Privacy policy

• We collect what the software needs to book an animal in and tell you when it is ready.
• We do not sell personal information, and we do not run advertising or analytics trackers.
• Three companies process data for us: Google, Stripe and Twilio. Nobody else receives it.
• Text messages are transactional and tied to a booking. Reply STOP to any of them to stop receiving them.

Most of the personal information here does not belong to the people who signed up. A shop creates an account and enters details about its own customers, the ranchers and hunters bringing animals in, or those customers enter their own details on the shop's public booking page.

For that customer information the shop decides what is collected and why; we hold and process it on the shop's instructions in order to run the service. If you are a customer of a shop and want your information changed or removed, the fastest route is to ask the shop directly. You can also write to us and we will pass it on and act on it.

From a shop: the name and email of whoever signs up, the shop's business name, address, phone, hours, the species it handles, its kill days, capacity and price list, and the message templates it writes. If it subscribes, a Stripe customer reference. We never see or store card numbers.

From or about a shop's customers: name, mobile number, optionally an email address, and everything attached to the booking, which is the species and head count, the kill date, tag numbers, hanging weights, the cut sheet answers, and any notes. Shops can also keep private notes on a customer record.

Automatically: we keep a log of every text message sent, including the number it went to, the message body, and what the carrier reported back. To stop the public booking form being abused we keep short lived counters keyed on the phone number being booked with and on the IP address of the request; these expire within hours. Our hosting provider keeps ordinary server logs.

Directory listings: business name, town and phone number for processors, taken from public records. These are business contact details, not private ones, and any business can ask to be removed.

We use two, both strictly necessary, and no others. There are no analytics, advertising or social media trackers on this site.

• A sign in cookie that keeps a shop user logged in. It lasts up to fourteen days and is cleared when you sign out.
• A short lived cookie, about two hours, that remembers which directory listing you are claiming while you create an account.

Messages go out from a registered number operated by us, with the shop's name in the body so you know who is contacting you. There are three: a booking confirmation, a reminder a couple of days before drop off, and a notice that the meat is ready.

These are transactional messages about a booking you or your shop made, not marketing. We do not send promotional texts and we do not share mobile numbers with anyone for their own marketing.

Reply STOP to any message to stop receiving them, or HELP for help. Message and data rates may apply. Stopping the texts does not cancel a booking, so call the shop if that is what you want.

The link a customer receives contains a long random token, and anyone holding that link can see and edit that one booking without a password. That is deliberate, so nobody has to make an account to fill out a cut sheet. It does mean the link is worth treating like a key: it reaches one booking and nothing else, and it is kept out of search engines.

• Google, through Firebase and Google Cloud, hosts the application and stores the database, files and sign in records, in the United States.
• Stripe handles subscription payments. Card details go to Stripe directly and never reach us.
• Twilio delivers the text messages, and receives the mobile number and the message body in order to do so.

We may also disclose information if the law requires it, or if a business is sold, in which case this policy travels with the data.

Booking records, cut sheets and customer records stay while the shop's account is open, because a shop needs last year's cut sheet when the same customer comes back. After an account closes we keep everything for 90 days, in case it was a mistake, then delete it. Message logs are kept for two years. Rate limiting counters expire within hours.

Data is encrypted in transit and at rest by our hosting provider. Access is scoped per shop, so one shop's account cannot read another's bookings, and that separation is enforced on the server and covered by an automated test suite. Staff logins are limited to what staff need, and cannot reach billing or the price list.

No system is perfect. If you find a weakness, please tell us at joshkbutcher@gmail.com before telling anyone else.

You can ask us for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to joshkbutcher@gmail.com and we will answer within a few days.

We do not sell personal information or share it for cross context behavioural advertising, so there is nothing for you to opt out of on that front.

The service is for businesses and is not directed at children under 13. We do not knowingly collect their information.

If this policy changes materially we will say so in the app or by email. For anything here, see the contact page.