Privacy policy

1. If you run a business on Bookalo

We store your account data (name, email, and an encrypted password), your business data (services, prices, hours, team, brand), and basic usage data.

We use it only to operate the service. We don't sell your data, we don't share it with advertisers, and we don't send you third-party advertising.

2. If you booked with a business

When you book an appointment, your name, contact details, and the appointment details are stored on behalf of the business you booked with. That business is responsible for your data; Bookalo processes it on their behalf.

We use that data only to manage your booking: confirmations, reminders, and the links to cancel or reschedule. If you want a business to delete your data, contact them directly; if you need help, write to us.

3. Providers we use

Email: sent through Resend. Subscription payments: Stripe (we never store card numbers; Stripe handles them directly). Network and protection: Cloudflare. These providers process data only to perform their function.

4. Cookies

We use a single cookie, the session cookie, to keep you signed in to your account. No advertising or tracking cookies.

5. Retention and deletion

We keep data while the business account is active, and we take daily backups. If you close your account, you can request full deletion of your data by writing to [email protected]; it also takes effect in backups within their rotation cycle (14 days).

6. Security

All traffic is encrypted (HTTPS), passwords are stored with a secure hash, and access to the systems is limited.

7. Changes and contact

If we change this policy in a significant way, we'll tell you by email or inside the product. Questions? Write to us at [email protected].