Privacy Policy

    Last Updated: October 11, 2026

    This privacy policy (this "Policy") explains how personal information is collected, used, and disclosed by Pyrate Inc. and its designated agents, employees and subsidiaries ("Pyrate" or "we"). This Policy applies to businesses and service providers (individually referred to as "you") who use Pyrate's websites, applications, and other online services (collectively, our "Sites").

    Other third parties, such as clients who book appointments through our Sites, payment processors, and social networks that you use in connection with our Sites, may also collect, use, and share information about you. This Policy does not cover such third parties or their services. For information about third-party privacy practices, please consult with them directly.

    Information We Collect

    We collect information about you in various ways when you use our Sites. We use this information to provide the functionality and improve the quality of our Sites and personalize your experience. We may collect the following categories of personal information:

    Your Business Information

    • Identifiers such as your business name, shop name, email address, postal address, phone number, logo, profile photo
    • Financial information such as billing information and bank account details for payment disbursements
    • Commercial information such as service offerings, pricing, appointment history, client interactions
    • Professional information such as portfolio images, certifications, specialties, availability

    Client Data (Processed on Your Behalf)

    When clients book appointments through our platform, we collect and process the following limited information on your behalf:

    • First name and last name
    • Phone number
    • Instagram handle
    • Appointment details and preferences
    • Payment card information (processed through PCI-compliant third-party payment processors)

    Automatically Collected Information

    When you visit our Sites, some information is automatically collected. For example, when you visit our Sites, we may automatically collect your location, computer operating system, Internet Protocol (IP) address, access times, browser type and language, and the website you visited before our Sites. We also collect information about your usage and activity on our Sites using certain technologies, such as cookies and web beacons.

    How We Use Information

    We use personal information collected through our Sites for the purposes described in this Policy or disclosed to you on our Sites or otherwise in connection with our services. We may use your information to:

    • Make and change appointments made through our Sites
    • Process payments from clients and disburse funds to your accounts
    • Operate and improve our Sites, products, and services
    • Understand you and your preferences to enhance, personalize, and customize your experience
    • Process and deliver contest entries and rewards
    • Respond to your comments and questions and provide customer service
    • Send you information relating to our products and services, including appointment confirmations, receipts, technical notices, updates, security alerts, and support and administrative messages
    • Communicate with you about features, updates, promotions, and other news about products and services offered by Pyrate
    • Link or combine with other personal information we get from third parties to help understand your needs and provide you with better service
    • Authenticate your account information
    • Protect, investigate, and deter against fraudulent, unauthorized, or illegal activity

    Pyrate may store and process personal information in the United States and other countries.

    How We Share Information

    Payment Card Information

    To use certain services on our Sites, such as to process client payments and receive disbursements, we may require credit or debit card account information. By submitting payment card account information through our Sites, you expressly consent to the sharing of such information with third-party payment processors and other third-party service providers.

    Pyrate collects and processes all payments through recognized professional payment gateway providers. We use PCI-compliant third-party payment processors to handle all payment transactions. We do not store credit card numbers or sensitive authentication data on our servers.

    When processing payments, we share transaction information with our third-party payment service providers. These third parties may store payment information, other than CVV numbers, for future use on our Sites. CVV numbers are not stored and must be re-entered for each transaction.

    Service Providers

    We may share personal information with affiliates, third-party vendors, consultants, and other service providers who work for us. We may share your information with third parties who provide services to us, such as data collection, reporting, ad response measurement, site analytics, as well as assistance with delivery of relevant marketing messages and advertisements.

    Other Sharing

    We do not sell your personal information to third parties. We may disclose your personal information:

    • To comply with laws and to respond to lawful requests and legal process
    • To protect the rights and property of Pyrate, our agents and customers, and others, including to enforce our agreements, policies, and terms of use
    • In an emergency to protect the personal safety of Pyrate, its customers, or any person
    • To a third party if we sell, transfer, divest, or disclose all or a portion of our business or assets to another company in connection with or during negotiation of any merger, financing, acquisition, bankruptcy, dissolution, transaction, or proceeding

    We may also share aggregated or de-identified information with third parties in our discretion.

    Data Ownership and Your Responsibilities

    Shared Data Rights. While you maintain primary ownership of your client relationships and business data, Pyrate retains certain rights to use aggregated and anonymized data derived from our platform to improve our services, develop new features, and generate industry insights. We may use de-identified client data patterns, booking trends, and service analytics for business intelligence purposes.

    You retain ownership of your specific client contact information and business records. However, by using our platform, you grant Pyrate a license to process, analyze, and derive insights from this data in aggregated form. We will not directly contact your clients for marketing purposes without your explicit consent.

    As a user of our platform, you are responsible for:

    • Obtaining necessary consents from your clients for data collection and processing
    • Complying with applicable privacy laws in your jurisdiction
    • Responding to your clients' data access, correction, and deletion requests that relate to your services
    • Maintaining the accuracy of client information you input
    • Cooperating with Pyrate in addressing any data protection requirements

    Security of Your Personal Information

    Pyrate takes reasonable steps to help protect your personal information in an effort to prevent loss, misuse, unauthorized access, disclosure, alteration, and destruction. When your credit or debit card account information is being transmitted to our Sites or through our Sites, it will be protected by encryption technology, such as Secure Sockets Layer (SSL).

    To be clear, Pyrate does not itself store your credit or debit card account information, and we do not have direct control over or responsibility for your credit or debit card account information. Our contracts with third parties that receive your credit or debit card account information require them to keep it secure and confidential.

    Nonetheless, we cannot guarantee that transmissions of your credit or debit card account information or personal information will always be secure or that unauthorized third parties will never be able to defeat the security measures taken by Pyrate or our third-party service providers. We assume no liability or responsibility for disclosure of your information due to errors in transmission, unauthorized third-party access, or other causes beyond our control.

    Your Rights Regarding Your Personal Information

    You have certain rights with regard to your personal information:

    • You have the right to know and request information about the categories and specific pieces of personal information we have collected about you within the last 12 months, as well as the categories of sources from which such information is collected, the purpose for collecting such information, and the categories of third parties with whom we share such information
    • You have the right to update your personal information
    • You have the right to request a portable copy of your personal information
    • You have the right to request that Pyrate delete your personal information, subject to certain exceptions allowed under applicable law
    • You have the right to not be discriminated against for exercising any of the above-listed rights

    You may exercise these rights by contacting Pyrate at [email protected]. We may take reasonable steps to verify your identity prior to responding to your requests.

    Your Information Choices

    You may opt out of receiving promotional emails from Pyrate by following the instructions in those emails. If you opt out, we may still send you non-promotional emails, such as emails about your Pyrate account or our ongoing business relations.

    Most web browsers are set to accept cookies by default. If you prefer, you can usually choose to set your browser to remove cookies and to reject cookies. If you choose to remove cookies or reject cookies, this could affect certain features or services of our Sites.

    Most mobile devices allow you to turn off location services. If you choose to turn off location services, this could affect certain features or services of our Sites.

    Data Retention

    We will process your data:

    • For the conclusion and performance of the contract — until the contract is terminated or expires, and then until the end of the limitation period for claims
    • For marketing of products or services — until the termination or expiry of the contract or until you object to the processing of your data for this purpose
    • For the purpose of establishing, investigating or defending against claims — until the end of the limitation period for claims
    • To comply with legal obligations — until the expiry of data retention obligations under the law
    • For the purpose of producing compilations, analyses, statistics for internal needs — for the duration of the agreement and then until the end of the limitation period for claims or until an objection is raised

    Notice to California Residents

    If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA). You have the right to know what personal information we collect, the right to delete personal information (subject to certain exceptions), and the right to opt-out of the sale of personal information. We do not sell personal information.

    If you choose to exercise your rights, we won't charge you different prices or provide different quality of services unless those differences are related to value provided to Pyrate by your data. To make such a request, please contact us at [email protected].

    Children's Privacy

    Pyrate services are not directed at children under the age of 16 and Pyrate has no actual knowledge of the sale of information of minors under 16 years of age. By using Pyrate services, you represent that you are at least eighteen years old and understand that you must be at least eighteen years old in order to create an account and use Pyrate services.

    Changes to This Policy

    Pyrate may update or revise this Policy from time to time. You agree that you will review this Policy periodically. If we make any changes to this Policy, we will change the "Last Updated" date above. You are free to decide whether or not to accept a modified version of this Policy, but accepting this Policy, as modified, is required for you to continue using our Sites. If you do not agree to the terms of this Policy or any modified version of this Policy, your sole recourse is to terminate your use of our Sites.

    Optional Google Calendar Connection

    Google Calendar is an optional connection for appointment booking and calendar synchronization. When you connect it, we receive your Google account email address and authorization credentials. The current integration reads events on your primary calendar, including event identifiers, titles, start/end times and cancellation status, to display your schedule and identify blocked time. We also receive event-change notifications. We create, update and delete Pyrate appointment events as bookings change; these may contain the client's name, appointment description, business location and appointment times. The new Calendar authorization is separate from the optional Gmail connection and grants no email access.

    Credentials are encrypted in storage. External-event results are temporarily cached in server memory and reused for up to three minutes before a fresh read is required; this does not mean the data is automatically deleted after three minutes. Pyrate-created event identifiers are retained for synchronization. Relevant calendar information may be processed by the infrastructure and AI service providers used to operate the assistant, including OpenRouter and the model providers that answer calendar or booking requests.

    Pyrate's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Calendar data, use it for advertising or use it to train general-purpose AI models. We share it only as permitted by that policy, including as needed for the features you request, for security purposes, to comply with law, or in a business transfer with your prior consent. These limits apply even where this Policy describes broader uses of other information.

    Disconnect Calendar or Request Data Deletion

    Disconnect the separate Calendar connection in account settings or revoke access in your Google account. Disconnecting in Pyrate removes the saved Calendar credentials, clears the temporary event cache, stops further access and attempts to remove Pyrate-created Google events. Independently connected Gmail remains connected. Disconnecting an older combined Gmail/Calendar grant can stop both features until they are connected separately.

    Disconnecting does not automatically delete appointment records or assistant conversations already held by Pyrate. To request deletion of Calendar information, email [email protected] with the subject "Google Calendar data deletion" and identify your Pyrate account and connected Google email address. Do not send passwords or authorization credentials. We may verify your identity/authority and explain records retained to meet legal obligations or resolve disputes. We retain information as needed for the requested features and deletion requests, subject to the Data Retention provisions of this Policy. Deletion from Pyrate does not delete information independently held by Google or other calendar participants.

    AI Features

    For details about how Pyrate uses AI, including which AI providers we use and how your Gmail data is handled under Google's Limited Use requirements, see our AI Transparency page.

    Contact Information

    For questions about accessing, changing, or deleting your personal information, please send an email to [email protected].

    For questions or opinions on this Policy, please contact Pyrate via email at [email protected] or by postal mail at:

    Pyrate Inc.
    123 Washington Street, New York, NY 10006