Purpose
This Data Processing Addendum describes how iPacen processes personal data on behalf of workspace owners when they use the service to collect and manage customer booking data.
Roles
For customer booking data, the workspace owner is typically the controller and iPacen is typically the processor. For account, billing, security, and product operations data, iPacen may act as an independent controller.
Processing instructions
iPacen processes booking data to provide the service, including hosted booking pages, availability validation, booking storage, payment status, calendar sync, email notifications, analytics, support, security, and troubleshooting.
Categories of data
- Workspace owner and team member account data.
- Customer booking data including name, email, phone, timezone, notes, appointment time, offer, and booking status.
- Payment metadata and status from Stripe.
- Calendar event identifiers, busy-time checks, and sync metadata when Google Calendar is connected.
- Technical and security data needed to operate the service.
Subprocessors
iPacen may use subprocessors for hosting, database/authentication, payments, calendar integrations, email delivery, monitoring, and support. Current subprocessors are listed on the Subprocessors page.
Security measures
- Server-side access controls for workspace data.
- Authentication and session management through trusted infrastructure.
- Separation of public booking flows from authenticated workspace operations.
- Server-side handling of service-role database credentials and integration secrets.
- Reasonable safeguards for uploads, payment metadata, and calendar integration data.
Data subject requests
If iPacen receives a privacy request relating to booking data controlled by a workspace owner, we may direct the requester to the workspace owner or assist the workspace owner where reasonably possible.
Deletion and return
Upon account or workspace deletion, iPacen will delete or de-identify customer data according to product functionality, operational needs, legal obligations, and backup retention cycles.
Contact
DPA questions can be sent to hello@ipacen.com.