Draft — pending legal review

This document is a working draft provided as a starting point. It has not yet been reviewed or approved by legal counsel and is not a final or binding policy. Its contents are subject to change.

Privacy Policy

Last updated: [Effective date — TBD, pending legal review]

1. Overview

This Privacy Policy explains what information Bookllyn collects, how we use it, who we share it with, and the choices you have. Bookllyn is a booking platform that connects customers with independent businesses ("vendors"). This policy applies to customers who book appointments and to vendors who use Bookllyn to manage their booking pages.

2. Information we collect

  • Account information. When you sign up or book, we collect information such as your name, email address, and phone number. Vendors also provide business details for their booking page.
  • Booking details. Information about the appointments you make or receive — such as the service, date and time, the vendor involved, and any notes you add to a booking.
  • Payments. Bookllyn does not process or handle payments for your bookings. Payment for an appointment is arranged directly between you and the vendor, off-platform. Bookllyn does not collect or store your card or bank details.
  • Marketplace identity. If you use our marketplace features — such as saving favorite businesses or viewing your booking history across different vendors — we use your phone number and/or email address as an anchor to recognize you across vendors. This lets your saved favorites and cross-vendor history follow you rather than being tied to a single business.

3. How we use your information

We use the information we collect to:

  • create and manage your account and provide the Service;
  • process bookings and send you related confirmations and reminders;
  • verify your phone number where a feature requires it (for example, to protect your booking history);
  • power marketplace features such as favorites and cross-vendor booking history;
  • keep the Service secure, prevent fraud and abuse, and comply with our legal obligations.

4. Who we share data with

We do not sell your personal information. We share it only with the service providers we rely on to operate the Service, and only as needed for them to perform their function:

  • Google — for "Sign in with Google" authentication, and for Places/Maps to display business locations.
  • Twilio — to send SMS messages and verification codes for phone verification.
  • Resend — to send transactional emails such as booking confirmations and account notifications.

We may also disclose information where required by law, to enforce our terms, or to protect the rights, safety, and security of our users, vendors, or Bookllyn.

5. Cookies

Bookllyn uses a single functional session cookie that is necessary to keep you signed in and to make the Service work. We do not use analytics, advertising, or cross-site tracking cookies, and we do not track you across other websites. Because we use only a strictly necessary cookie, there is no cookie-consent banner today.

6. Your rights and choices

Depending on where you live, you may have rights to access, correct, or delete your personal information. You can request deletion of your data as described below:

  • Marketplace favorites & history (self-service). If you have used our marketplace features and have a saved favorites or cross-vendor history identity, you can request deletion of that marketplace data yourself. To protect your account, we confirm the request using a code sent to your verified phone number before deleting the associated favorites and cross-vendor history.
  • Vendors and account-level requests. Vendors do not yet have a self-service deletion tool. If you are a vendor, or you need an account-level request handled, please contact us (see below) and we will action it.

7. Data retention

We keep your personal information for as long as your account and booking history are active and the Service is being provided to you. After that, we retain information only as long as we reasonably need it — for example, to complete transactions, resolve disputes, and meet legal, tax, and accounting record-keeping obligations — after which it is deleted or anonymized.

8. Children's privacy

The Service is not directed to children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will take reasonable steps to notify you, and the updated policy will be effective when posted (or on the effective date we specify).

10. Contact

For privacy questions or to make a privacy-related request, contact us at [privacy contact — email/contact page TBD]. See our Terms of Service for the terms that govern your use of Bookllyn.