Privacy Policy
Last updated: 30 June 2026
Bookivea (“we”, “us”, “our”) provides a multi-tenant scheduling and income/expenses platform for appointment-based businesses such as salons. This Privacy Policy explains what information we collect, how we use and protect it, and the choices you have. It also describes, in detail, the data we access through the optional Google Calendar integration and how our use of that data complies with Google’s requirements.
Contents
1. Information we collect
Account information
When you sign up we collect your name, email address, and a securely hashed password. If you sign in with Google, we receive your verified email address and name from Google to create or link your account.
Business data you enter
Within your workspace you create operational records — clients, services and prices, reservations, expenses, receipts and settings. This is your business data; we process it solely to provide the service to you.
Google Calendar data (only if you connect it)
If — and only if — you choose to connect Google Calendar, we access your
Google Calendar events through the
https://www.googleapis.com/auth/calendar.events scope, and your
email address, so we can show which Google account is connected. Connecting is
entirely optional and can be disconnected at any time.
Technical data
We log standard technical information (e.g. timestamps, IP address for rate limiting and abuse prevention, and error diagnostics) needed to operate and secure the service.
2. Google Calendar integration
The Google Calendar integration is a one-way sync: when you create, edit or cancel a reservation in Bookivea, we create, update or delete a matching event on the connected owner’s Google Calendar. We do this only with events that represent your Bookivea reservations; we do not read, analyse or modify your other calendar events.
Limited Use disclosure. Bookivea’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, regarding data obtained from Google Calendar, we affirm that we:
- use it only to provide and improve the calendar-sync feature you explicitly enabled (mirroring your reservations to your own calendar);
- do not transfer or sell this data to third parties, data brokers, or for advertising or any unrelated purpose;
- do not use this data for serving advertisements;
- do not allow humans to read this data unless we have your explicit consent for specific records, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymized; and
- do not use Google user data to develop, improve, or train generalized/non-personalized AI and/or machine-learning models.
We store the minimum needed for the integration to function: an OAuth refresh token and short-lived access token (both encrypted at rest), the connected Google account email, and, on each synced reservation, the identifier of its mirrored Google event. We do not copy or retain the contents of your other calendar events.
3. How we use information
- To authenticate you and operate your workspace.
- To provide the features you use — scheduling, clients, receipts, expenses, reports, and (if enabled) Google Calendar sync and SMS reminders.
- To secure the service (rate limiting, abuse prevention, audit logging).
- To process billing if you subscribe to a paid plan.
- To communicate with you about your account and the service.
We do not sell your personal information.
4. Storage & security
Each business’s data is isolated from every other tenant at the application layer and backstopped by database row-level security. Passwords are hashed; OAuth tokens and other secrets are encrypted at rest. Access to production systems is restricted and audited. We retain logs only as long as needed for operations and security.
5. Sharing & subprocessors
We share data only with service providers strictly necessary to run Bookivea, under contractual confidentiality and data-protection obligations:
- Hosting/infrastructure — to run the application and database.
- Google — for optional Google sign-in and the Google Calendar integration you enable.
- Payment processor — to handle subscriptions, if you choose a paid plan.
- Messaging provider — to deliver SMS reminders, if you enable them.
We may also disclose information if required by law or to protect the rights, safety and security of Bookivea, our users, or the public.
6. Retention & deletion
We keep your data for as long as your account is active. You can disconnect Google Calendar at any time from Settings → Integrations; doing so revokes the token with Google and deletes the stored credentials from our systems. When you close your account, we delete or anonymize your personal and business data within a reasonable period, except where retention is required by law.
7. Your choices & rights
- Revoke Google access at any time — either from Settings → Integrations in Bookivea, or directly at myaccount.google.com/permissions.
- Access, correct, export or delete your data — contact us and we will assist.
- Object to or restrict certain processing, where applicable law provides such rights.
8. Contact
Questions about this policy or your data? Email us at [email protected]. We may update this policy from time to time; we will revise the “Last updated” date above and, for material changes, notify you in-app or by email.