Privacy Policy

1. Who we are

This policy explains how Bookline handles personal data. It applies to our website, dashboard, booking widget, AI call agent, SMS features and API. For questions or to exercise your rights, contact us at privacy@bookline.app.

2. Controller and processor

When we handle data about our own customers and website visitors — for example your account and billing details — we are the data controller. When our business customers use Bookline to manage their customers' bookings, calls and messages, the business is the controller of that data and Bookline acts as their processor, handling it on their instructions to provide the service.

3. What we collect

• Account data: name, business name, email, phone, and login details.
• Billing data: subscription and payment information. Card details are handled by our payment processor (Stripe); we do not store full card numbers.
• Booking and customer data: information you or your customers enter to make a booking, such as names, contact details, services and appointment times.
• Call and message data: for the AI call agent and SMS features, call transcripts, summaries, recordings (where enabled) and message content.
• Usage and technical data: how the Services are used, plus device, browser, IP address and log information.
• Cookies: see the Cookies section below.

4. How we use data and our legal bases

We use personal data to provide and improve the Services, set up and manage accounts, take payment, provide support, keep the Services secure, prevent abuse, and meet legal obligations. Where UK/EU data protection law applies, we rely on: performance of a contract (to provide the Services you ask for); legitimate interests (to run, secure and improve our business); consent (for non-essential cookies and any marketing); and legal obligation (for example tax and accounting records).

5. Who we share data with

We share data with service providers ("sub-processors") that help us run the Services, under contracts that require them to protect it. These typically include:

• Stripe — payments and subscriptions.
• SMS and voice providers — to send and receive messages and calls.
• AI providers — to generate call summaries, transcripts and suggested responses.
• Hosting and infrastructure — to run and store the Services.
• Email and analytics providers — to send transactional email and understand how the site is used.

We may also share data where required by law, to protect our rights, or as part of a business sale or reorganisation. We do not sell personal data. Confirm and keep your actual sub-processor list current before launch.

6. International transfers

Some providers may process data outside your country. Where we transfer personal data internationally, we use appropriate safeguards (such as standard contractual clauses or an equivalent approved mechanism).

7. How long we keep data

We keep personal data for as long as needed to provide the Services and for legitimate business or legal reasons (such as accounting and dispute records). When we no longer need it, we delete or anonymise it. Where we act as a processor, we handle and delete data according to our customer's instructions.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict your personal data, to object to certain processing, to data portability, and to withdraw consent. In the UK and EU these come from the UK GDPR and GDPR; in parts of the US, laws such as the CCPA give similar rights, including the right not to be discriminated against for exercising them. To make a request, email privacy@bookline.app. If Bookline holds the data on behalf of a business (our customer), we will direct your request to them.

9. Cookies

We use essential cookies that are needed for the site to work (for example to keep you signed in and to protect forms). With your consent, we may also use analytics or similar cookies to understand and improve how the site is used. You can accept or reject non-essential cookies in our cookie banner, and change your choice later using "Cookie settings" in the footer.

10. Security

We use technical and organisational measures to protect personal data, including encryption in transit and access controls. No system is completely secure, but we work to protect your data and to respond appropriately if something goes wrong.

11. Children

The Services are for businesses and are not directed at children. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and change the "last updated" date, and we will tell you about material changes where appropriate.

13. Contact and complaints

Contact us at privacy@bookline.app about this policy or your data. If you are in the UK and are unhappy with our response, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk. If you are elsewhere, you may have the right to complain to your local data protection authority.