Privacy Policy

When you create a MergeCase account, we collect the email address you sign up with and the business name you provide. As you use the product, we store the data you enter — clients, bookings, services, staff and payment records — so we can render the app for you.

We never store full credit card numbers on our servers. All card information is handled directly by Stripe, our PCI-compliant payment processor. We only see and store the last four digits, brand, and expiry date for display purposes.

We send transactional emails (booking confirmations, password resets, receipts) to the addresses you and your clients provide. Customer email goes through our service provider Resend. We don't send marketing emails to your clients on your behalf.

MergeCase runs on Vercel (application hosting) and Supabase (database). Data is stored in encrypted form at rest and in transit.

You can request a full export of your account's data, or permanent deletion of your account, at any time by emailing mergecase.service@gmail.com. We respond within 7 days.

We use a small number of essential cookies for authentication and language preference. We do not use third-party tracking cookies.

If we make material changes to how we handle data, we'll notify you via email and in-product notice at least 14 days in advance.

Questions or concerns about your privacy? mergecase.service@gmail.com.