Appointments · Trust
What we promise, in writing.
The promises behind DriveBird Appointments, and how your information is looked after — written down so you can hold us to them, and so a security or privacy review has somewhere to start.
Our promises
-
Nothing you rely on disappears overnight
Before we remove a feature, we email every organisation owner at least 90 days ahead, and publish the notice on this page.
-
If we ever stop, you get everything back first
If DriveBird Appointments ever ends, every owner hears at least 180 days ahead. Your complete export keeps working all that time and for 90 days after we stop; then everything is deleted.
-
Your information is never sold
We never sell your information or your customers’, and never use it for advertising.
-
Take everything, whenever you like
Your organisation’s settings have a “Download everything” button: every appointment, customer, answer, message and payment, as one file you can open in a spreadsheet. You never have to ask us.
How your information is handled
- Kept encrypted
- The keys of your payment account, your calendar and meeting connections, your phone line’s token and your webhook signing secrets are stored encrypted, so the database alone does not reveal them. API keys are kept only as a fingerprint: a key is shown once, when it is made, and never again.
- Seen only by the people who need it
- Your organisation’s information is open only to your own team, and each member sees what their role allows. A customer sees only their own appointments, through their own private link.
- Every change is written down
- Each appointment keeps a plain-language history of who did what, and when, which both sides can read. Opening sensitive information is written into that history too.
- Your customers pay you, not us
- Deposits, fees and refunds go through your own payment account, straight to your bank. DriveBird never holds your customers’ money.
- Kept no longer than it is needed
- A recording brought for meeting notes is deleted as soon as the notes are made, and the notes are kept only as long as your organisation chooses. When an owner deletes their DriveBird account, their organisations go with it. A customer who deletes their account is removed from every organisation’s records, and an organisation can remove a customer who asks.
Outside services we use
These companies handle some information for us — only for the reason shown, and only when it applies.
| Service | Used for | When |
|---|---|---|
| DriveBird’s hosting provider | Runs the servers and the database that hold every organisation’s information | Always |
| DriveBird’s email delivery service | Delivers every email: confirmations, reminders and messages | Always |
| DigitalOcean Spaces | Keeps the files organisations upload: logos, photos and documents | Always |
| OpenAI | Reads what customers write to the booking assistant, writes suggested messages and meeting notes, and turns meeting recordings into text | Only when an organisation uses the assistant, suggested messages or meeting notes |
| Meta WhatsApp | Sends and receives WhatsApp messages | Only when WhatsApp is the way a person is reached |
| Amazon Web Services (SNS) | Sends text messages in India | Only when a text message is the way a person is reached |
| Razorpay and Stripe | Take a customer’s payment straight into the organisation’s own account | Only through the payment account an organisation connects |
| Razorpay | Takes an owner’s wallet top-ups, which pay DriveBird | When an owner tops up their wallet |
| Google Calendar and Microsoft 365 | Show a member’s busy times, and add their appointments to a calendar of DriveBird’s own | Only when a member connects their calendar |
| Zoom, Webex, Google Meet, Microsoft Teams and Whereby | Make the online meeting for an appointment | Only when a member or the organisation connects one |
| Twilio | Answers calls to an organisation’s own phone line | Only when an organisation connects its own Twilio number |
| Cloudflare | Serves an organisation’s booking pages under its own web address | Only when an organisation uses its own web address |
Notices
No notices. When something changes, every organisation owner is emailed and the notice is published here.