Privacy notice

What data we process

• Your account: name, email address and/or WhatsApp number (used to send you verification codes and to sign in), password (stored encrypted) and your business details (name, address, hours, services and team).
• Subscription payments: processed by Stripe and Mercado Pago. Bookea does not store your full card details.
• Technical data: IP address, browser and access logs, to keep accounts secure and prevent abuse (for example, the same person repeating the free trial). When you sign up, Cloudflare Turnstile may check that you are a person.

Data about each business’s clients and patients

The data each business records about its clients or patients (name, phone, email, appointment history and, for health businesses, the clinical record) is that business’s responsibility. Bookea acts as a processor: it stores and processes that data only to provide the service the business signed up for (scheduling, reminders, payments and records), and does not use it for its own purposes or sell it.

Health data is sensitive data. Each business must obtain its patients’ consent and provide its own privacy notice (the platform includes a basic one on each business’s page). Access to clinical records is logged. Clinical records are not currently offered to businesses in the United States or Europe.

What we use it for

Purposes necessary for the service:

• Creating and running your account and your business’s booking page.
• Sending appointment confirmations, reminders and notices by WhatsApp and email.
• Charging your subscription and sending you a receipt for each payment.
• Providing support, keeping the platform secure and complying with legal obligations.

Additional purpose: letting you know about Bookea news and improvements. If you don’t want to receive them, write to us and we will stop; this does not affect your service.

Who we share it with

Only with providers that help us deliver the service and are required to protect it: platform hosting, email delivery, WhatsApp messaging (Meta) and payment processors (Stripe and Mercado Pago). Also when a competent authority requires it under the law. We do not sell personal data.

Some of these providers are located outside Mexico (for example, in the United States), so your data may be transferred to and stored in other countries, always to provide the service and with providers required to protect it.

Your rights

You can access, rectify or delete your data, object to its use, or withdraw your consent, by writing to [email protected] with your name, your account’s email address and your request. We will reply within the time limits set by law. If you are a client or patient of a business that uses Bookea, please direct your request to that business; if you write to us, we will forward it to them.

Cookies

We use cookies that are necessary to keep you signed in and to remember your language and preferences. We do not use third-party advertising cookies.

Changes to this notice

If this notice changes, we will publish the new version on this page with its update date.