Your data is yours
Studios retain 100% ownership of all client data, schedules, and records uploaded to BookYourMat. If you leave, your data leaves with you.
Card payments go through Stripe Connect
Connecting card payments uses Stripe’s own hosted onboarding — BookYourMat never asks for your Stripe credentials or API keys, and never sees your card processing credentials. BookYourMat is not a payment processor itself: funds you collect via Venmo, Zelle, cash, or check move directly between you and your client, and BookYourMat’s job is matching those payments to the right client and package, not moving the money.
Sensitive tokens are encrypted at rest
Access tokens for connected accounts (like Google OAuth refresh tokens) are encrypted at rest with AES-256-GCM before they touch the database, not stored in plain text.
Gmail access, if you connect it, is read-only
Connecting Gmail lets BookYourMat spot Venmo and Zelle payment notification emails in your own inbox and turn them into payment records to match. The Google consent screen grants read-only access — BookYourMat cannot send email from your account or read anything beyond what that scope covers.
SMS is opt-out by design
Every text conversation supports standard carrier opt-out: reply STOP to cancel, HELP for support. Message and data rates may apply per your carrier plan.
Full legal terms: Terms of Service · Privacy Policy. Questions about data handling: privacy@bookyourmat.com.