This policy explains what information Bookr collects, how we use it, and the choices you have. We keep it short and collect only what the Service needs.
1. Who this policy covers
This policy applies to two groups of people:
- Businesses — mobile detailers and their staff who create a Bookr account and use the dashboard or the Bookr app. For this information, Bookr decides how it is used.
- Customers — people who send a request through a Business’s booking page. Bookr stores and processes this information on behalf of that Business so it can respond. The Business decides how it uses your details once it receives them, under its own privacy practices.
2. Information we collect
From Businesses
- Account details: your name, email address, and password. Passwords are handled by our sign-in provider and are never stored in plain text.
- Business profile: business name, logo, location, contact phone, services, add-ons, prices, working hours, time zone, portfolio photos, and reviews you choose to publish.
- Alert settings: your email and text alert preferences and, if you turn on text alerts, your mobile number, your consent, and a record of alerts we send.
- Billing: your plan, subscription status, and identifiers from Stripe. Stripe collects your card details directly; Bookr never receives or stores full card numbers.
- Card payments: if you take card payments, your Stripe or Square account’s identifier and status, such as whether it can take payments, and the account and location names Square shares. Stripe or Square collects your identity and bank details directly; Bookr does not receive them.
- Bookr app: if you sign in with Apple or Google, the name and email address they share with us. If you turn on push notifications, a notification token for your phone, its platform, language and app version, linked to the sign-in that turned them on. Photos you take or choose for your logo, services, and booking page; the app sees only the photos you pick. Call, Text, Email, and Directions open your phone’s own apps, and what you send from them does not pass through Bookr. The app keeps a copy of your recent requests and settings on your phone so it opens without a connection; signing out deletes it.
- Connected calendar: if you connect Google Calendar, Outlook, or iCloud, the account’s email address, the access Bookr was given (a token, or for iCloud an app-specific password), encrypted, and which calendar Bookr made there. See Connected calendars.
- Messages to us: anything you send when you contact support.
From Customers
When you send a request on a booking page, we collect:
- your name, phone number, and email address if you give one;
- your vehicle’s make, model, and year or type;
- the services and add-ons you choose, notes about the vehicle’s condition, and any other notes you add;
- photos you add to a quote request, saved without their location or camera details and shown only to the Business;
- the service address;
- your preferred date, time, and time zone; and
- whether you agreed to receive texts about your request.
When the Business sends you a quote or invoice, we keep it and a private link to it, and record whether each email or text to you was sent.
If you pay an invoice by card, you enter your card details on a payment page run by Stripe or Square, which processes the payment for the Business under its own privacy policy. Bookr receives the payment’s amount and status, any refund, any dispute made through Stripe, and a link to your receipt, never your card details.
Collected automatically
- Technical data: our hosting providers process your IP address, browser type, and request times to deliver and protect the Service.
- Usage data: pages viewed, buttons clicked, the steps of forms completed, errors, device and browser type, and approximate location derived from your IP address. We link this to a random identifier stored in your browser and, once a Business signs in, to its account.
- In the Bookr app: we record actions such as saving a service or sending a quote, linked to the Business’s account. The app contains no advertising or analytics SDK and records no session replays, and the Bookr pages it opens, such as your booking page or this policy, send no usage data. Google’s Firebase, which delivers push notifications, receives an installation identifier, your phone’s model, system version, language, and time zone, and data about its own performance. If you sign in with Google, Google may use your IP address to estimate your general location to prevent fraud.
- Session replays: on Bookr’s own website, sign-in pages, and dashboard, we record how the page responds to your clicks, scrolling, and typing so we can find and fix problems. Anything typed into a field is hidden before it leaves your browser, and Customers’ contact details shown in the dashboard are excluded. We do not record session replays on Businesses’ booking pages, except pages Bookr built for a business that has not claimed them yet.
- Booking pages: we record page views and which form steps are completed, with counts such as how many services were chosen. When a Business adds its form to its own website, we also record that website’s address. We do not send Customers’ names, phone numbers, email addresses, or service addresses to our analytics provider.
- Booking page visit counts: to show a Business how many people open its booking page, we count each visitor once a day without cookies or anything stored on their device. A repeat visit on the same day is recognized by a one-way code made from the visitor’s IP address (for IPv6, only its network part), their browser’s identification string, and the Business, combined with a random value that changes daily. To limit abuse, we also count new visitors each day under a one-way code made the same way from the IP address and the Business alone. Each day’s random value and these counts are deleted from our database within about two days, after which visits on different days can’t be connected; copies in backups are removed on our providers’ regular backup cycle. For each visitor and day we keep the date, the times of the first and last visit, the number of page views, whether the request form was opened, whether the form was shown on a website, the type of device (phone, tablet, or computer), and where the visit came from (a tag on the link, or the kind of site, such as Google or Instagram). We do not store the IP address or browser string. Businesses see totals, not individual visits. We keep these records for 13 months. This is separate from the usage data described above.
- Abuse prevention: when a request is sent, we store a one-way code derived from the sender’s IP address (or contact details) using a secret key. We use it only to limit spam and repeated submissions.
- Cookies: see Cookies below.
3. How we use information
- To run the Service: publish booking pages, deliver Customers’ requests to the right Business, and show them in the dashboard.
- To send the alerts a Business turns on, and service emails such as sign-in confirmations, password resets, and billing notices.
- To process subscription payments and, for a Business that takes card payments, to start its invoice payments and show which were paid.
- To understand how Bookr is used, find errors, and decide what to improve.
- To keep the Service secure, prevent fraud and abuse, and fix problems.
- To answer support questions.
- To comply with the law and enforce our terms.
We do not sell personal information, share it for targeted advertising, or use Customers’ details to market to them.
5. Connected calendars
A Business can connect Google Calendar, Outlook, or iCloud from Schedule in the dashboard. Bookr then makes a calendar named Bookr in that account and adds, changes, and removes the Business’s scheduled visits there. Bookr uses this access only to keep that calendar in step with the Business’s visits. It doesn’t read or change anything outside the Bookr calendar, and it keeps nothing from the calendar beyond what it needs to update its own events.
For Google Calendar, Bookr asks only to manage calendars it creates, so it can’t see the rest of your Google Calendar. Microsoft offers no permission that narrow, so Outlook’s permission covers your calendars, but Bookr works only in the Bookr calendar. iCloud uses an app-specific password you create for Bookr, which you can revoke at any time at account.apple.com.
Disconnecting removes Bookr’s visits from that calendar (the whole Bookr calendar when nothing else is in it), ends Bookr’s access where the provider allows it, and deletes the access Bookr stored. Deleting your account does the same. If some visits can’t be removed, Bookr keeps the account’s address for two weeks to tell you where they are. If you remove Bookr’s access in your Google, Microsoft, or Apple account instead, Bookr stops updating the calendar and the visits already there stay.
Bookr’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
7. How long we keep information
We keep a Business’s account, profile, and requests while the account is open. A Business can delete its account at any time from Account in the dashboard or in the Bookr app. Its sign-in, business profile, booking page, requests, quotes, invoices, photos, and alert history are then deleted, and any subscription ends at once. If you signed in with Apple, deleting the account in the Bookr app also revokes Bookr’s access to your Apple ID. Copies in backups are removed on our providers’ regular backup cycle.
We keep billing records for as long as tax and accounting laws require. Records of card payments a Business took through Stripe or Square stay in its own Stripe or Square account. If a Business disconnects Square, or removes Bookr in Square, we delete what we read from its Square account, such as its name, locations, receipt links, and refunds, and keep only our record of each invoice payment. Abuse-prevention records are kept only as long as needed for that purpose. Session replays are deleted automatically after 30 days; other usage data is kept only while it helps us improve the Service. Usage data kept after an account is deleted is no longer linked to its email address or business details.
8. Security
We use encryption in transit, access controls that limit each Business to its own data, hashed verification codes, and providers with strong security programs. No system is perfectly secure, so we cannot guarantee absolute security. If you think your account has been compromised, contact us at support@bookr.page.
9. Your choices and rights
- Businesses can update their profile and alert preferences in the dashboard, and delete their account from Account in the dashboard or in the Bookr app. Reply STOP to any Bookr text to stop text alerts. To get a copy of your data, email support@bookr.page.
- Customers should contact the Business they sent a request to about their details. You can also email us, and we will pass your request to that Business and help it respond.
Depending on where you live — for example, in California or other US states with privacy laws, or in the European Economic Area or the United Kingdom — you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or limit certain uses. We will not discriminate against you for using these rights. To make a request, email support@bookr.page. We may need to confirm your identity first, and you may use an authorized agent where the law allows.
Where the GDPR applies, we rely on these legal bases: performing our contract with you, our legitimate interests in running and securing the Service, your consent (for text alerts), and legal obligations. You may also complain to your local data protection authority.
10. Children
Bookr is not directed to children under 16, and we do not knowingly collect their personal information. Business accounts are for people 18 and older. If you believe a child has given us information, contact us and we will delete it.
11. Where information is processed
Bookr is based in the United States, and information is processed and stored in the United States and other countries where our providers operate. Where the law requires, we use appropriate safeguards for international transfers.
12. Changes to this policy
We may update this policy from time to time. If a change is material, we will tell account holders by email or in the dashboard before it takes effect. The date at the top shows when this policy last changed.
13. Contact
Questions or requests about privacy? Email support@bookr.page or write to LoadHunter Inc., 2810 N Church St PMB 388779, Wilmington, Delaware 19802-4447, United States. See also our Terms of Use.