Privacy Policy

Who we are

Suchness is operated by Pachua LLC, a Texas limited liability company ("Suchness", "we", "us"). We are responsible for the personal data described in this policy.

What we collect

We collect the information you give us directly and a small amount generated by using the product:

• Account details: your name, email address, and phone number if you sign in with a phone code.
• Profile content: anything you choose to add to a public profile or listing.
• Booking and purchase records: what you booked, when, and the amounts involved.
• Messages and form responses you submit through the platform, such as intake forms.
• Messages you send us through the contact form: your name, the email address you give, and what you write. We keep them so we can answer you.
• Technical basics: device, browser, and the requests needed to keep the service working and safe.

What we don’t collect

Card numbers never touch our servers. Payments are processed by Stripe, and your card details stay with them. We don’t buy data about you from third parties, and we don’t run advertising or analytics trackers.

How we use it

We use your information to run the service: creating your account, processing bookings and payouts, delivering messages and form responses to the right practitioner, providing support, and keeping the platform safe. We send transactional email and text messages (sign-in codes, receipts, booking updates) and, only if you opt in, an occasional newsletter.

Google Calendar

Hosts can choose to connect a Google Calendar. When you do, you pick which of your calendars count as busy and which one we add your bookings to. Here is exactly what that connection does:

• We read the start and end times of events in the calendars you chose, and whether each one shows you as busy or free, so we don’t offer times you are already busy. We do not read or store event titles, descriptions, locations, or guests.
• We list your calendars’ names and colours so you can choose which ones to use.
• We add, update, and remove events for your Suchness bookings and classes in the one calendar you chose. We never change or delete events we did not create.
• We keep the access Google gives us encrypted, and use it only for the sync described here.
• You can disconnect at any time from your Suchness settings, or from your Google Account’s security page. When you disconnect, we stop syncing and delete the busy times we stored. You can also choose to remove the events we added.

How we treat Google data

Suchness’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In practice: we use Google data only to show your availability correctly and keep your bookings in your calendar. We don’t sell it, use it for advertising, or share it with anyone except as needed to run that feature, to keep the service secure, or to comply with the law. People at Suchness don’t look at your calendar data unless you ask us to for support, or it’s needed for security or legal reasons.

How we protect your data

These are the safeguards in place for everything you give us, including Google Calendar data, health answers in intake forms, signed agreements and contact details:

• Encryption in transit. Every connection to Suchness, and between Suchness and the services it relies on, uses HTTPS (TLS).
• Encryption at rest. Our database and file storage are encrypted with 256-bit AES by our backend provider, Convex.
• Google access is encrypted a second time. The access Google gives us for your calendar is encrypted by us with AES-256-GCM before it is stored, with a key kept separately from the database, and it is tied to your account so it cannot be used for anyone else’s.
• We keep as little as we can. From Google Calendar we store only the start and end times of busy periods, never event titles, descriptions, locations or guests.
• Access is checked on every request. Each request to our backend is checked against who is signed in. Your calendar data is used only for your own availability. Intake answers and signed forms can be opened only by you, the practitioner you gave them to, and the people on their team who can see bookings.
• Limited staff access. People at Suchness open personal data only when you ask for help, or when security or the law requires it.
• No passwords, no card numbers. You sign in with a one-time code, so we hold no passwords. Card details go straight to Stripe and never reach our servers.
• Deletion. When you disconnect Google Calendar we revoke our access with Google and delete it, along with the busy times we stored. When you ask us to delete your account we remove your personal data as described under Retention and deletion.

Who we share it with

We never sell your data. We share it only with the services that make Suchness work, and with the practitioners you book with, who see what they need to host you (your name, contact details, and the forms you complete for them). The services we use:

• Stripe, for payments and payouts.
• Resend, for email.
• Prelude, for sign-in codes by text message and WhatsApp.
• Convex, our database and backend.
• Vercel, which hosts the website.
• Google, for maps, place search and time zones, and for Google Calendar if you connect it.

Intake forms and sensitive information

Some practitioners ask health-related questions in their intake forms. Those answers go only to the practitioner you submit them to and the people on their team who can see bookings. We store them securely and don’t use them for anything else.

Cookies

We use a small set of first-party cookies: keeping you signed in and remembering preferences like your theme. No advertising or analytics cookies.

Retention and deletion

We keep your data while your account is active. If you ask us to delete your account, we remove personal data within 30 days, except records we are legally required to keep, such as transaction records for tax purposes.

Your rights

You can ask to access, correct, export, or delete your personal data at any time by emailing support@suchness.one, and a person will handle it, usually within a few days. Depending on where you live, you may have additional rights under laws such as GDPR or CCPA. We honour those requests wherever you are.

Changes to this policy

If we make material changes, we’ll tell you by email or an in-product notice before they take effect. The date at the top shows the latest revision.