or wellness interests. We use sensitive information only for purposes reasonably necessary to provide requested features, secure the Services, verify businesses, process transactions, comply with law, or for other legally permitted purposes. Unless expressly requested through a feature designed and authorized for that purpose, do not submit medical records, diagnoses, treatment notes, Social Security numbers, full payment-card numbers, or unnecessary government-identification information.14. Health Information and HIPAA
NextAppt.ai may list healthcare-adjacent and wellness providers, and search behavior may reveal sensitive interests. NextAppt.ai is not necessarily a healthcare provider, health plan, healthcare clearinghouse, or HIPAA business associate merely because it displays or helps locate those services. Unless NextAppt.ai enters into a written business-associate agreement and expressly identifies a feature as designed for protected health information, do not use NextAppt.ai to transmit protected health information or medical records.15. Marketing Communications
We may send product updates, promotions, appointment-related marketing, or other commercial communications as permitted by law. Marketing preferences are separate from acceptance of the Terms of Service and from transactional account communications. Where consent is required, we will request it separately. You may unsubscribe from marketing email using the unsubscribe mechanism in the message or by changing available account preferences. We may still send nonmarketing communications such as login codes, security notices, requested appointment alerts, billing notices, or service messages. Business Users are responsible for their own marketing communications and compliance when they independently use customer information.16. Sale, Sharing, Targeted Advertising, and Global Privacy Control
NextAppt.ai does not currently sell personal information in exchange for money. Some state laws define "sale," "sharing," or "targeted advertising" more broadly and may treat certain advertising or cross-context disclosures as regulated activity. If NextAppt.ai begins processing personal information in a manner that triggers those requirements, we will provide required disclosures and opt-out mechanisms. Where legally required and technically applicable, we will honor recognized opt-out preference signals such as Global Privacy Control for covered sale or sharing activity.17. U.S. State Privacy Rights
Depending on your state of residence and whether the applicable law covers NextAppt.ai, you may have rights to:- confirm whether we process personal information;
- access or obtain a portable copy of personal information;
- correct inaccuracies;
- delete personal information;
- obtain information about categories of collection or disclosure;
- opt out of sale, sharing, targeted advertising, or certain profiling;
- limit certain uses of sensitive personal information;
- appeal a denied request where applicable; and
- exercise privacy rights without unlawful discrimination.
18. California Privacy Notice
For California residents, the categories of personal information we may collect include identifiers; customer-record information; commercial information; internet or electronic-network activity; geolocation; audio, visual, or similar information; professional or employment-related information; inferences; and sensitive personal information. We collect these categories from the sources and for the purposes described in this Policy, and disclose them to the categories of recipients described above. If the California Consumer Privacy Act applies to NextAppt.ai, eligible California residents may exercise applicable rights to know/access, correct, delete, and opt out of qualifying sale or sharing, and may exercise other rights provided by law. If we use sensitive personal information for purposes that trigger a right to limit, we will provide the required notice and mechanism.19. Texas and Other State Privacy Notices
If the Texas Data Privacy and Security Act or another state comprehensive privacy law applies to NextAppt.ai, eligible residents may exercise the applicable access, correction, deletion, portability, opt-out, and appeal rights provided by that law. Where a law treats precise geolocation or another category as sensitive data, NextAppt.ai will process it in accordance with applicable consent, notice, security, and assessment obligations. Because NextAppt.ai operates online and has a direct relationship with users, privacy requests may be submitted through privacy@nextappt.ai and through other methods we make available where required.20. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing accounts and alerts, maintaining business listings, operating integrations, completing transactions, maintaining acceptance and legal records, detecting fraud, protecting security, resolving disputes, enforcing agreements, complying with tax or accounting requirements, and meeting legal obligations. Retention varies by data type and context. Examples include:- account data while an account is active and for a reasonable period afterward;
- login and security records for fraud prevention and account protection;
- appointment-alert criteria until deleted or no longer needed;
- transaction and billing records for accounting, fraud, tax, and legal requirements;
- legal acceptance records for the period reasonably necessary to establish which terms were accepted;
- marketing opt-out records as necessary to honor the opt-out;
- support or dispute records while needed to resolve issues and establish legal rights; and
- backups until overwritten or deleted according to backup schedules.
21. Security
We use administrative, organizational, and technical safeguards designed to protect personal information. Measures may include access controls, authentication, encryption in transit, hashing of authentication secrets, secure hosting, logging, monitoring, backups, vendor controls, and incident-response practices. No system can be guaranteed completely secure. You are responsible for protecting your email account, login codes, devices, and business integration credentials and for promptly reporting suspected unauthorized access. If a security incident requires notification under applicable law, we will provide legally required notices.22. Business Privacy Responsibilities
Business Users and the businesses they represent are independently responsible for the personal information they collect or control. This includes responsibility for:- providing required privacy notices;
- obtaining consent when required;
- lawfully providing customer, employee, contractor, or practitioner information to NextAppt.ai;
- limiting business-account administrator access;
- protecting booking-system and API credentials;
- responding to privacy requests concerning data the business independently controls;
- maintaining lawful marketing and communications practices; and
- complying with professional, privacy, security, and consumer-protection obligations.