Privacy Policy

Kanoa plays two different roles depending on whose data is involved.

For studios and instructors (“Organizations”): When you sign up for a Kanoa account, we act as the controller of your account and billing information and handle it as described in this policy.

For students and clients (“End Users”): When an End User books through a studio's Kanoa-powered page, the studio decides what data to collect and why. The studio is the controller of that information, and Kanoa acts as a service provider (processor) that handles it on the studio's behalf. End Users with questions about a specific booking should also contact the studio they booked with.

Account information: When you sign up as a studio owner or instructor, we collect your name, email address, password (hashed), and organization details such as your business name and URL slug.

Booking information: When a student books a class through a Kanoa-powered booking page, we collect their name, email address, and optionally their phone number, along with any custom form fields the studio chooses to collect. We do not store full payment card numbers; card data is handled by the studio's payment provider (Stripe or Square).

Usage data: We collect information about how you interact with the platform, including log data, feature usage, and natural-language commands submitted through the dashboard.

Payment & billing data: For your Kanoa subscription, we process billing information through Stripe. Kanoa does not store full card numbers or CVVs.

We use collected information to:

• Operate, maintain, and improve the Kanoa platform
• Process subscription payments and enable class bookings
• Send transactional emails such as booking confirmations and cancellation notices
• Provide customer support
• Enforce our Terms of Service and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use your data for advertising.

Kanoa includes natural-language scheduling. When you submit a command through the dashboard, the text of that command and the scheduling context needed to act on it are sent to a third-party AI provider that processes it on our behalf to generate a response.

This processing is solely to operate the feature. Your data is not used to train the AI provider's models, and the AI provider acts as our service provider under contractual confidentiality and security obligations.

We share information only with service providers that help us operate the platform, and only as needed to provide the service:

Payment providers: For your Kanoa subscription, billing information is shared with Stripe, Inc. For class bookings and gift certificate purchases, card and transaction data is handled by the studio's own payment provider, either Stripe or Square, and settles into the studio's own account. Kanoa does not receive or hold those funds.

Other service providers: We use a transactional email provider to send confirmations and notifications, a third-party AI provider for natural-language features (see Section 4), and cloud hosting and database providers in the United States to run the platform. These providers may process personal data only to provide services to us.

Studios: When a student books a class, their name, email, phone number, and any form responses are accessible to the studio or instructor managing that class. Students acknowledge this when completing a booking.

Legal requirements: We may disclose information if required by law, court order, or governmental authority, or to protect the rights, safety, or property of Kanoa, our users, or the public.

We retain account data for as long as your account is active. If you close your account, we may retain data for a limited period to comply with legal obligations, resolve disputes, and enforce our agreements, after which it is deleted or anonymized.

Booking records are retained to support refund processing, dispute resolution, and financial reporting requirements.

Kanoa is operated from the United States, and the information we collect is processed and stored in the United States. If you access Kanoa from outside the United States, you understand that your information will be transferred to and processed in the United States.

We take reasonable technical and organizational measures to protect your data against unauthorized access, loss, or disclosure. These include encrypted connections (HTTPS), hashed password storage, encryption of stored payment-provider credentials, and scoped access controls.

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information and to notifying affected users of a data breach as required by applicable law.

Kanoa uses session cookies and similar technologies to keep you logged in and to maintain session state. We do not use third-party advertising cookies or cross-site tracking.

You can configure your browser to refuse cookies, but doing so may prevent you from logging in or using certain features.

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to opt out of the sale or sharing of personal information (note that we do not sell or share it), and to not be discriminated against for exercising these rights. To exercise any of these rights, contact us at contact@kanoascheduling.com. We will verify your request and respond within the timeframe required by applicable law. You may use an authorized agent to submit a request on your behalf.

If you are an End User asking about data a studio collected through its booking page, that studio is the controller of that data. We will refer your request to the relevant studio or help facilitate it as their service provider.

Studios may request deletion of their organization data and associated customer records by contacting us. We will process such requests in accordance with applicable law.

Kanoa is not directed at children, and studio accounts may only be created by adults. We do not knowingly collect personal information directly from children under 13. Where a studio enrolls minors in its classes, the studio is responsible for collecting any parental consent required by law. If you believe we have inadvertently collected a child's information, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date above. Material changes will be communicated via email or in-app notice. Continued use of Kanoa after changes take effect constitutes acceptance of the revised policy.

Kanoa Scheduling is located at 2108 N Street, Suite N, Sacramento, CA 95816, United States. Questions about this Privacy Policy? Email us at contact@kanoascheduling.com or visit our About page.