OYRB

Legal

Privacy Policy

Last updated: April 18, 2026

1. Overview

OYRB ("we", "us", or "our") respects your privacy. This Privacy Policy describes how we collect, use, disclose, and protect information in connection with your use of our Platform at oyrb.space. By using the Platform, you consent to this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

  • Account info: name, email, password (hashed), profile photo, business name, phone.
  • Business info (Professionals): services offered, pricing, hours, location, bio, gallery images, tagline, social links.
  • Booking info (Clients): name, email, phone, notes, service selected, date/time, and any intake form responses.
  • Payment info: we do not store full card numbers. Stripe, Inc. processes and stores this data per their PCI-DSS certified practices.
  • Communications: emails and messages you send to support.

2.2 Information Collected Automatically

  • Usage data: pages visited, actions taken, device type, browser, IP address, timestamps.
  • Cookies & similar technologies: used for authentication, session management, and analytics.
  • Location: approximate location from IP address or (with permission) precise location via your browser, used to show featured businesses near you.

2.3 Information from Third Parties

  • Google (if you sign in with Google): name, email, profile image.
  • Stripe: subscription and payment status.

3. How We Use Information

  • To provide, operate, and maintain the Platform;
  • To process bookings and payments;
  • To send booking confirmations, reminders, receipts, and account notifications;
  • To respond to customer support requests;
  • To detect, prevent, and investigate fraud, abuse, and security issues;
  • To improve Platform features and user experience through analytics;
  • To comply with legal obligations and enforce our Terms.

We do not sell your personal information to third parties.

4. How We Share Information

We share information only as described here:

  • With Professionals you book with: your name, email, phone, booking details, and any notes you provide.
  • With Clients who book you (Professionals only): client-provided contact and booking info.
  • Service providers: Stripe (payments), Supabase (database & authentication), Resend (transactional email), Vercel (hosting & CDN), Unsplash (stock photos), Google (OAuth), ImprovMX (email forwarding).
  • Legal & safety: to comply with law, respond to lawful requests, or protect rights, property, or safety.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, user data may be transferred.

5. Data Retention

We retain personal data for as long as your account is active and for up to thirty (30) days after cancellation, after which data may be permanently deleted except where retention is required by law (e.g., transaction records for tax compliance are retained for seven years).

6. Your Rights

Depending on your jurisdiction, you have the right to:

  • Access, correct, or delete your personal data;
  • Object to or restrict certain processing;
  • Data portability;
  • Withdraw consent where processing is based on consent;
  • Lodge a complaint with a supervisory authority.

California residents (CCPA/CPRA):you have the right to know what personal information we collect, to request deletion, to correct inaccuracies, and to opt out of the "sale" or "sharing" of personal information (we do not sell or share for cross-context behavioral advertising).

To exercise any rights, contact support@oyrb.space.

7. Security

We implement reasonable technical and organizational measures to protect personal data, including TLS encryption in transit, encrypted database storage (Supabase), and access controls. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

We will notify affected users of a data breach involving their personal information in accordance with applicable law (typically within 72 hours of discovery).

8. Children Under 13

The Platform is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will delete it. Contact us if you believe a child has provided us personal information.

9. International Users

The Platform is operated in the United States. By using the Platform, you consent to the transfer of your data to the United States, which may have different data-protection laws than your country.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-platform notice at least 30 days before taking effect. The "Last updated" date reflects the most recent version.

11. Contact

Privacy questions or requests? Email support@oyrb.space.