Privacy Policy

Bookodile is operated by Specific Technologies Inc., a company incorporated in the State of Delaware, USA. For any privacy-related inquiries, contact us at [email protected].

For business owners (our customers)

When you create an account and use Bookodile, we are the data controller for your account data (name, email, payment information, and usage data).

For end customers (customers of businesses)

When you book an appointment through Bookodile, the business you are booking with is the data controller for your personal data. Specific Technologies Inc. acts solely as a data processor on behalf of that business, processing your data only to provide the booking service. If you wish to exercise your data protection rights (access, correction, deletion), please contact the business directly.

Business owners (service users)

• Name and email address
• Business name and contact information
• Payment data (processed by our payment provider — we do not store card details)
• Questions you ask AI Chat and its answers (see section 5)
• Your IP address and browser when you accept these terms, as a record of it

Team members (added by a business)

• Name, and email address and phone number if the business adds them
• Photo and a short bio, if added
• Working hours, time off and the bookings assigned to them

The business that adds them is the controller of this data, as it is for its customers', and we process it on its behalf.

On our public pages

• Product analytics through PostHog (EU), only if you accept cookies (see Cookies)

End customers (customers of businesses)

• Name and email address
• Phone number (optional)
• Booking history
• Ratings and feedback

We process personal data for the following purposes:

• Providing the booking service, managing your account, and processing payments (contract performance).
• Sending transactional notifications (confirmations, reminders), maintaining security, and improving the Service (legitimate interest).
• Marketing emails, which you can opt out of at any time (consent).

• Account and business data is kept for as long as your account is open. Ask us to delete it and we do so within 30 days.
• Customer data is held on behalf of the business that collected it. That business decides how long to keep it, and we delete it when they ask or when their account is closed.
• We never see or store card numbers. Payments are handled by Stripe, which holds that data and keeps it for as long as it must.
• Logs and diagnostics are kept by the providers listed below under their own retention settings, not by us directly.
• Closing an account does not by itself erase what is in it — deletion happens when you ask for it.

AI Chat is an assistant in the Bookodile dashboard. It answers questions about Bookodile and about how your business is set up, and it can prepare changes, which happen only when you confirm them.

What it sends

• Your question, and what the chat reads to answer it: your business's setup (team members' names, services, prices, opening hours) and bookings (times, services and team members).
• A customer you pick with “@”, or whose full name you type exactly, is sent as a reference such as “c1”, never by name. A name written any other way is sent as you wrote it, and the chat says so below the box. Email addresses and phone numbers typed into a question are masked before it is sent.
• It goes through OpenRouter to an AI model host, EU-based hosts first. Every request is sent with zero data retention and no data collection: the hosts do not keep it or train on it.
• A spoken question is turned into text by AssemblyAI in the EU. We do not store the recording, and AssemblyAI keeps neither the recording nor the text once we have read it, and does not train on it.

AI Chat makes no decision about anyone on its own: it answers and suggests, and a person confirms every change. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

Who can read a chat

The person who wrote it, and, in a business, its owner and the roles the owner allows to read the team's chats — only chats about what they could see anyway. The chat says so to everyone whose chats can be read.

How long it is kept

A chat is deleted 180 days after its last message. We keep a daily total of what each business's use of AI Chat cost, without its content. The changes a chat made stay in your account like any other change.

We share your data only with trusted service providers:

We do not sell your personal data to third parties. Any transfers of data outside the EU/EEA are governed by Standard Contractual Clauses or equivalent safeguards.

If you are located in the EU/EEA, you have the right to:

Business owners

To exercise any of these rights regarding your account data, contact us at [email protected]. We will respond within 30 days.

End customers

If you booked through Bookodile and wish to exercise your data rights, please contact the business you booked with directly — they are the data controller for your booking data. If the business is unable to assist, you may contact us at [email protected] and we will forward your request.

You also have the right to lodge a complaint with your local data protection supervisory authority.

If you are a California resident, you have the right to know what personal data we collect, request its deletion, and opt out of any sale of your data. We do not sell personal data. To exercise your rights, contact us at [email protected].

We protect your data through:

• Encrypted communication (TLS/HTTPS)
• Row-level security (RLS) for database access control
• Secure password storage (bcrypt hashing via Supabase Auth)
• Regular security updates

No method of electronic transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

Bookodile uses essential cookies for signing in and keeping your session. On our public pages we ask before using analytics: only if you accept does PostHog (EU) set cookies to show us how the pages are used. We use no advertising cookies.

We may update this Privacy Policy at any time. If we make material changes, we will notify you via email or an in-app notice. Your continued use of the Service after such changes constitutes acceptance of the updated policy. The current version is always available on this page.

For any questions or concerns about this Privacy Policy or our data practices, contact us at [email protected].