Privacy Policy

BookMeNow is booking software for appointment-based businesses. This policy explains what we collect, why, and who else touches it. It covers bookmenow.date.

The controller is Individual Entrepreneur Danyil Klymenko (ФОП Клименко Даниїл Олександрович), 4 Vysotskoho St., apt. 18, Dnipro, 49033, Ukraine, Tax ID (RNOKPP) 3753002970. Contact: klymenkodanyil02@gmail.com · +40 750 198 160.

Two roles, two kinds of people

• Businesses are our customers. For their account and billing data we are the controller.
• Staff and clients are added by, or book with, a business. For their data we are a processor acting on that business’s instructions. If you are a client, the business decides what is held about you — ask them first, and we will help them answer.

What we collect

• Everyone signing in: email address and a short-lived one-time code. We store a hash of the code, never the code itself.
• Businesses: business name, public slug, timezone, the administrator’s email and a password hash.
• Staff: name, email, optional phone, the services they provide.
• Clients: name, optional email and phone, and their bookings.
• Technical: IP address and user agent, kept to rate-limit sign-in attempts and secure sessions.

We do not collect or see payment card details — those go to Paddle (see below).

Why we are allowed to hold it

• Performance of a contract — running the business’s account and its bookings.
• Legitimate interests — keeping the service secure, preventing sign-in abuse, and keeping an audit trail of account changes.
• Consent — the WhatsApp AI agent (Plus plan), which processes a client’s messages only for a business that has enabled it and only when the client writes to that business’s WhatsApp number.
• Legal obligation — tax and accounting records for purchases.

Who else processes it

These are the only third parties that receive personal data.

• Paddle.com Market Ltd — payments. Paddle is the Merchant of Record and an independent controller for the purchase itself; card details go to Paddle and never to us.
• Resend — transactional email (sign-in codes, booking confirmations, reminders). Processed in the EU (eu-west-1).
• Railway — hosting for the application server and the database. This is where accounts, bookings and settings live, in Railway’s US East region (United States).
• Vercel Inc. — two things. (1) Hosting for the website you are reading: every request to bookmenow.date reaches Vercel’s global edge network first, carrying your IP address and user agent as any web request does, and Vercel keeps short-lived operational logs. It does not hold account data — that is on Railway. (2) Vercel Web Analytics and Speed Insights — aggregate page-view counts and page-loading measurements on every page of this site. Neither sets a cookie, neither reads or writes anything on your device, and neither tracks you across other sites. They process your IP address and user agent in the moment to derive coarse figures (country, device type, a per-day visitor hash); Vercel documents that the raw IP is not retained, and what reaches us is counts, not people.
• Anthropic — the AI agent (Plus plan only). When a business enables the WhatsApp agent, the content of a client’s messages is sent to Anthropic’s Claude API to generate a reply. Anthropic does not train its models on this data.
• Meta Platforms (WhatsApp) — the WhatsApp channel (Plus plan only), used to deliver and receive the agent’s messages.
• DataFast (JustShipIt Pte. Ltd., Singapore) — product analytics: page views, traffic source, funnels and revenue attribution. Cookieless — it sets no cookies. It processes your IP address and user agent to derive coarse, aggregate figures and a rotating visitor id, and does not track you across other sites.

We do not sell personal data, and we do not use it for advertising or profiling.

Where it is stored, and transfers

The core data — accounts, bookings, settings — is stored on Railway in the United States (US East). Transactional email is processed by Resend in the EU. The website is served from Vercel’s global edge network, operated by Vercel Inc., established in the United States. The AI agent, when enabled, sends message content to Anthropic in the United States. Transfers outside the EEA rely on Standard Contractual Clauses or an adequacy decision.

How long we keep it

• One-time sign-in codes: 10 minutes.
• Sessions: about 30 days, or until sign-out.
• Bookings and account data: for as long as the business’s account is open.
• After a business closes its account: deleted within 90 days, except records we must keep for tax purposes.

Your rights

Under the GDPR you may request access, correction, erasure, restriction, portability, or object to processing. Write to klymenkodanyil02@gmail.com. If you are a client or a staff member, contact the business first — we act on their instructions and will help them respond. You may also complain to your national data protection authority.

Cookies and local storage

We use no advertising or analytics cookies. A small app_locale cookie remembers the language you chose, and your session token is kept in your browser’s local storage so you stay signed in. Both are strictly necessary for the site to work; clearing site data signs you out.

Changes

If we change this policy materially we will email account administrators before it takes effect.

Contact

Individual Entrepreneur Danyil Klymenko (ФОП Клименко Даниїл Олександрович)
4 Vysotskoho St., apt. 18, Dnipro, 49033, Ukraine
klymenkodanyil02@gmail.com · +40 750 198 160