Privacy policy
Updated 7 October 2026
About this app
Crown Barbers is the booking app for services provided by Heeva at 15 Bowes Pl, Phillip ACT 2606. The payment seller shown in the app is S.A.Z CONSULTANTS PTY LTD. For questions about the app or your information, contact crown.barbers.woden@gmail.com.
Booking and payment information
When you submit a booking, the app stores your name, email, phone number, service and optional extras, appointment time, accepted booking policy and quoted amount. It also stores booking status, Stripe payment references, cancellation and refund records, and message-delivery status. A hashed network identifier is used to limit repeated checkout attempts.
Stripe handles the hosted payment page. The Crown app sends Stripe your email, booking reference, service description and amount, and receives payment status and payment references. The app does not collect or store your card number.
Confirmation and cancellation emails
When customer email delivery is enabled, Resend sends booking confirmations and cancellation or refund updates. Resend receives the recipient email address and the message content, including appointment details and the private management link where applicable. Keep that link private: it gives access to your booking and cancellation controls. Staff-review messages are sent to Crown’s support email.
Google account and calendar connection
The business calendar connection is optional and requires the Crown owner to confirm it and approve access through Google. Google account identity is used to verify that the authorizing account is crown.barbers.woden@gmail.com. The connection targets that account’s primary calendar.
The Google permission for events on owned calendars allows access to more than one calendar. The app restricts its own operations to this selected calendar and the event IDs mapped to app bookings. It does not list unrelated events, read other calendars or read calendar availability.
When calendar sync is enabled, paid confirmed bookings create private busy events containing the service, appointment time, studio address and booking reference. The event contains no customer name, email, phone number, private management link, attendees or invitations. Cancelling a mapped booking in the app removes that same app-created event. Heeva manages walk-ins and other calendar events separately.
The app stores the selected calendar ID, connection status and time, an encrypted offline Google refresh token, and the event IDs and sync status needed to reconcile retries. Temporary authorization state expires after ten minutes, is consumed on use, and expired state rows are cleaned up when another connection attempt starts. Access tokens are used on the server and are not placed in browser code.
Google data is used for the account-verification and calendar-sync functions described here, not for advertising, resale or training models. Crown’s use of Google API data follows the Google API Services User Data Policy, including its Limited Use requirements.
You can revoke the business connection through your Google Account’s third-party connections settings. Revocation stops future authorized Google access; it does not itself delete events already written or the app’s stored booking records. Contact Crown about removing stored connection information or specific app-created events.
Hosting and other service providers
The app runs on OpenAI Sites with Cloudflare-hosted server and database services. Those services process app requests and stored records. Google provides the account and calendar services, Stripe processes payments, and Resend processes email delivery. Each provider also operates under its own terms and privacy policy.
Cookies, storage and security
The app uses secure cookies to associate payment confirmation and private booking management with your browser. Owner pages use the hosting platform’s sign-in. Google connection tokens are encrypted in server storage and protected owner actions require sign-in.
Booking, payment-reference, refund and delivery records are stored durably. No automatic deletion period for customer records is currently configured. Contact crown.barbers.woden@gmail.com with privacy questions or a request to access, correct or remove information; Crown will review the request and any records needed for the booking or payment.