BCBookingCue

Privacy Policy

Last Updated: July 27, 2026

This Privacy Policy describes how HM Media LLC ("we," "us," or "our"), operator of BookingCue ("the Service"), collects, uses, and shares information about you when you use bookingcue.com, app.bookingcue.com, and related services.

1. Information We Collect

Information You Provide

  • Account information: name, email address, phone number, password
  • Profile information: for freelancers — roles, skills, location, travel distance, hourly/half-day/day rates; for company users — company name, address, contact information
  • Event and booking information: events you create, positions, crew assignments, and outreach activity
  • Communications: messages sent through our platform, including email and SMS content
  • Waitlist information: if you sign up for our waitlist, we collect your name, email, optional company name, and optional phone number

Information Collected Automatically

  • Usage data: pages visited, features used, and timestamps of activity
  • Device information: browser type, operating system, and IP address
  • Cookies and similar technologies: session cookies to keep you logged in

Information from Third Parties

  • Authentication: we use Supabase for account authentication
  • Email delivery: we use Resend to send and receive emails
  • SMS delivery: we use Twilio to send and receive text messages
  • Calendar data: if you choose to connect a calendar, we receive event information from Google Calendar or from a calendar feed (ICS) URL you provide — see Section 4

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Send booking-related communications (outreach requests, confirmations, rejections, fill notifications, and event updates) via email and SMS
  • Process freelancer responses to crew requests
  • Show your existing calendar commitments alongside a booking request so you can check for conflicts before responding — only if you have connected a calendar (see Section 4)
  • Send account-related communications (password resets, account confirmations)
  • Detect and prevent fraud, abuse, and security incidents
  • Comply with legal obligations

3. SMS Messaging and Consent

Consent

By providing your phone number and checking the SMS consent box at signup, you expressly consent to receive SMS messages from BookingCue related to crew booking communications, including outreach requests, confirmations, event notifications, and crew updates.

Message Frequency

Message frequency varies based on event activity. You may receive multiple messages per day during active booking periods.

Message and Data Rates

Message and data rates may apply. Check with your mobile carrier for details.

Opt-Out

You may opt out of SMS messages at any time by:

  • Replying STOP to any SMS message
  • Toggling SMS consent off in your profile settings

After opting out, you will receive one confirmation message and no further SMS communications. You may opt back in at any time through your profile settings.

Help

For help, reply HELP to any SMS message or email henry@hmmediagroup.com.

SMS Data Use

Phone numbers and SMS consent information are never shared with third parties for marketing purposes. SMS opt-in data is not sold, rented, or otherwise transferred to any third party. Phone numbers are used solely for crew booking communications related to events you have been invited to staff and account-related notifications.

4. Calendar Integrations and Google User Data

BookingCue offers optional calendar features. All of them are opt-in — the Service works fully without connecting any calendar, and you can disconnect at any time.

Connecting Google Calendar (read-only)

If you choose to connect your Google Calendar, BookingCue requests the https://www.googleapis.com/auth/calendar.readonly scope. This is read-only access. BookingCue cannot and does not create, modify, or delete events in your Google Calendar.

What we access: the events on the calendars in your Google account — event title, start and end times, and whether the event is all-day.

Why we access it: to show you your existing commitments alongside a crew booking request, so you can see conflicts before accepting or declining. That is the only purpose.

What we store: we cache the event title, start time, end time, and all-day flag, together with the access and refresh tokens Google issues. Tokens are encrypted at rest. We do not store event descriptions, attendees, guest lists, locations, attachments, or conference links.

Who can see it: only you. Your personal calendar events are never visible to any AV production company, crewer, or other user of BookingCue, and they are never used to indicate your availability to anyone.

What we never do with it: we do not use Google user data for advertising, we do not sell or rent it, we do not transfer it to third parties except as required by law, and we do not use it to develop, train, or improve generalized artificial intelligence or machine learning models. It is not read by humans except where required for security purposes, to comply with applicable law, or with your explicit consent.

Revoking access: you can disconnect Google Calendar at any time in your BookingCue settings, which deletes the stored tokens and all cached events. You can also revoke BookingCue's access directly at myaccount.google.com/permissions.

Limited Use: BookingCue's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Subscribing to your BookingCue calendar feed

You may generate a personal calendar feed URL that lets your own calendar application (Google Calendar, Apple Calendar, Outlook, or similar) subscribe to your confirmed BookingCue gigs.

  • The feed contains only your own confirmed gigs — event name, role, date, time, and location. It contains no other user's data.
  • Access is controlled by a long, random, unguessable token in the URL itself. Anyone who obtains that URL can read your gig feed, so treat it like a password and do not post or share it.
  • Subscribing means your calendar provider fetches that URL periodically, so your gig information is transmitted to whichever calendar provider you subscribe with.
  • You can regenerate or revoke the URL at any time in your settings. Regenerating invalidates the old URL, and you will need to re-subscribe.

Subscribing BookingCue to an external calendar feed

You may also paste a calendar feed (ICS) URL from another calendar service so that its events appear alongside booking requests. We fetch that URL periodically and store the same limited event fields listed above. Treat the URL as sensitive — it is a credential for whatever calendar it exposes. You can remove it at any time in your settings.

5. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

With Companies in Your Network

If you are a freelancer, the AV production companies that have added you to their freelancer pool can see your profile information (name, roles, skills, rates, location). Companies cannot see freelancer pools belonging to other companies.

With Crew Members

When you are confirmed for a position, your name and contact information are shared with the relevant company contacts (e.g., show lead) for that event.

With Service Providers

We share information with service providers who help us operate the Service:

  • Supabase — database hosting and authentication
  • Vercel — application hosting
  • Resend — email delivery and receiving
  • Twilio — SMS delivery and receiving

These providers are contractually obligated to protect your information and use it only for the services they provide to us.

With Calendar Providers You Choose

If you subscribe to your BookingCue calendar feed, your confirmed gig information is transmitted to whichever calendar provider you subscribe with (for example Google, Apple, or Microsoft). This happens only because you chose to subscribe, and you can revoke the feed at any time. See Section 4.

For Legal Reasons

We may disclose information if required by law, subpoena, or other legal process, or to protect the rights, property, or safety of HM Media LLC, our users, or others.

Business Transfers

If HM Media LLC is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law or for legitimate business purposes (such as fraud prevention or audit trails of message activity).

7. Data Security

We use industry-standard security measures to protect your information, including:

  • Encrypted connections (HTTPS/TLS) for all data in transit
  • Row-Level Security on our database
  • Encrypted storage of sensitive credentials, including any third-party access tokens such as Google Calendar authorization tokens
  • Webhook signature verification for inbound communications

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but work continuously to protect your information.

8. Your Rights and Choices

Depending on your location, you may have the following rights:

  • Access: request a copy of the personal information we hold about you
  • Correction: request that we correct inaccurate information
  • Deletion: request that we delete your personal information
  • Opt-out: opt out of SMS messages (reply STOP) or unsubscribe from emails
  • Data portability: request your information in a portable format

To exercise these rights, email us at henry@hmmediagroup.com.

9. Children's Privacy

The Service is not intended for users under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us at henry@hmmediagroup.com.

10. International Users

The Service is operated from the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your country.

11. California Privacy Rights

If you are a California resident, you have the right under the California Consumer Privacy Act (CCPA) to:

  • Know what personal information we collect, use, and share
  • Request deletion of your personal information
  • Opt out of the sale of your personal information (note: we do not sell personal information)
  • Non-discrimination for exercising your rights

To exercise these rights, email henry@hmmediagroup.com.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last Updated" date. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

For questions about this Privacy Policy or our privacy practices, contact:

HM Media LLC Raleigh, North Carolina Email: henry@hmmediagroup.com