Privacy Policy

Calmento is operated by Waveline Labs Ltd, a New Zealand company. This policy applies to two groups: business owners who sign up for a Calmento account to take bookings, and their clients: the people who book an appointment through a business’s Calmento booking page.

For a business owner’s clients, the business is the data controller and Calmento is a data processor acting on that business’s behalf. If you’re a client with a question about your data, the fastest path is contacting the business you booked with directly; we’re glad to help too at hello@wavelinelabs.com.

From business owners: your name and email (via account sign-up), your business’s name, timezone, services, pricing and availability, and, once card payments or a Calmento subscription are live, payment details, which are collected and stored directly by Stripe, never by us.

From clients booking an appointment: name, email, phone number (if given), and any notes entered at booking time. This is only ever what a client types into a business’s own booking page. Calmento never collects client data independently.

From anyone using our contact form: your name, email address and the message you write. It is emailed to our support inbox and is not stored in Calmento’s database.

We never ask for more than a field needs. Client notes are capped, phone numbers are optional, and nothing here is used for advertising or sold to anyone.

• Running the booking page, calendar, and dashboard a business actually uses.
• Sending booking confirmations and reminders by email (and SMS, where a client gives a phone number).
• Processing payments, when a business has card payments turned on, via Stripe, directly.
• Syncing a business’s own calendar, when they choose to connect Google Calendar.
• Keeping the service reliable and secure (error monitoring, abuse prevention).
• Responding to support requests.

We use a small number of third-party providers to run Calmento. Each only sees what it needs to do its job:

• Supabase: database and authentication hosting.
• Vercel: application hosting.
• Stripe: payment processing, when a business accepts card payments. Stripe holds card details directly; Calmento never sees or stores a card number.
• Resend: sends booking confirmation and reminder emails, and delivers contact-form messages to us.
• Twilio: sends SMS reminders, when a client provides a phone number.
• Google: two-way calendar sync, only for businesses that choose to connect it.
• Anthropic: powers the optional AI Setup Assistant. See the dedicated section below.
• Sentry: error monitoring, so we notice and fix problems quickly. Error reports are scrubbed of secrets and personal data before they’re logged.
• Better Stack: uptime monitoring for the service itself. It doesn’t touch your data.

We don’t sell data to anyone, and we don’t share it beyond what’s needed to run the service above.

Calmento offers an optional AI-powered Setup Assistant that helps you fill in your services, hours, and booking rules from a plain-language description you type during onboarding or from your dashboard.

Provider. We use Anthropic PBC (“Anthropic”), a third-party AI provider, to generate a draft setup from your description. Anthropic processes this request on our behalf, not as an independent owner of your data.

What’s sent. Only the text you type into the Setup Assistant, capped at 4,000 characters. We never send your clients’ personal information, appointment history, payment details, or any other account data to Anthropic. The Setup Assistant has no access to that data and can’t take any action on its own; you review and confirm everything before it’s applied.

Retention. Anthropic’s standard commercial API terms apply: Anthropic does not use API inputs or outputs to train its models by default. On our side, we keep a record of each draft you reviewed and applied (or didn’t) so you can see what changed and when. This stores the structured result, never your original free-text description. Separately, we keep basic usage numbers (token counts, cost, timing, success or failure) for our own reliability monitoring, never the text itself.

Processing location. Requests are processed on Anthropic’s standard infrastructure in the United States.

Turning it off. The Setup Assistant is entirely optional. You can always use the manual setup forms instead, both during onboarding and later from Settings.

We keep account and booking data for as long as an account is active, so the business it belongs to can keep running their booking page. If you close your account, we delete your data. Export anything you want to keep first, from Settings, at any time.

Calmento uses a small number of essential cookies to keep you signed in. We don’t use advertising or third-party tracking cookies.

Under New Zealand’s Privacy Act 2020, you can ask to see the personal information we hold about you and ask us to correct it. If you’re not satisfied with how we’ve handled a request, you can complain to New Zealand’s Office of the Privacy Commissioner. If you’re in the EU or UK, additional rights may apply to you; contact us and we’ll help.

If this policy changes in a meaningful way, we’ll update the date at the top of this page.

Questions about this policy or your data: hello@wavelinelabs.com.