Legal

Boksy ("we," "our," or "us") is committed to protecting the privacy of solo service business operators and their clients who use our platform. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use Boksy's services, website, and mobile applications (collectively, the "Service").

By using Boksy, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

This policy applies to all users of Boksy, including business owners who create booking pages and clients who book appointments through those pages.

We collect the following categories of personal information:

Account Information: When you register for a Boksy account, we collect your full name, business name, email address, phone number, and GCash number.

Booking Data: When clients book appointments through your Boksy booking page, we collect client names, phone numbers, email addresses, appointment preferences, and any notes submitted during the booking flow.

Payment Information: We do not store full payment credentials. Payment processing is handled by PayMongo. We receive transaction identifiers, payment status, and amounts necessary to track booking confirmations.

Usage Data: We automatically collect information about how you interact with our Service, including your IP address, browser type, pages visited, features used, and timestamps of activity.

Communications: If you contact our support team or participate in surveys, we retain those communications to improve our services.

We use the information we collect for the following purposes:

Service Delivery: To create and manage your account, operate your booking page, process appointments, send reminders, and facilitate payments between you and your clients.

Communications: To send booking confirmations, appointment reminders via SMS or Viber through Semaphore, account notifications, and service updates.

Improvement: To analyze usage patterns, improve our platform, develop new features, and understand how our users interact with Boksy.

Legal Compliance: To comply with applicable laws, regulations, and legal processes, and to enforce our Terms and Conditions.

We will not sell your personal information to third parties. We do not use your data for advertising purposes without your explicit consent.

We share your information only in the following circumstances:

Service Providers: We share data with trusted third-party providers who help us operate our platform, including Supabase (database and authentication), PayMongo (payment processing), Semaphore (SMS/Viber reminders), and Vercel (hosting). These providers are contractually bound to protect your data and use it only as directed by us.

Business Transfers: If Boksy is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you before your data is transferred and subject to a different privacy policy.

Legal Requirements: We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Boksy, our users, or the public.

With Your Consent: We may share your data with your explicit consent for purposes not described here.

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you close your account, we will retain your data for a period of 90 days to allow for account recovery, after which it will be permanently deleted from our systems.

Booking records may be retained for up to 12 months for tax and business record purposes. Payment transaction records are retained for 7 years as required by Philippine financial regulations.

You may request deletion of your data at any time by contacting us at hello@boksy.ph.

We implement industry-standard security measures to protect your information, including SSL/TLS encryption for data in transit, AES-256 encryption for data at rest, access controls and authentication protocols, and regular security audits.

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If a data breach occurs that affects your rights and freedoms, we will notify affected users within 72 hours of becoming aware of the breach.

Depending on your location, you may have the following rights regarding your personal data:

Right of Access: You may request a copy of the personal data we hold about you. Right to Rectification: You may request that we correct inaccurate or incomplete data. Right to Erasure: You may request that we delete your personal data, subject to legal retention requirements. Right to Portability: You may request your data in a structured, machine-readable format. Right to Object: You may object to certain types of data processing.

To exercise any of these rights, contact us at hello@boksy.ph. We will respond to all requests within 30 days.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last Updated" date. For significant changes, we will send a notification to the email address associated with your account at least 14 days before the changes take effect.

Your continued use of the Service after the effective date of the revised policy constitutes your acceptance of the changes.