Privacy for people who book

Last updated October 9, 2026

Here’s what we keep, why we keep it, and how to delete it.

You booked at a shop whose booking site runs on Thrivari. Your relationship is with the shop. We make the software behind it, and we work for them. Questions about your own record? Ask the shop. Questions about the software? Email hello@thrivari.com.

The short version

What the shop keeps

Saved cards

If you save a card, Square holds it. Square is the payment company. The shop and Thrivari keep only a reference that Square will honor for that shop and nobody else. We never see your card number.

How you sign in

You enter your phone number, and we text you a six-digit code. There’s no password to remember or lose. Telnyx sends the code for the shop.

Texts and emails

You get texts and emails about your own bookings: confirmations, reminders, and changes. If the shop wants to send anything else, like an offer, it asks you first. Reply STOP to any text to stop texts from that shop.

More on sign-in codes and appointment texts is in Text messages.

What we see on the booking site

Like any website, the booking site sees a few basics:

It records what you tap, so the shop can see where people get stuck. A small random ID in your browser keeps you signed in. No third-party cookies and no ad trackers. We never store your IP address.

Who can see it

Nobody else, unless the law requires it.

What we never do

Sell anything about you, or share it for ads.

See, fix, or delete your record

Ask the shop, or email hello@thrivari.com with the phone number you book with. We’ll take care of it within 30 days. Deleting your record cancels any future bookings you have with that shop.

How long we keep it

The shop keeps your record as long as you’re a guest there. If the shop stops using Thrivari, we delete its records from our systems 90 days later. The one exception is payment records, which tax rules make us keep.

Children

A parent or guardian books for children, under the parent’s account, with a first name and the service. We never collect anything from a child directly.

Changes

We’ll update the date at the top when this changes.