Privacy Policy

Last updated: September 18, 2026

NeverGap, operated by NeverGap LLC, a New Jersey limited liability company ("NeverGap," "we," "us," or "our"), provides online booking and scheduling software. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Our Role: Data We Control vs. Data We Handle for Businesses

NeverGap serves two kinds of people, and our privacy responsibilities differ for each:

• Business owners (our customers): When you sign up for a NeverGap account, we act as the controller of your account information and decide how it is used, as described in this policy.
• Clients who book with a business: When a client books an appointment, joins a waitlist, or pays a deposit through a business's NeverGap page, the business, not NeverGap, decides what information to collect and why. For that client information we act as a service provider (processor) that handles the data on the business's behalf and under its instructions. The business is responsible for its own privacy practices and for having a lawful basis to collect that information. If you are a client and wish to access, correct, or delete information you provided to a business, please contact that business directly. You may also contact us and we will help route your request to the business.

Business customers that require a Data Processing Addendum (DPA) governing how we process client data on their behalf may request one at support@nevergap.com.

Information We Collect

We collect information that you provide directly to us:

• Account Information: Name, email address, phone number, business name, and password when you create an account
• Booking Information: Client names, contact details, appointment dates and times, service preferences
• Payment Information: We process payments through Stripe. We store limited payment details (last 4 digits, card brand) but never store full credit card numbers
• Usage Data: IP address, browser type, device information, pages visited, and timestamps
• Communications: Messages you send through our platform, customer support inquiries

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our booking services
• Process appointments and send booking confirmations and reminders
• Process deposits and payments
• Send administrative information, updates, and security alerts
• Respond to your comments, questions, and customer service requests
• Analyze usage patterns to improve user experience
• Prevent fraud and enforce our Terms of Service
• Comply with legal obligations

SMS Notifications & Consent

By booking an appointment, joining a business's waitlist, or calling a business that uses NeverGap, you consent to receive SMS (text message) notifications related to that interaction. These messages may include:

• Booking confirmations: Confirmation of your scheduled appointment
• Appointment reminders: Reminders sent before your appointment time
• Cancellation notices: Notifications if an appointment is canceled or rescheduled
• Rescheduling offers: Alternative time slots offered after cancellations
• Waitlist alerts: If you join a business's waitlist, a text when a matching time opens up
• Missed-call responses: If you call a business that uses NeverGap and your call is missed, a text with a booking link so you can still reach them

Message Frequency: You will receive SMS messages only in connection with the business you interacted with. For a booking, this is typically 1-3 messages (confirmation, reminder, and an optional follow-up).

Message & Data Rates: Standard message and data rates may apply based on your mobile carrier's plan.

How to Opt Out: You can opt out of SMS notifications at any time by replying STOP to any SMS message you receive from us. Please note that opting out of SMS may affect your ability to receive timely appointment reminders.

Help & Support: Reply HELP to any SMS message for assistance, or contact us at support@nevergap.com.

We use SMS services to enhance your booking experience and reduce missed appointments. Your phone number is stored securely and is never shared with third parties for marketing purposes.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties.

Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• Service Providers: We share data with third-party service providers who perform services on our behalf, including:
  • Google Calendar API: Optional appointment sync (only if you enable this feature), creates, updates, and removes calendar events for your bookings
  • Twilio: SMS delivery for appointment confirmations, reminders, and cancellation notices
  • Stripe: Subscription billing and deposit payments, we store limited payment details (last 4 digits, card brand) but never store full card numbers
  • Email delivery provider: Transactional emails, booking confirmations, appointment reminders, and cancellation notices
  • Render: Application hosting and server infrastructure
  • Cloudflare: DNS and content delivery network services
• Legal Requirements: We may disclose information if required by law or in response to valid legal requests
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred
• With Your Consent: We may share information with your explicit consent

Each third-party service provider has its own privacy policy governing how they handle your data. We encourage you to review their policies.

Google Calendar Integration

NeverGap accesses Google Calendar only to:

• Create events for booked appointments
• Update events when appointments are rescheduled
• Remove events when appointments are cancelled

NeverGap does not read unrelated calendar data, store calendar event content outside scheduling purposes, or share Google user data with third parties.

Google user data obtained through the Google Calendar integration is used exclusively for the scheduling actions described above. We do not use this data for advertising, analytics, or any purpose unrelated to managing your appointments. NeverGap's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Keep you logged in, remember your preferences, and enable core functionality
• Analytics Cookies: Understand how you use our platform and identify areas for improvement
• Performance Cookies: Improve performance, load times, and user experience
• Security Cookies: Detect and prevent fraudulent activity and security threats

Cookie Types We Use: Session cookies (expire when you close your browser) and persistent cookies (remain on your device for a set period).

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, but disabling cookies may limit functionality (e.g., staying logged in, saving preferences).

Data Protection & Security

We implement industry-standard security measures to protect your information, including:

• HTTPS encryption in transit: All data transmitted between your device and our servers is encrypted using TLS/HTTPS
• Secure session management: Encrypted session handling with secure, HTTP-only cookies
• Password hashing: Account passwords are hashed using bcrypt and are never stored in plain text
• Access controls: Strict authentication and authorization on all data access
• Regular security reviews: We conduct periodic audits of our infrastructure and code

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Data Retention

We retain your information according to the following schedule:

• Active Accounts: All data retained while your account is active (Free or Pro plan)
• Cancelled Pro Subscriptions: All data retained when you downgrade from Pro to Free plan
• Deleted Accounts: Data permanently deleted within 30 days of account deletion. Google Calendar OAuth tokens are revoked and deleted immediately upon account deletion, we do not retain access to your Google account after deletion.
• Appointment Records: Retained for 3 years after appointment date for business and tax purposes
• Payment Records: Retained for 7 years as required by financial regulations
• Backup Copies: May persist in encrypted backups for up to 90 days after deletion

You may request deletion of your account and data at any time by contacting us at support@nevergap.com. Some data may be retained longer if required by law or for legitimate business purposes (fraud prevention, legal disputes, etc.).

Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal information we hold about you
• Right to Correct: Request correction of inaccurate or incomplete information about you
• Right to Delete: Request deletion of your personal information. You can delete your account from Settings → Account → Delete Account, or email us directly
• Right to Data Export: Request a copy of your data in a portable, machine-readable format
• Opt-out of Marketing: Unsubscribe from marketing emails (transactional emails like booking confirmations will still be sent)

To exercise any of these rights, including data deletion, export, or correction requests, email us at support@nevergap.com. We will respond within 45 days (extendable once by an additional 45 days where permitted by law, with notice to you). We will not discriminate or retaliate against you for exercising any of these rights.

Your U.S. State Privacy Rights

Depending on where you live, state privacy laws, including the New Jersey Data Privacy Act, the California Consumer Privacy Act (as amended), and comparable laws in Colorado, Connecticut, Virginia, and other states, may give you the following rights regarding personal data we control:

• Know / Access: Confirm whether we process your personal data and obtain a copy of it.
• Correct: Correct inaccuracies in your personal data.
• Delete: Request deletion of personal data we hold about you.
• Data Portability: Obtain your data in a portable, machine-readable format.
• Opt Out: Opt out of any "sale" of personal data, "sharing"/processing for targeted (cross-context behavioral) advertising, and certain profiling. NeverGap does not sell your personal data and does not share it for cross-context behavioral advertising.
• Appeal: If we decline your request, you may appeal by replying to our decision or emailing support@nevergap.com with the subject line "Privacy Appeal." If your appeal is denied, New Jersey residents may contact the New Jersey Division of Consumer Affairs, and California residents may contact the California Privacy Protection Agency or Attorney General.

To submit a request, email support@nevergap.com. We will verify your identity before responding (for example, by confirming control of the email address on file) and will not require you to create an account to make a request. You may use an authorized agent to submit a request on your behalf where the law allows, subject to reasonable verification.

If you are a client who provided information to a business that uses NeverGap, that business is the controller of your information; please direct rights requests to the business, as described in "Our Role" above.

Opt-Out Preference Signals (Global Privacy Control)

Some browsers and extensions let you broadcast an opt-out preference signal, such as the Global Privacy Control (GPC). Where required by law (including New Jersey and California), we treat a valid GPC signal as a request to opt out of the sale of personal data and processing for targeted advertising for that browser or device. Because we do not sell personal data or engage in cross-context behavioral advertising, honoring this signal does not change what we do with your data, but we recognize and respect it.

International Users & Data Transfers

NeverGap is operated in the United States, and our service providers are located primarily in the United States. If you access NeverGap from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, where data-protection laws may differ from those in your country. By using NeverGap, you consent to this transfer.

If you are located in the European Economic Area or the United Kingdom, you have rights under the GDPR (and UK GDPR), including access, rectification, erasure, restriction, portability, and objection. Our legal bases for processing are performance of our contract with you, your consent, and our legitimate interests in operating and securing the service. To exercise these rights or ask about our transfer safeguards, contact support@nevergap.com. You also have the right to lodge a complaint with your local supervisory authority.

Children's Privacy (COPPA)

NeverGap is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately at support@nevergap.com and we will promptly delete it. Users must be at least 18 years old to create a business account on NeverGap.

Third-Party Links

Our platform may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with an updated "Last updated" date
• Sending an email notification to your registered email address for significant changes
• Displaying an in-app notification for changes that affect how we use your data

Google API data usage: If we materially change how we use data obtained from Google APIs (such as Google Calendar), we will re-prompt you for consent before the new usage takes effect. Continued use of Google Calendar integration after such notice constitutes acceptance of the updated data practices.

Continued use of our services after non-material changes constitutes acceptance of the updated policy.

Billing and Payments

NeverGap uses Stripe to process all payments securely. We do not store your credit card information on our servers. All payment data is encrypted and handled by Stripe in accordance with PCI DSS compliance standards.

Client deposits:
Payment processing for businesses that collect deposits through NeverGap is provided by Stripe and is subject to the Stripe Connected Account Agreement. Stripe processes that payment data under the Stripe Privacy Policy.

Subscription billing:
Your Solo or Pro subscription is billed in advance on a monthly or annual basis. You will be charged on the same date each billing period.

Failed payments:
If a payment fails, we will retry automatically. You will receive an email notification. Your account will remain active during a 7-day grace period.

Refunds:
You may cancel at any time and your subscription stays active until the end of your current billing period. Refunds follow our Refund Policy, including the 7-day money-back guarantee on your first payment.

Data retention:
Billing records and invoice history are retained for 7 years in accordance with standard accounting requirements.

For billing questions contact: support@nevergap.com

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us:

• Email: support@nevergap.com
• Website: nevergap.com
• Mailing address: NeverGap LLC, 280 Route 17 North, Ste 197 #1025, East Rutherford, NJ 07073