Security & Privacy

Your client data is not our product.

Your business remains in control of its client relationships and records. PeasyBooking is designed with privacy, access control, auditability, and security best practices in mind.

Data ownership

Your client records and relationships are yours. We never sell them or use them as our product, and you can export or delete them at any time.

Canadian-hosted core records

Your core records are hosted on Google Cloud in Canada (Montréal) — encrypted in transit and at rest, and protected under Canada’s privacy law (PIPEDA). We honor your CCPA/CPRA rights and never sell your data.

Role-based access

Least-privilege roles for owners, managers, receptionists, staff, and accountants. Team members see only what their role needs.

Audit logs

An append-only, tamper-evident trail records every access — including reads. Owners and managers can review who accessed what, and when.

Encryption

Data is encrypted in transit and at rest. The records vault offers an optional end-to-end-encrypted mode where only you hold the keys.

Privacy controls

Consent is captured where it matters, and we never use identifiable clinical data for advertising, profiling, analytics, or AI training.

Export anytime

Export your clients, appointments, and records whenever you want. No lock-in, no hostage data.

Privacy you can build a practice on

Start free, and keep control of your data from day one.

    Security & Privacy · PeasyBooking