Privacy Policy

SessionLayer is operated by Big Freight Life LLC. This policy explains how we collect, use, retain, and protect information when people schedule sessions, manage a workspace, or connect third-party services.

If you book a session with a business that uses SessionLayer, read "If you book a session" below, plus the sections on cookies, children, and your state privacy rights. Your booking is also covered by the Terms for People Booking Sessions.

If you run or are a member of a workspace, read "If you run or belong to a workspace" below and the rest of this policy. The Terms of Service for Businesses apply to you.

What we collect at the booking form: your name, email address, and phone number (when the business asks for it); your notes, the answers to the business’s intake questions, and any guests’ emails you add; the time you picked; your agreement to any booking terms the business sets; and payment status (the card itself goes to Stripe). We also see technical details like your IP address and browser for security.

Why: to hold and confirm your time, tell the business who is coming, send you confirmations and reminders on its behalf, take payment, and prevent abuse. We do not sell this information, share it for advertising, or use it for marketing.

Who controls it: the business you book with. It decides what to ask and how long to keep it, and it sees everything you enter, including your notes. SessionLayer handles it for the business. Do not enter health records, card numbers, or similar sensitive details. We keep booking records as described under Retention.

For your account and sign-in information, your workspace settings, billing, and our security records, we decide how the information is used. We collect your name, email, sign-in details (through Clerk), workspace and service settings, connected accounts you authorize, subscription status (billing is handled by Polar), and support messages, to run your account, secure it, bill you, and improve the service.

Workspaces (the businesses that use SessionLayer) decide what information to collect from their clients and why. For that client information, SessionLayer acts on the workspace's behalf and under its instructions, as described in our Data Processing Addendum. For workspace members' own account and sign-in information, and for our security and billing records, we decide how it is used.

If you booked with a business and want to see, correct, or delete your information, send your request to that business. We will help the business respond. You can also contact us, and we will point you to the right place.

We collect account and workspace information, service and availability settings, booking details, contact information supplied by attendees, payment status and references, support communications, and technical records needed to secure and operate the service. Payment card details are processed by our payment provider and are not stored by SessionLayer.

When a workspace connects Google Calendar, SessionLayer requests permission to view calendar availability and to create or update calendar events and Google Meet links. We use this access only to prevent scheduling conflicts and carry out booking actions requested by the workspace or its authorized users.

OAuth access and refresh tokens are encrypted at rest. SessionLayer does not sell Google user data, use it for advertising, or allow humans to read calendar content except when necessary for security, support, legal compliance, or at the user’s direction. Our use of Google user data follows the Google API Services User Data Policy, including its Limited Use requirements.

We use information to provide scheduling, payments, meeting preparation, notifications, support, security, and product improvement. We share only what is necessary with infrastructure and integration providers acting on our behalf, with meeting participants as needed to complete a booking, or when required by law. The providers we use are listed on our Services we use page. Workspaces that connect Microsoft Outlook or Zoom share calendar availability and booking details with those services in the same way as with Google Calendar.

A workspace can connect SessionLayer to other products, such as StoryView, AI assistants, embedded booking widgets, and webhooks. When someone starts a booking from a connected product, we receive only the context that product is set up to share, such as a recording title, short summary, timestamp, excerpt, comment, or question, plus a reference to the original item. We keep a record of what was shared and when, use it to recommend a service and prepare the session, and do not read the full recording, transcript, or account behind it. We may send the connected product a booking reference and, when the workspace approves it, a follow-up summary.

When a workspace sets up a webhook or connects an AI assistant, we send booking details to the destination it chooses. Each connected product, including other products operated by Big Freight Life, handles that information under its own privacy policy. These connections are chosen by the workspace and are not providers working for SessionLayer, so they are not listed on our Services we use page.

AI-assisted features currently run within SessionLayer and do not send booking details to an outside AI provider. If we add one, we will list it on our Services we use page before it receives any data, and SessionLayer will then send it only the minimum booking context needed to draft a recommendation, agenda, or follow-up. AI output is a draft: it does not change prices, availability, payments, permissions, or booking state, and consequential preparation and outcomes require human review. We do not use Google Calendar content, or any other customer content, to train AI models, and we will not send it to a provider that is not bound to the same.

A workspace member can also connect SessionLayer to an AI assistant they choose, such as Claude or ChatGPT. When they do, the assistant receives the bookings and client details the member asks it about, and its provider handles that information under the member's own agreement with it. The assistant can change bookings only with the member's permissions, and SessionLayer tells it to confirm each change with them first.

Active workspace configuration, bookings, and approved session records are retained while the workspace uses SessionLayer. Completed worker records are retained for 30 days; integration delivery records are normally retained for up to 90 days; and operational booking records are normally retained for 24 months after the session. Audit, payment, refund, tax, fraud-prevention, dispute, and legal records may be retained longer when reasonably necessary. Short-lived cross-product handoffs expire after 15 minutes. After a workspace closes, we delete or anonymize its content following the 30-day export window, though backups and records we must keep by law can last longer.

Workspace administrators can export operational data from workspace settings and request deletion through a seven-day review process. Provider credentials are excluded from exports. Deletion removes or anonymizes operational customer content after subscriptions, disputes, security holds, and legally required retention are resolved. A workspace may revoke Google access in its Google Account at any time. We use tenant-scoped access, encryption, signed webhooks, short-lived capabilities, and tested recovery procedures.

SessionLayer does not record meetings by default. A workspace that records or transcribes a session is responsible for giving legally required notice and obtaining consent. Meeting links and approved outcomes may be stored as part of the booking record.

SessionLayer is not directed to anyone under 18, and we do not knowingly collect personal information from them. A parent or guardian may book a session for a child; the business then decides how to handle the child's information. If you believe a child has given us information, contact us and we will delete it.

We use only essential cookies, such as the ones that keep workspace members signed in (set by Clerk). Booking pages also run an invisible check that blocks automated abuse; it is not used to track you. We do not use advertising or third-party analytics cookies.

Depending on where you live, state privacy laws (such as those in California, Texas, and Colorado) may give you the right to know what personal information we hold about you, correct it, delete it, receive a copy of it, and opt out of its sale, sharing for cross-context advertising, and use for targeted advertising. We do not sell personal information, share it for advertising, or use it for targeted advertising, so there is nothing to opt out of. We do not discriminate against anyone for exercising these rights.

To make a request, email sessionlayer-support@bfl.design. If your information is held on behalf of a business you booked with, we may direct you to that business or help it respond. An authorized agent may make a request for you; we may ask for proof of the agent's authority and to verify your identity. If we decline a request, you can appeal by replying to our decision, and we will have the appeal reviewed. We respond within the time the law allows.

We may disclose information when we believe in good faith that a law, subpoena, court order, or valid government request requires it, or to protect people from serious harm. Where the law allows, we tell the workspace whose information is requested, and we may direct the requester to it.

If a security incident affects personal information we handle, we will notify affected workspaces and individuals without undue delay and as required by law.

We may update this policy. For material changes we will post the new date here and email workspace administrators before the changes take effect.

You may request access, correction, export, or deletion of personal information, subject to applicable law and legitimate retention requirements. Contact sessionlayer-support@bfl.design for privacy requests or questions. We aim to reply within two business days and to complete requests within 45 days.

Big Freight Life LLC, 1351 N Buckner Blvd #180397, Dallas, TX 75218