Privacy Policy

This policy explains what personal data Bookara collects, why we use it, who else processes it and what your rights are. It covers bookara.am, the shop booking sites on bookara.am, and the Bookara Telegram bots and apps.

1. Who is responsible

For shop owners, admins and masters, for signup requests and for blog subscribers, Bookara is responsible for your data.
For a shop's customers, the shop decides what happens with your booking data, and Bookara handles it on the shop's behalf to run its booking system. You can ask the shop or us about it; if a request is for the shop, we'll pass it on.

Contact: [email protected].

2. What we collect

If you book an appointment

Through Telegram: your Telegram user ID, name, username and language, and your phone number if you share it.
As a guest on the website: the name and phone number you enter, and your email if you choose to give it.
If you fill in your profile: your email and the name you'd like to be called.
Your bookings: the shop, location, master, service, date and time, and status (confirmed, cancelled and so on).

If you run a shop or work in one

Your Telegram user ID, name and username, your phone number if you or your admin enter it, and your role in the shop.
The shop's details: name, address, locations, working hours, services, prices and photos.
Billing: your plan, payments and their dates. Card payments go through Paddle: we never see your card details, only Paddle's customer and subscription IDs. For Stars payments we store Telegram's payment ID.

If you send a signup request

Your business name and type, the address you'd like (name.bookara.am), your name, phone number and message, and your Telegram username if you send the request through Telegram.

If you subscribe to the blog

Your email address, your language, and whether you've confirmed or unsubscribed.

Usage statistics

We count visits to bookara.am, the blog and shop booking pages ourselves, without cookies and without third-party analytics or advertising trackers: which pages are opened, which buttons are clicked, how far people get in the booking or signup form, the referring site, campaign tags in the link, language and device type. Your IP address and browser details are turned into a code that changes every day and can't be traced back to you; we never store the IP address itself. If your browser sends a Do Not Track or Global Privacy Control signal, nothing is counted. Shops see these statistics only for their own booking page, and only as totals.

Our hosting providers process IP addresses and technical request logs only to deliver the service and keep it secure.

3. How we use it

To run the booking system: show free times, create bookings, and send confirmations and reminders to customers and notifications to masters and the shop. This is needed to provide the service you asked for.
To set up new shops and reply to signup requests and support messages.
To process payments and keep billing records, as the service and the law require.
To send blog articles by email, only after you confirm your subscription. You can unsubscribe from any email.
To understand, in totals, how bookara.am and shop booking pages are used, to improve them, and to show shops statistics about their own bookings and booking page. This is our legitimate interest.
To keep the service secure and prevent abuse, which is our legitimate interest.

Shops on Pro and Ultra can send announcements to their customers through the shop's Telegram bot. The shop decides what to send; you can stop them by blocking the shop's bot. We never use customer data for our own marketing.

The shop you book with sees your bookings and the contact details you give, so it can serve you. Shops never see each other's customers.
Service providers that run parts of Bookara for us, and only for that:
- Supabase: database and server hosting;
- Cloudflare: website hosting, network and email forwarding;
- Telegram: delivering bot messages and the mini app;
- Resend: sending emails;
- Paddle: card payments, as the merchant of record. Paddle handles your payment data under its own privacy policy;
- Google Fonts: the website's fonts load from Google's servers, which see your IP address.
Authorities, when the law requires it.

We don't sell personal data. Some of these providers process data outside Armenia, for example in the EU or the US, under contracts that protect it.

5. How long we keep it

Shop, customer and booking data: while the shop uses Bookara. When a shop is closed at its request, we delete its data within 30 days.
Signup requests: as long as we need them to set up the shop or follow up. Ask us and we'll delete yours.
Blog subscription: until you unsubscribe. After that we keep your address only marked as unsubscribed, so we never email you again; ask us and we'll delete it completely.
Payment records: as long as tax and accounting law requires.
Usage statistics: 13 months, then deleted automatically.

6. Your rights

You can ask to see the data we hold about you, correct it, delete it, get a copy of it, or object to how we use it, and you can withdraw your consent at any time. Write to [email protected] and we'll reply within 30 days. Customers can also change their profile details in the shop's mini app.

If you think we've handled your data wrongly, you can complain to the Personal Data Protection Agency of Armenia, or to the data protection authority of your own country.

7. Cookies and local storage

We don't use tracking cookies. Your browser stores a few things for convenience: your language, light or dark theme, and, in the apps, your login session. On the pricing section, Paddle.js loads from Paddle to show prices in your currency, and Paddle's checkout may use its own cookies as described in its policy. While you're on bookara.am, the page also remembers where you arrived from until you close the tab, so a signup request can show how you found us.

8. Security

All connections are encrypted (HTTPS). Access to the apps is checked through Telegram's signed login, each shop can only reach its own data, and only the people who run Bookara can access the database.

9. Children

Bookara is a service for businesses and isn't aimed at children. A child who books an appointment should do so with a parent's permission.

10. Changes to this policy

We may update this policy. The date at the top shows the latest version, and we'll tell shop owners about important changes in advance.

11. Contact

Questions or requests about your data: [email protected]. See also our Terms and Conditions.