Privacy Policy

1. Information from businesses

• Account details: your name, email address, phone number and password. Passwords are stored hashed, never in plain text.
• Business details: business name, tagline, logo, WhatsApp number, terms, country, timezone, services, prices, opening hours and the payment details you choose to show customers (for example a MoMo number and account name).
• Subscription details: your plan and payment status. Card and MoMo payments for your subscription are handled by Paystack; we don't see or store your card number.
• Device details: if you turn on notifications, a push token for each device so we can alert you about new bookings.

2. Information from customers who book

When you book with a business through its Bookaata page, we collect what you enter: your name, phone number, email address (optional), notes, the service and time you chose, and the payment proof you upload (a screenshot or transaction reference).

This information belongs to the business you booked with. It is stored in that business's account so they can confirm and manage your appointment, and the business is responsible for how it uses it. Your browser also remembers an unfinished booking on your device so you can come back to it.

3. How we use information

• To run the service: show businesses their bookings and customers, and show customers the booking page.
• To send messages about a booking: confirmations, rejections, cancellations, payment reminders and appointment reminders by SMS and email. Businesses can switch appointment reminders off.
• To alert businesses about new bookings and payment proofs by push notification, email or SMS.
• To manage subscriptions, reset forgotten passwords and give support.
• To keep Bookaata secure, for example by limiting repeated login attempts.

4. Who we share it with

We use a small number of service providers, and each receives only what it needs:

• Paystack processes subscription payments and receives the business's billing email.
• Cloudflare stores uploaded images: business logos, service photos and payment proofs.
• Email and SMS providers (such as Brevo, Twilio and Hubtel) deliver messages and receive the recipient's phone number or email and the message text.
• Expo and web push services deliver notifications to business devices.
• Our hosting providers run the servers and database.

We may also disclose information if the law requires it.

5. How long we keep it

We keep business and booking records while the business's account is active. A business owner can delete their account from Settings: their login details are removed straight away and the booking page stops taking bookings. Past booking, customer and payment records are kept as business records, because they may be needed for accounting or disputes.

Customers who want their details corrected or removed should contact the business they booked with. If you can't reach them, contact us and we will help.

6. Security

All traffic is encrypted over HTTPS. Passwords are hashed. Each business can only see its own data. Password reset links expire after an hour and work once. No system is perfectly secure, so please use a strong password and keep it private.

7. Your rights

You can ask to see, correct or delete the personal information we hold about you, or object to how it is used, in line with Ghana's Data Protection Act, 2012 (Act 843) and other laws that apply to you. Contact us on +233 54 554 3359 and we will respond within a reasonable time.

8. Children

Bookaata is for businesses and adults booking appointments. We don't knowingly collect information from children under 16.

9. Changes

We may update this policy as Bookaata changes. We will change the date at the top when we do, and tell businesses about important changes. Please also read our Terms of Service.