Privacy Policy

1. Information collected

• Account and profile: name, username, email, supplied phone, market, account role, profile image, authentication identifiers and password hashes where applicable.
• Provider and booking: services, prices, duration, availability, business location, photos, appointment history, statuses, contact and guest verification information.
• Communications and content: booking chat, attachments, Feed posts, comments, moderation reports and related metadata where features are available.
• Location: foreground location when permitted, used for discovery, distance and market-related features; saved client or provider coordinates where necessary. Background location is not required for the described features.
• Technical and diagnostics: app version/platform, session and security records, push tokens, limited interactions and conversion measurements, crash and performance diagnostics.
• US subscriptions: Stripe customer/subscription references, billing periods, statuses, discounts, invoices, refunds, disputes, tax-related details, and webhooks. BookitGY does not receive full card numbers.
• Agreement evidence: exact approved document and offer versions, archived references, minimal account references, server acceptance/authorization times, and relevant Checkout or subscription references. Additional IP or device collection is not required solely to prove agreement.
• Deletion operations: minimum account-owned records needed to verify cancellation, compute eligible refunds, preserve pending obligations, and reconcile local and vendor cleanup.

2. Purposes

We use this information to operate accounts and bookings, connect clients and providers, deliver service communications, process provider billing, authenticate and protect accounts, moderate content, measure product performance, respond to support and privacy requests, resolve disputes, and meet applicable legal obligations. We do not treat agreement to Terms as marketing or WhatsApp consent.

3. Communications and preferences

Service communications may include booking confirmations, account-security notices, and billing or deletion updates through supported channels. Optional nearby-provider and Social Feed alerts are subject to the controls and consent actually implemented for the applicable market and platform. Device-level notification permissions can be changed in operating-system settings. Any SMS or WhatsApp practices must be consistent with applicable consent requirements and actual messaging configuration.

4. Sharing and processors

We share necessary information with booking participants, authorized personnel and vendors supporting the Services, or as legally required. Depending on features and configurations in use, providers may include hosting and database services (such as Render, Vercel and PostgreSQL hosting), Stripe, Apple, Google, Expo, SendGrid, Twilio, Cloudinary and AWS; diagnostic or attribution providers may also be used where enabled. Media storage may involve both Cloudinary and AWS during migration; this policy does not claim that Cloudinary has been retired. We do not sell personal information as a business practice described by this policy.

5. Location and visibility

Provider business locations and public profile content may be visible to other users. Booking details are shared with the client and provider as necessary. Location permission can be denied or revoked, though nearby and distance functions may be limited. Public content should not contain information the poster does not have authority to disclose.

6. Subscription, cancellation and deletion data

Ordinary subscription cancellation, permanent account deletion, payment refund, and remote vendor cleanup are separate events. BookitGY may retain restricted records necessary to establish that a cancellation succeeded, a refund is outstanding, a payment was disputed, or deletion is being reconciled. A refund request does not mean money has reached a payment method. When cancellation is verified, local deletion may proceed while a restricted outstanding refund or remote-cleanup obligation remains.

7. Retention

We retain information only as reasonably needed for defined service, security, financial, dispute and legal purposes. Minimal Terms/Privacy agreement and recurring-billing authorization evidence may be retained while an account is active and, when documented and justified, for up to six years after closure; this is not a universal retention period. Other records, including billing, tax, booking, moderation, security, deletion, backup and media records, are retained according to their purpose, applicable requirements and any preservation needs. Retention periods and deletion timing vary by category; not all copies can be removed immediately. Backups and vendor cleanup may take longer than active-profile removal and may be subject to provider-controlled retention or restoration processes. Retention periods vary by purpose and applicable law; BookitGY restricts access to retained records and removes them when the applicable retention purpose expires, unless preservation is legally required.

8. Account deletion

In the app, sign in, open Profile, select Delete account, review the notice, and complete password or supported social reauthentication. If unavailable, contact https://www.bookitgy.com/support or support@bookitgy.com without sending passwords, one-time codes or full card information. Active login and public profile details, user content and personal chat material are removed or anonymized as applicable to the verified deletion workflow. Limited appointment records, conversation shells, financial and consent evidence, dispute records, security logs, backups and deletion obligations may be retained when justified. Remote media removal is subject to shared-object and legal-hold safeguards. The Account Deletion Policy gives additional detail.

9. Your choices and requests

You may update available profile fields, change device permissions, use available notification settings, manage US provider billing on the website, and request deletion. Depending on applicable law, you may have further privacy rights. Contact support@bookitgy.com for requests. We may verify identity and will respond as required by applicable law, including explaining lawful limitations on a request. Depending on applicable law, rights may include access, correction, deletion, obtaining information about processing, and appealing an eligible decision. Contact support@bookitgy.com to exercise applicable rights.

10. Children

BookitGY is not directed to children under 13 and does not knowingly solicit personal information from children under 13. Contact us if you believe such information was supplied. Users must comply with applicable minimum-age and capacity requirements.

11. Security and international processing

We use administrative, organizational and technical safeguards intended to protect data, but no service is completely secure. Vendors may process information outside a user’s country. International processing is subject to applicable legal requirements. The countries, providers and protections involved can differ by service and configuration. You may contact support@bookitgy.com for more information about applicable cross-border processing.

12. Changes and contact

Updates will show a version and effective date, with additional notice or agreement when required. Privacy inquiries: support@bookitgy.com; legal notices: support@bookitgy.com; support: support@bookitgy.com. See the Provider Subscription, Cancellation & Refund Policy.