BookodileBookodile
GDPR & CCPA

Privacy Policy

Effective March 21, 2026

1.Who We Are & Data Roles

Bookodile is operated by Specific Technologies Inc., a company incorporated in the State of Delaware, USA. For any privacy-related inquiries, contact us at privacy@bookodile.com.

For business owners (our customers)

When you create an account and use Bookodile, we are the data controller for your account data (name, email, payment information, and usage data).

For end customers (customers of businesses)

When you book an appointment through Bookodile, the business you are booking with is the data controller for your personal data. Specific Technologies Inc. acts solely as a data processor on behalf of that business, processing your data only to provide the booking service. If you wish to exercise your data protection rights (access, correction, deletion), please contact the business directly.

2.Data We Collect

Business owners (service users)

  • Name and email address
  • Business name and contact information
  • Payment data (processed by our payment provider — we do not store card details)

End customers (customers of businesses)

  • Name and email address
  • Phone number (optional)
  • Booking history
  • Ratings and feedback

3.Purpose and Legal Basis

We process personal data for the following purposes:

  • Providing the booking service, managing your account, and processing payments (contract performance).
  • Sending transactional notifications (confirmations, reminders), maintaining security, and improving the Service (legitimate interest).
  • Marketing emails, which you can opt out of at any time (consent).

4.Data Retention

  • Account data is retained for the duration of your account plus 30 days after deletion.
  • Customer data is retained for the duration of the business owner's account.
  • Payment data is retained as required by applicable law.
  • Logs and diagnostics are retained for up to 90 days.

5.Sub-processors

We share your data only with trusted service providers:

SupabaseEUdatabase and authentication
Lemon Squeezypayment processing
Stripepayment processing
Resendemail delivery
Sentryerror monitoring (anonymized)
Googleoptional calendar sync

We do not sell your personal data to third parties. Any transfers of data outside the EU/EEA are governed by Standard Contractual Clauses or equivalent safeguards.

6.Your Rights (GDPR)

If you are located in the EU/EEA, you have the right to:

Accessrequest a copy of your personal data
Rectificationrequest correction of inaccurate data
Erasurerequest deletion of your data
Portabilityreceive your data in a machine-readable format
Objectionobject to processing based on legitimate interest
Withdraw consentwithdraw consent for marketing emails at any time

Business owners

To exercise any of these rights regarding your account data, contact us at privacy@bookodile.com. We will respond within 30 days.

End customers

If you booked through Bookodile and wish to exercise your data rights, please contact the business you booked with directly — they are the data controller for your booking data. If the business is unable to assist, you may contact us at privacy@bookodile.com and we will forward your request.

You also have the right to lodge a complaint with your local data protection supervisory authority.

7.California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal data we collect, request its deletion, and opt out of any sale of your data. We do not sell personal data. To exercise your rights, contact us at privacy@bookodile.com.

8.Security

We protect your data through:

  • Encrypted communication (TLS/HTTPS)
  • Row-level security (RLS) for database access control
  • Secure password storage (bcrypt hashing via Supabase Auth)
  • Regular security updates

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9.Cookies

Bookodile uses only essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies.

10.Changes to This Policy

We may update this Privacy Policy at any time. If we make material changes, we will notify you via email or an in-app notice. Your continued use of the Service after such changes constitutes acceptance of the updated policy. The current version is always available on this page.

11.Contact

For any questions or concerns about this Privacy Policy or our data practices, contact us at privacy@bookodile.com.