{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "youcanbookme", "name": "YouCanBookMe API", "vendor": "AI Software (Capacity) UK Ltd, trading as YouCanBookMe", "vendorUrl": "https://youcanbook.me", "kind": "http-api", "category": "scheduling", "summary": "YouCanBookMe is a booking-page service from the UK company of the same name, owned by Capacity since 2025. Its REST API manages account details, booking pages (profiles) and bookings over HTTP Basic auth, with webhooks from booking notifications.", "url": "https://www.anchorterminal.com/tools/youcanbookme", "markdownUrl": "https://www.anchorterminal.com/tools/youcanbookme.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/youcanbookme.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/youcanbookme.json", "dns": "youcanbookme.grade.anchorterminal.com", "transports": [ "http" ], "remoteUrl": "https://api.youcanbook.me/v1", "packages": [], "auth": "api-key", "authNotes": "HTTP Basic authentication with the account email address or account ID as the username and an account API key as the password. Only the Account Owner can generate, view, copy or delete the key, under Account Password \u0026 Security \u003e Authentication and API, and the help centre says the API key is available on the Team plan. No scopes, expiry or per-user keys are described. Administrators and Contributors must ask the owner for the key.", "pricing": "freemium", "pricingNotes": "Free plan with 1 calendar, 1 booking page and 30 bookings a month, with YouCanBookMe branding. Individual $9, Professional $13 and Teams $18 a seat a month, with 10 per cent off yearly and 20 per cent off for two years ($7.20, $10.40 and $14.40), per the help centre's pricing article. 14-day trial of every feature with no card, per the pricing page. API access is listed under the Team plan; webhooks need Professional or Teams.", "priceSummary": "$9 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the pricing page, in the help centre API and webhook articles or in the API's error response (checked 2026-11-03). The API reference itself could not be read.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://ycbm.stoplight.io/", "capabilities": [ "calendar.booking", "calendar.availability", "calendar.webhooks" ], "tags": [ "hosted", "freemium", "free-tier", "free-trial", "no-card", "api-key", "webhooks", "soc2", "iso27001", "uk", "closed-source" ], "lastRelease": "2026-09-01", "graded": true, "anchor": { "graded": true, "score": 22.5, "grade": "F", "agentReady": false, "rank": 1287, "ranked": true, "rankOf": 1349, "categoryRank": 13, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 13, "maintenance": 28, "payments": 30, "reliability": 15, "schema": 10, "security": 24, "transparency": 61 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 15, "points": 3, "reason": "Read with the hosted lines. The help page links a status page at www.youcanbookmestatus.com, but the host did not resolve from our reader with or without www on 3 November 2026, so it is scored as not established rather than as a finding about the vendor (0). No readable history (5). No rate limit with a number in the help centre articles, the pricing page or the API's own error response; the API reference could not be read (0). No 429 or retry guidance and no idempotency key found (0). No SLA, and the terms say the service is not guaranteed to be available 100 per cent of the time (0). The API reports version 1.18 in its headers and is sold on the Team plan, so generally available (10). 0 + 5 + 0 + 0 + 0 + 10 = 15.", "checked": "2026-11-03" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 10, "points": 1.63, "reason": "The reference lives on Stoplight at ycbm.stoplight.io, which usually renders an OpenAPI file, but our reader got only the workspace shell, and no spec file was found at the usual paths; the help centre article on support.youcanbook.me sat behind a Cloudflare challenge. Scored absent (0 of 25). No llms.txt on youcanbook.me, the help centre or the Stoplight host (0). Descriptions, typed inputs and required fields unread (0 of 20, 0 of 15). The one response we saw is a JSON envelope with `code`, `errors`, `httpCode`, `message` and `status`, and the help centre gives a worked webhook payload (4 of 15). A /v1 path and `x-api-version: 1.18` and `x-api-revision` headers, with a product updates page dated by month and no API changelog (6 of 15). 0 + 0 + 0 + 0 + 4 + 6 = 10.", "checked": "2026-11-03" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 13, "points": 2.11, "reason": "Response sizing, field selection and pagination are in the unread reference (3 of 25, 0 of 20). The error envelope names a machine code and a message an agent can branch on (8 of 20). No idempotency key or safe-retry guidance found (0 of 20). No official SDK, and the required parameters are unread (2 of 15). 3 + 0 + 8 + 0 + 2 = 13.", "checked": "2026-11-03" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 24, "points": 4.2, "reason": "One account-wide API key sent as the HTTP Basic password with the account ID or email, generated and deleted by the Account Owner only; no scopes, expiry or per-user keys are documented (10 of 30). No read-only mode or confirmation step found (0 of 20). The API and webhooks carry names, answers and notes written by people who book, with no injection guidance (2 of 15). No audit log or per-call visibility found (0 of 15). SOC 2 Type II and ISO/IEC 27001:2022 (certificate 20/3433, 20 February 2024) and third-party penetration tests on the security page, but no security.txt (404), bug bounty or disclosure policy (12 of 20). 10 + 0 + 2 + 0 + 12 = 24.", "checked": "2026-11-03" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No x402, MPP or L402 (0). Seat prices public in the help centre's pricing article (Individual $9, Professional $13, Teams $18 a month, less yearly and over two years); the pricing page's own figures did not render for us, and nothing is priced per call (10). A Free plan and a 14-day trial of every feature with no card (20). A person signs up in a browser and the Account Owner generates the key by hand (0). 0 + 10 + 20 + 0 = 30.", "checked": "2026-11-03" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 28, "points": 2.45, "reason": "Read as a closed service. The newest product update is dated September 2026 (registered SMS numbers), within 90 days but not 30, taking the month's first day (20 of 30). The previous entry is November 2025, so fewer than three in 90 days (0 of 20). A help centre, a community forum at forum.youcanbook.me and one-to-one support for paid users, with a product updates page that carries no API items (8 of 15). No official SDKs found (0). No package to assess (0). 20 + 0 + 8 + 0 + 0 = 28.", "checked": "2026-11-03" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 61, "points": 5.34, "note": "editorial 52, provenance 70", "reason": "Closed service with terms (18 March 2026) naming AI Software (Capacity) UK Ltd under English law, which bar data-mining and robot tools without consent and let the company end membership without notice for a breach (15 of 30). The privacy notice (16 March 2026) states retention periods (24 months for booking data by default, 7 years for support messages), AWS hosting in the United States, a DPA on request and no training of external AI models on booking data; the security page says no subprocessor list is published, and the two agree on AWS (22 of 30). No deprecation policy or dated notice, and clause 18.4 allows changes to the service without notice (3 of 20). Providers are named in the privacy notice (AWS, Stripe, Google Analytics, Mixpanel, Hotjar, HubSpot) with US hosting, but there is no list with locations per processor (12 of 20). 15 + 22 + 3 + 12 = 52.", "checked": "2026-11-03" } ], "assessment": { "date": "2026-11-03", "basis": "public evidence", "confidence": "low", "notes": { "ergonomics": "Response sizing, field selection and pagination are in the unread reference (3 of 25, 0 of 20). The error envelope names a machine code and a message an agent can branch on (8 of 20). No idempotency key or safe-retry guidance found (0 of 20). No official SDK, and the required parameters are unread (2 of 15). 3 + 0 + 8 + 0 + 2 = 13.", "maintenance": "Read as a closed service. The newest product update is dated September 2026 (registered SMS numbers), within 90 days but not 30, taking the month's first day (20 of 30). The previous entry is November 2025, so fewer than three in 90 days (0 of 20). A help centre, a community forum at forum.youcanbook.me and one-to-one support for paid users, with a product updates page that carries no API items (8 of 15). No official SDKs found (0). No package to assess (0). 20 + 0 + 8 + 0 + 0 = 28.", "payments": "No x402, MPP or L402 (0). Seat prices public in the help centre's pricing article (Individual $9, Professional $13, Teams $18 a month, less yearly and over two years); the pricing page's own figures did not render for us, and nothing is priced per call (10). A Free plan and a 14-day trial of every feature with no card (20). A person signs up in a browser and the Account Owner generates the key by hand (0). 0 + 10 + 20 + 0 = 30.", "reliability": "Read with the hosted lines. The help page links a status page at www.youcanbookmestatus.com, but the host did not resolve from our reader with or without www on 3 November 2026, so it is scored as not established rather than as a finding about the vendor (0). No readable history (5). No rate limit with a number in the help centre articles, the pricing page or the API's own error response; the API reference could not be read (0). No 429 or retry guidance and no idempotency key found (0). No SLA, and the terms say the service is not guaranteed to be available 100 per cent of the time (0). The API reports version 1.18 in its headers and is sold on the Team plan, so generally available (10). 0 + 5 + 0 + 0 + 0 + 10 = 15.", "schema": "The reference lives on Stoplight at ycbm.stoplight.io, which usually renders an OpenAPI file, but our reader got only the workspace shell, and no spec file was found at the usual paths; the help centre article on support.youcanbook.me sat behind a Cloudflare challenge. Scored absent (0 of 25). No llms.txt on youcanbook.me, the help centre or the Stoplight host (0). Descriptions, typed inputs and required fields unread (0 of 20, 0 of 15). The one response we saw is a JSON envelope with `code`, `errors`, `httpCode`, `message` and `status`, and the help centre gives a worked webhook payload (4 of 15). A /v1 path and `x-api-version: 1.18` and `x-api-revision` headers, with a product updates page dated by month and no API changelog (6 of 15). 0 + 0 + 0 + 0 + 4 + 6 = 10.", "security": "One account-wide API key sent as the HTTP Basic password with the account ID or email, generated and deleted by the Account Owner only; no scopes, expiry or per-user keys are documented (10 of 30). No read-only mode or confirmation step found (0 of 20). The API and webhooks carry names, answers and notes written by people who book, with no injection guidance (2 of 15). No audit log or per-call visibility found (0 of 15). SOC 2 Type II and ISO/IEC 27001:2022 (certificate 20/3433, 20 February 2024) and third-party penetration tests on the security page, but no security.txt (404), bug bounty or disclosure policy (12 of 20). 10 + 0 + 2 + 0 + 12 = 24.", "transparency": "Closed service with terms (18 March 2026) naming AI Software (Capacity) UK Ltd under English law, which bar data-mining and robot tools without consent and let the company end membership without notice for a breach (15 of 30). The privacy notice (16 March 2026) states retention periods (24 months for booking data by default, 7 years for support messages), AWS hosting in the United States, a DPA on request and no training of external AI models on booking data; the security page says no subprocessor list is published, and the two agree on AWS (22 of 30). No deprecation policy or dated notice, and clause 18.4 allows changes to the service without notice (3 of 20). Providers are named in the privacy notice (AWS, Stripe, Google Analytics, Mixpanel, Hotjar, HubSpot) with US hosting, but there is no list with locations per processor (12 of 20). 15 + 22 + 3 + 12 = 52." }, "sources": [ { "what": "API documentation overview (help centre)", "url": "https://ycbm.capacity.com/article/838484/api-documentation", "seen": "2026-11-03" }, { "what": "account API key article (Basic auth, Team plan)", "url": "https://ycbm.capacity.com/article/912032/accessing-your-account-api-key", "seen": "2026-11-03" }, { "what": "webhooks article", "url": "https://ycbm.capacity.com/article/720517/more-information-on-webhooks", "seen": "2026-11-03" }, { "what": "passing data to other systems", "url": "https://ycbm.capacity.com/article/774192/passing-data-to-other-systems", "seen": "2026-11-03" }, { "what": "API reference host (workspace shell only)", "url": "https://ycbm.stoplight.io/", "seen": "2026-11-03" }, { "what": "API root, 400 error envelope and version headers", "url": "https://api.youcanbook.me/v1/", "seen": "2026-11-03" }, { "what": "support article (Cloudflare challenge, not read)", "url": "https://support.youcanbook.me/hc/en-us/articles/29051384084759-API-Documentation", "seen": "2026-11-03" }, { "what": "developer.youcanbook.me (an offline booking page, 423)", "url": "https://developer.youcanbook.me/", "seen": "2026-11-03" }, { "what": "pricing page (plan limits, trial, no card)", "url": "https://youcanbook.me/pricing", "seen": "2026-11-03" }, { "what": "pricing article with figures", "url": "https://ycbm.capacity.com/article/925210/youcanbookme-pricing", "seen": "2026-11-03" }, { "what": "terms", "url": "https://youcanbook.me/terms", "seen": "2026-11-03" }, { "what": "privacy notice", "url": "https://youcanbook.me/privacy", "seen": "2026-11-03" }, { "what": "security page", "url": "https://youcanbook.me/security", "seen": "2026-11-03" }, { "what": "security.txt (404)", "url": "https://youcanbook.me/.well-known/security.txt", "seen": "2026-11-03" }, { "what": "help page with support routes and status link", "url": "https://youcanbook.me/help", "seen": "2026-11-03" }, { "what": "product updates", "url": "https://youcanbook.me/product-updates", "seen": "2026-11-03" }, { "what": "about page", "url": "https://youcanbook.me/about-us", "seen": "2026-11-03" }, { "what": "Capacity's acquisition announcement", "url": "https://capacity.com/capacity-acquires-youcanbookme/", "seen": "2026-11-03" }, { "what": "robots.txt", "url": "https://youcanbook.me/robots.txt", "seen": "2026-11-03" } ], "openQuestions": [ "unchecked: the API reference on ycbm.stoplight.io (endpoints, parameters, pagination, rate limits, error codes), which renders by JavaScript and has no spec file at the paths we tried, and the support.youcanbook.me API article behind a Cloudflare challenge", "unchecked: the status page at www.youcanbookmestatus.com, which did not resolve from our reader, so reliability scores it as absent with low confidence", "unchecked: the domain registration date, since rdap.nic.me could not be reached", "Whether the public booking endpoints (availability, booking, cancellation) need credentials. Third-party integration docs say no, which was not confirmed first-hand", "Which plans the API key is sold on. The key article says Team; the pricing page lists unlimited API access under Team and leaves the other plans ambiguous", "lastRelease 2026-09-01 is the first day of the month of the newest product update, which the page dates only as September 2026", "The about page names YouCanBookMe Ltd with company number 7221202 while the terms and privacy notice name AI Software (Capacity) UK Ltd with the same number, so the legal entity was renamed after the sale. The terms' name is recorded", "The terms bar data-mining and robot tools without consent. Public pages were read, recorded as a fact" ] }, "negative": 0, "verdict": "A booking-page service with a Team-plan REST API over HTTP Basic auth and one account-wide key, SOC 2 Type II and ISO 27001 on its security page, and a 14-day trial without a card. Its API reference renders only by JavaScript and its status page did not resolve for us, so endpoints, limits and incidents are unverified.", "bestFor": "A booking-page product for small businesses, closest to calendly and savvycal in scheduling.", "strengths": [ "SOC 2 Type II and ISO/IEC 27001:2022 (certificate issued 20 February 2024) listed on the security page, with AES-256 at rest on AWS", "Free plan and a 14-day trial of every feature with no card", "Privacy notice (16 March 2026) states retention periods, 24 months for booking data by default, and says booking data is not used to train AI models", "Webhook notifications on six booking triggers with a JSON payload the user shapes, on Professional and Teams", "The API answers with a JSON error envelope carrying a code, message and status, and declares its version in an `x-api-version` header" ], "weaknesses": [ "The API reference at ycbm.stoplight.io could not be read without JavaScript, and the help centre's API article sat behind a Cloudflare challenge", "One account-wide API key over HTTP Basic auth, created only by the Account Owner, with no scopes or expiry documented", "API access is listed only on the Team plan ($18 a seat a month)", "No rate limits, 429 handling, idempotency keys, OpenAPI file, llms.txt or official SDK were found", "No security.txt, bug bounty or disclosure policy, and the status page at youcanbookmestatus.com did not resolve for us" ], "agentNotes": [ "Ask the Account Owner for the account ID and API key, since Administrators and Contributors cannot generate one, and send them as HTTP Basic credentials", "Read the API reference at ycbm.stoplight.io in a browser before planning calls; its endpoints and parameters were not readable to us", "Treat the key as full account access and keep it out of logs, since no scoped or read-only key is documented", "Expect a JSON error body with `code`, `message` and `status` on failures, and check for an existing booking before repeating a create, since no idempotency key is documented", "Use booking-page webhooks for booking, reschedule, cancel, reminder, follow-up and no-show events instead of polling" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 22.5 } ], "editorialScores": { "ergonomics": 13, "maintenance": 28, "payments": 30, "reliability": 15, "schema": 10, "security": 24, "transparency": 52 }, "provenanceScore": 70, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-03", "grade": "F", "kind": "listed", "method": "0.7", "score": 22.5 } ] }, "connect": { "http": "curl -u \"$YCBM_ACCOUNT_ID:$YCBM_API_KEY\" https://api.youcanbook.me/v1/profiles" }, "letme": { "capability": "https://letme.dev/calendar.booking", "tool": "https://letme.dev/youcanbookme" }, "notable": [ "The API reference is hosted on Stoplight at ycbm.stoplight.io, which answered our reader with an empty workspace shell drawn by JavaScript, and the help centre's API Documentation article on support.youcanbook.me sat behind a Cloudflare challenge, so the endpoints, parameters and limits were not read first-hand (https://ycbm.capacity.com/article/838484/api-documentation)", "A plain GET to https://api.youcanbook.me/v1/ answered 400 with a JSON body of `code`, `errors`, `httpCode`, `message` and `status` and the headers `x-api-version: 1.18` and `allow: POST, PATCH, PUT, GET, OPTIONS, DELETE` (https://api.youcanbook.me/v1/)", "The help centre describes the API as managing account details, booking pages (profiles) and bookings, with the key available on the Team plan (https://ycbm.capacity.com/article/912032/accessing-your-account-api-key)", "Webhooks are a notification action on a booking page, on Professional and Teams, with a URL, method (GET, POST, PUT, PATCH, DELETE), JSON payload and optional headers, on six triggers; no signature or retry policy is described (https://ycbm.capacity.com/article/720517/more-information-on-webhooks)", "developer.youcanbook.me, which third-party integration docs name as the developer portal, is an offline booking page and answered 423 (https://developer.youcanbook.me/)", "The security page lists SOC 2 Type II and ISO/IEC 27001:2022 (certificate 20/3433, issued 20 February 2024), AWS hosting in the United States and AES-256 at rest, with no bug bounty or disclosure policy (https://youcanbook.me/security)", "Capacity acquired YouCanBookMe on 4 February 2025; the terms now name AI Software (Capacity) UK Ltd, trading as YouCanBookMe, company number 7221202 (https://capacity.com/capacity-acquires-youcanbookme/)" ], "area": "everyday", "details": [ { "label": "Surface listed", "value": "The REST API at https://api.youcanbook.me/v1 and booking-page webhooks, read from the help centre at ycbm.capacity.com, youcanbook.me, its pricing, security, terms and privacy pages and the API's own error response on 3 November 2026. The API reference on ycbm.stoplight.io and the support.youcanbook.me article were not readable. No account was made and no authenticated call was sent" }, { "label": "Resources", "value": "Account details, booking pages (profiles) and bookings, per the help centre. The endpoint list was not read" }, { "label": "Credentials", "value": "Account ID (or email) and API key over HTTP Basic. Generated, viewed and deleted by the Account Owner only. Team plan" }, { "label": "Rate limits", "value": "None found in the pages we could read" }, { "label": "Errors", "value": "JSON with `code` (for example caligraph_http_invalid_method), `errors`, `httpCode`, `httpStatusCode`, `message` and `status`, seen on an unauthenticated GET to /v1/" }, { "label": "Webhooks", "value": "A notification action per booking page with URL, method, JSON payload built from shorthand codes and optional headers, on booking made, rescheduled, cancelled, reminder, follow-up and no-show. Professional and Teams plans. No signature or retry policy documented" }, { "label": "Calendars", "value": "Google, Microsoft and iCloud per the product pages; 1 calendar on Free, 2 on Individual, 6 on Professional, 10 a user on Teams" }, { "label": "Hosting and data", "value": "AWS in the United States, AES-256 at rest through AWS KMS, TLS 1.2 in transit. Booking data kept 24 months by default, support communications up to 7 years" }, { "label": "Legal entity", "value": "AI Software (Capacity) UK Ltd, trading as YouCanBookMe, registered in England and Wales as company 7221202, Bedford. The about page still names YouCanBookMe Ltd with the same number. Owned by Capacity since 4 February 2025" } ], "unitPrices": [ { "item": "Individual", "unit": "seat-month", "usd": 9, "note": "$8.10 a month yearly, $7.20 over two years, per the help centre" }, { "item": "Professional", "unit": "seat-month", "usd": 13, "note": "$11.70 a month yearly, $10.40 over two years" }, { "item": "Teams", "unit": "seat-month", "usd": 18, "note": "Per seat. $16.20 yearly, $14.40 over two years. The plan that lists API access" } ], "provenance": { "legalEntity": "AI Software (Capacity) UK Ltd", "domain": "youcanbook.me", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://youcanbook.me/terms", "privacy": "https://youcanbook.me/privacy", "statusPage": "https://www.youcanbookmestatus.com", "changelog": "https://youcanbook.me/product-updates", "securityTxt": "none", "checked": "2026-11-03", "notes": [ "The terms (last updated 18 March 2026) name AI Software (Capacity) UK Ltd, trading as YouCanBookMe, under English law. Clause 15.3 bars data mining, robots and similar extraction tools without written consent, and clause 7.2 bars downloading the Site's software. Recorded as a fact; the public pages were read.", "The privacy notice (16 March 2026) gives company number 7221202, AWS hosting in the United States, a DPA on request through HelloSign, and retention of 24 months for booking data and up to 7 years for support messages.", "youcanbook.me/robots.txt disallows only HubSpot preview and preference paths. support.youcanbook.me/robots.txt disallows account, search and request paths; the API article there answered a Cloudflare challenge (403), which is the host's block, not a robots rule. ycbm.capacity.com and ycbm.stoplight.io allow all.", "The status page linked from youcanbook.me/help, www.youcanbookmestatus.com, did not resolve from our reader on 3 November 2026 (DNS), with or without www, so no incident history was read.", "youcanbook.me/.well-known/security.txt returns 404. The security page gives compliance@youcanbook.me as its contact.", "RDAP for youcanbook.me (rdap.nic.me) could not be reached from our shell, so the registration date is blank.", "The product updates page at youcanbook.me/product-updates is dated by month; its newest entry is September 2026 (registered SMS numbers), which lastRelease records as the first of that month." ], "score": 70, "checks": [ { "check": "Legal entity named", "value": "AI Software (Capacity) UK Ltd", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "youcanbook.me, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "api.youcanbook.me", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "read, states 5 of the 7 things a reader expects, and has 2 clauses that cost points", "points": 4.3, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 7 of the 8 things a reader expects", "points": 9.3, "max": 10, "state": "part" }, { "check": "Status page", "value": "www.youcanbookmestatus.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "People named", "value": "2 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "a support address, help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://youcanbook.me/terms", "state": "read", "readAt": "2026-11-03", "statedDate": "2026-03-18", "words": 6780, "points": 4.3, "max": 10, "expected": [ { "key": "terms.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: March 18, 2026.", "says": "Last updated 2026-03-18" }, { "key": "terms.law", "label": "Names the governing law or courts", "found": true, "quote": "These conditions are governed by and construed in accordance with the laws of England and Wales.", "says": "The law of England and Wales" }, { "key": "terms.liability", "label": "States a limit on its liability", "found": true, "quote": "We will not be liable to free users of the Service or to users who are Customers who use the Service to make a booking and our liability to subscribers shall be limited to the total fees paid in the twelve (12) months preceding the event giving rise to the claim.", "says": "Capped at the fees paid in the 12 months before the claim" }, { "key": "terms.termination", "label": "Says how the agreement or account can be ended", "found": true, "quote": "…link to, we may require you to change your passwords on our system and with your other suppliers, or we may suspend your account." }, { "key": "terms.changes", "label": "Says how changes to the terms are announced", "found": false }, { "key": "terms.use", "label": "Lists what users may not do", "found": true, "quote": "Until you have changed all your passwords or we have reactivated your account you will not be able to access the Service." }, { "key": "terms.sla", "label": "Refers to a service level or uptime commitment", "found": false } ], "toKnow": [ { "key": "terms.automated", "label": "Restricts automated access", "found": true, "quote": "In particular, you may not utilise any data mining, robots, or similar data gathering and extraction tools to extract (whether once or many times) for re-utilisation of any substantial parts of this Site without our express written consent.", "costsPoints": true }, { "key": "terms.nonotice", "label": "Says the terms or the service can change without notice", "found": true, "quote": "We may make reasonable changes to the format of the Site, services provided or to the Site's content at any time without notice.", "costsPoints": true }, { "key": "terms.cutoff", "label": "Says access can be ended without notice or for any reason", "found": true, "quote": "We reserve the right to cancel your membership at any time and for any reason." } ], "notes": [ { "date": "2026-11-03", "text": "One subscription or account may process bookings for a single organisation only, and may not be resold or used to facilitate a similar service for third parties.", "quote": "You may not in any circumstances use a single YouCanBook.Me subscription or account to facilitate bookings for more than one organisation." }, { "date": "2026-11-03", "text": "The service may not be used to store special category, financial, medical or other sensitive data about another person without that person's explicit permission.", "quote": "We do not permit the use of the Service to store certain types of sensitive or financial data belonging to another individual without that individual’s explicit permission." }, { "date": "2026-11-03", "text": "Twelve months after a subscription ends without renewal, the vendor may delete the account and its data without notice, and deletion on termination cannot be reversed.", "quote": "If your subscription is terminated and a period of twelve months elapses during which you do not reinstate your subscription or purchase an alternative subscription, we reserve the right to expire any remaining credit on your account and to delete your account and its associated data without notice." } ] }, { "kind": "privacy", "url": "https://youcanbook.me/privacy", "state": "read", "readAt": "2026-11-03", "statedDate": "2026-03-16", "words": 1552, "points": 9.3, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last updated: March 16, 2026", "says": "Last updated 2026-03-16" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "Booking Data (also referred to as ‘Customer Personal Data’ in our Data Processing Addendum)." }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "Booking data is retained for a default period of 24 months unless modified by the account holder.", "says": "Names a period of 24 months" }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "Payments are processed by PCI DSS-compliant third-party providers such as Stripe." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": true, "quote": "We do not sell personal data for monetary consideration.", "says": "Says it does not sell personal data" }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "Depending on your location, you may have rights to:" }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": false }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "Personal data transferred from the UK, EU, or EEA to the United States is protected using:", "says": "Data goes to the United States" } ], "toKnow": [ { "key": "privacy.sells", "label": "Says it sells personal data or shares it for advertising", "found": true, "quote": "Under certain US state privacy laws, sharing identifiers for cross-context behavioural advertising may be considered “sharing.” Where applicable, you may opt out via our cookie settings or by contacting us." } ] } ] }, "humans": { "slug": "youcanbookme", "checked": "2026-11-03", "company": "YouCanBookMe", "people": [ { "name": "Bridget Harris", "role": "Strategic advisor, chief executive of YouCanBookMe until its sale to Capacity in February 2025", "page": "/people/bridget-harris/" }, { "name": "David Karandish", "role": "Founder and chief executive of Capacity, the parent company", "page": "/people/david-karandish/" } ], "peopleNote": "The about page (youcanbook.me/about-us, read 3 November 2026) names no individuals; it says the company was founded in 2010, that its first app WhenIsGood dates from 2008, that it was self-funded and privately owned, and that it joined Capacity in 2025. Capacity's announcement of 4 February 2025 names Bridget Harris as YouCanBookMe's chief executive, becoming a strategic advisor after the sale, and David Karandish as Capacity's chief executive. YouCanBookMe's founders are not named on any first-hand page read, so the founder roster is missing. No LinkedIn, X or GitHub account for either person is linked from those pages, so none is recorded. The company lists LinkedIn, YouTube, Facebook, Instagram and Linktree accounts and no X or GitHub account. As a subsidiary, no investors are listed.", "companySocial": { "linkedin": "https://www.linkedin.com/company/you-can-book-me/" }, "support": { "emails": [ "support@youcanbook.me" ], "urls": [ "https://youcanbook.me/help", "https://ycbm.capacity.com/" ], "community": [ { "label": "Community forum", "url": "https://forum.youcanbook.me/", "kind": "forum" } ], "contactUrls": [ "https://youcanbook.me/help/contact-sales" ] }, "sources": [ "https://youcanbook.me/about-us", "https://youcanbook.me/", "https://youcanbook.me/help", "https://ycbm.capacity.com/article/838484/api-documentation", "https://capacity.com/capacity-acquires-youcanbookme/", "https://youcanbook.me/terms", "https://youcanbook.me/privacy" ], "ownership": { "status": "subsidiary", "parent": "Capacity", "acquiredBy": "Capacity", "acquiredDate": "2025-02-04", "checked": "2026-11-03", "sources": [ "https://capacity.com/capacity-acquires-youcanbookme/", "https://youcanbook.me/about-us", "https://youcanbook.me/terms" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/youcanbookme.json", "live": { "slug": "youcanbookme", "probe": { "target": "https://api.youcanbook.me/v1", "method": "get", "lastAt": "2026-11-04T20:05:35.221946541Z", "lastOk": true, "lastStatus": 400, "lastMs": 176, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 191, "p95ms24h": 422, "samples24h": 48, "samples30d": 48, "days": [ { "date": "2026-11-04", "probes": 48, "ok": 48 } ] }, "vendorStatus": { "page": "https://www.youcanbookmestatus.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-04T15:32:45.026115371Z" }, "securityTxt": { "url": "https://youcanbook.me/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-04T15:54:28.156243558Z" }, "updatedAt": "2026-11-04T20:05:35.221946541Z" } } }