Legal

Privacy Policy

Last updated: March 2026

This policy explains what information richkapp.com collects, how it's used, and your rights around it. The short version: I collect the minimum needed to run the booking system and respond to inquiries. I don't sell your data.

01

Who is responsible for your data

Richard Kappel is the data controller for richkapp.com. If you have any questions about this policy or how your data is handled, reach out via the contact page.

02

What data is collected

Contact form submissions

When you submit the contact form, your name, email address, and message are sent to me via Web3Forms. This data is used solely to respond to your inquiry. Web3Forms has its own privacy policy.

Booking system

If you book a session, the following is stored in a Supabase (PostgreSQL) database:

  • Name and email address
  • Session type and booked time slot
  • A unique booking token (for managing or canceling your booking)

Booking data is stored securely and used only to manage your appointment, send confirmation and reminder emails, and maintain scheduling records.

Calendar integration

If Google Calendar is connected to manage availability, OAuth tokens are stored encrypted in the database. These are used only to check and update calendar availability. No calendar content beyond free/busy status is read.

03

What is not collected

  • No analytics or tracking scripts are loaded on this site
  • No cookies are set beyond what's required for the booking session
  • No advertising or retargeting pixels
  • No data is sold to third parties

04

Third-party services

Vercel

Hosting and serverless functions

Privacy policy →

Supabase

Database (bookings and user data)

Privacy policy →

Resend

Transactional email (confirmations, reminders)

Privacy policy →

Web3Forms

Contact form submissions

Privacy policy →

Google

Calendar availability integration (optional)

Privacy policy →

05

How long data is kept

Contact form submissions are retained only as long as needed to respond. Booking records are kept for a reasonable period to maintain scheduling history and comply with basic business record-keeping. You can request deletion at any time.

06

Your rights

You have the right to:

  • Request a copy of the data held about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Cancel any booking using the link in your confirmation email

To exercise these rights, use the contact page.

07

Changes to this policy

If this policy changes in a material way, the updated date at the top of this page will reflect it. Continued use of the site after changes are posted constitutes acceptance of the updated policy.