Security
How BookMyTime handles access and payments.
Card details are handled by Stripe or PayPal. Calendar access uses OAuth and can be revoked. Booking data is encrypted in transit. This page says what that means, and what we do not claim.
Updated 22 October 2026
Payments
When you connect Stripe or PayPal, the client pays that provider at checkout. The card number, or wallet token, is entered on the provider's checkout. BookMyTime receives the result of the payment — that it succeeded, the amount, the currency — so we can confirm the slot and send a receipt. We do not store full card numbers.
You can disconnect the provider from your payment settings. Disconnecting stops new charges. It does not delete payouts already made, which live in that provider's account.
Calendar access
Google, Microsoft and Apple connections use OAuth. You approve the account in their screen, not by giving BookMyTime your password. You can revoke access in BookMyTime settings and in the provider's own security page. Revoking access stops new conflict checks and new events from being written.
Visitors on your booking page see open slots. They do not see the titles of the events that made you busy. That separation is described on calendar sync.
Transit, accounts and infrastructure
Pages and API calls are served over HTTPS. Passwords are handled by Firebase Authentication, not stored by us in plain text. Booking and profile data is stored in Google Cloud Firestore as part of Firebase. The site is deployed with Cloudflare. Those providers process data on our behalf. The privacy policy lists them.
Sign-in can use email and password or Google. If you lose access, the password reset on the login page sends a message to the account email. We cannot see your password in order to tell it to you.
What we do not claim
BookMyTime does not currently advertise a SOC 2 report, ISO certification, or HIPAA compliance. Do not use it as an electronic health record or as the system of record for legal advice. If a vendor comparison you read elsewhere says otherwise about us, that page is wrong.
If you believe you have found a vulnerability, email hello@bookmytime.me with the subject 'Security'. Please give us a chance to fix it before you publish details. We do not run a paid bounty program.