Introduction
book.me ("we", "us", or "our") operates the book.me website and services. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.
By accessing or using book.me, you agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of our services.
Information We Collect
Information You Provide
- Account Information — When you create an account or claim a business page, we collect your name, email address, and authentication credentials via our identity provider (Clerk).
- Business Information — If you claim or manage a business page, we collect business details such as name, address, phone number, website, and operating hours sourced from your Google Business profile.
- Payment Information — Subscription payments are processed by Stripe. We do not store your credit card details directly — Stripe handles this as a PCI-compliant processor.
- Communications — When you contact us for support, we collect the content of your messages.
Information Collected Automatically
- Usage Data — We collect analytics about how visitors interact with business pages, including CTA clicks, page views, and direction requests.
- Device Information — Browser type, operating system, screen resolution, and language preferences.
- Cookies — We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.
Information from Third Parties
- Google Places API — When generating business pages, we retrieve publicly available data from Google Maps including photos, reviews, ratings, and business details.
How We Use Your Information
We use collected information to:
- Provide, operate, and maintain the book.me platform
- Generate and host business landing pages
- Process subscription payments and manage your account
- Track anonymized analytics on business page performance
- Communicate with you about your account, updates, or support requests
- Detect and prevent fraud or abuse
- Comply with legal obligations
We never sell your personal data to third parties.
Data Sharing
We share your information only in these circumstances:
- Service Providers — We use trusted third-party services to operate our platform:
- Clerk for authentication
- Stripe for payment processing
- Vercel for hosting and image storage
- Google Places API for business data retrieval
- OpenAI for AI-powered content generation
- Legal Requirements — We may disclose information if required by law, regulation, or legal process.
- Business Transfers — In the event of a merger, acquisition, or sale, user data may be transferred as part of that transaction.
Data Retention
- Account Data — Retained for as long as your account is active. Upon deletion request, we remove your data within 30 days.
- Business Page Content — Retained for as long as the business page is active. Demo pages without an owner are automatically removed after 90 days.
- Analytics Data — Aggregated and anonymized analytics are retained indefinitely. Individual event data is purged after 12 months.
Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data we hold
- Correct inaccurate or incomplete data
- Delete your personal data ("right to be forgotten")
- Export your data in a portable format
- Restrict or object to certain processing activities
- Withdraw consent for processing based on consent
To exercise these rights, contact us at privacy@trybook.me.
For users in the European Economic Area (EEA), we process data under the legal bases of contract performance, legitimate interest, and consent as applicable under GDPR.
Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encrypted data transmission (TLS/HTTPS)
- Secure authentication via Clerk
- PCI-compliant payment processing via Stripe
- Regular security reviews and access controls
- Data stored on Vercel infrastructure with enterprise-grade security
No system is perfectly secure. If you believe your account has been compromised, contact us immediately.
Children's Privacy
book.me is not intended for children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.
Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of book.me after changes constitutes acceptance of the revised policy.
Contact Us
If you have questions about this Privacy Policy, contact us at:
- Email — privacy@trybook.me
- Address — Warsaw, Poland