Privacy policy

Effective September 2, 2026

1. Who we are

account42 is a booking system for businesses that run paid, fixed-date classes and sessions: studios, schools, coaches, tutors, charters and similar businesses. It is a product of Curated Globe LLC, a Maryland limited liability company, at 5000 Thayer Center STE C, Oakland, MD 21550, United States.

In this policy, “we” and “us” mean Curated Globe LLC. “Merchant” means a business that signs up for account42. “Customer” means a person who books a session through a merchant’s booking page.

You can reach us about privacy at support@account42.com.

2. The two roles we play

We handle personal information in two different capacities, and it matters which one applies to you.

For merchants, we are the controller. When a business signs up for account42, we decide how we handle their account information and we are responsible for it directly.
For a merchant’s customers, we are a processor. When someone books a pottery class, that booking belongs to the studio. We store and process it on the studio’s instructions. The merchant decides what to collect, how long to keep it, and who may see it.

If you booked a class and want your information changed or deleted, the fastest route is usually the merchant you booked with. You can also contact us and we will pass the request to them or act on their instructions.

3. What we collect

3.1 From merchants

Account information: name, business name, email address, phone number, password credentials.
Configuration: locale, timezone, currency, session and pricing setup, cancellation and refund rules.
Billing information: your subscription plan and payment status. Payments are processed by Stripe or PayPal. We do not receive or store full card numbers.
Support correspondence you send us.

3.2 From customers, on behalf of merchants

Name.
Email address, phone number, or both, depending on which channels the merchant requires and offers.
Booking records: which sessions were booked, held, canceled or waitlisted, and when.
Payment status for a booking, along with entitlement records such as membership status or credit balances. Card details go directly to Stripe or PayPal and are not stored by us.
SMS consent status, where the customer has opted in to text messages.

3.3 Technical data

Log and diagnostic data such as IP address, browser type, timestamps and error reports, used to keep the service running and secure.

4. How we use information

To provide the service: taking bookings, holding seats, processing entitlements, running waitlists, and applying cancellation rules.
To send transactional messages: booking confirmations, reminders, waitlist offers, cancellation notices, and account or billing notices.
To take subscription payments from merchants and to calculate partner commission.
To provide support when you ask for it.
To keep the service secure, prevent abuse, and diagnose faults.
To meet legal and tax obligations.

We do not sell personal information. We do not use a merchant’s customer data to market our own product to those customers.

5. Text messages (SMS)

Text messaging is off until a merchant turns it on, and it is opt-in for customers. Specifically:

Text messages are sent only to customers who opt in through a merchant’s booking flow.
Messages are booking confirmations, reminders and waitlist notifications. They are transactional, not marketing.
Message frequency varies with how often you book.
Message and data rates may apply.
Reply STOP to opt out at any time, and HELP for help.
Phone numbers and SMS opt-in consent are not sold, rented or shared with third parties or affiliates for marketing purposes.

For email, you can opt out of non-essential messages using the unsubscribe link in any message. Messages that are necessary to a booking you made, a confirmation or a cancellation notice, are part of the service.

6. The assistant

Conversations with the account42 assistant, in a merchant’s dashboard or a booking page, are processed by a large-language-model provider acting as our subprocessor (currently Anthropic, PBC). Conversation content is used only to carry out the request and to improve reliability of the assistant for that merchant; it is not used to train the provider’s models under our agreement with them, and it is retained for 90 days unless the merchant deletes it sooner.

7. Where your data is stored

Data is stored and processed in Canada, on Supabase in the Canada Central region. Because we operate from the United States, data may be accessed from the United States by our staff and by the service providers listed below in the course of running and supporting the service.

8. Service providers

We use a small number of providers, each for a specific job, and each bound to handle information only for that purpose.

Supabase: hosting and database, in the Canada Central region.
Stripe: payment processing for merchant subscriptions and for merchant sales made through connected accounts.
PayPal: payment processing, where a merchant uses PayPal rather than Stripe.
Resend: sending transactional email.
Twilio: sending SMS messages, where SMS is enabled.
Anthropic: assistant processing, as described above.
Our web hosting provider: serving this website and the booking pages.

9. How long we keep information

Merchant account data is kept for as long as the account is open, and for up to 12 months afterward so an account can be reopened, then deleted or anonymized. Booking and customer records are kept for as long as the merchant’s account remains open, subject to the merchant’s own retention choices and any deletion request they send us. Billing and tax records are kept for as long as tax law requires, typically seven years.

10. Security

Data is encrypted in transit.
Tenant isolation is enforced in the database itself, not only in application code, so one merchant’s data cannot be read through another merchant’s session.
Access is granted on a least-privilege basis and limited to staff who need it to run or support the service.
Card data is handled by Stripe and PayPal, so it never reaches our systems.

No system is perfectly secure, but we will tell affected merchants without undue delay if a breach affects their data.

11. Your rights

Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a portable copy, or object to or restrict certain processing. You will not be treated differently for exercising these rights.

To exercise them, email support@account42.com. We will verify your identity before acting. If your request concerns a booking you made with a merchant, we act as that merchant’s processor, so we will route the request to them or act on their instructions.

12. Children

account42 is a business tool and is not directed to people under 18. We do not knowingly collect personal information from children under 13. If a merchant books a class on behalf of a minor, the merchant is responsible for having the appropriate consent from a parent or guardian. If you believe we hold information from a child under 13, contact us and we will delete it.

13. Cookies

This website uses only strictly necessary cookies, and no third-party tracking or advertising cookies. There is no analytics profiling of visitors on this site. The account42 application itself uses cookies that are necessary to keep you signed in and to keep your session secure.

14. Changes to this policy

If we change this policy we will update the effective date at the top. If a change materially affects merchants, we will give notice by email or in the dashboard before it takes effect.

15. Contact

Curated Globe LLC
5000 Thayer Center STE C, Oakland, MD 21550, United States
support@account42.com