Privacy Policy
LAST UPDATED: September 5, 2026
11. Who we are
Bookora is an online booking platform for local service businesses: it generates a business website from information the owner provides — their public Instagram profile, or business details and images they enter themselves — using AI services, and provides online appointment scheduling and client management.
During the beta phase, Bookora is provided as a free testing service. Some features may change or be removed before the official launch.
Once the company is formally established, this section will be updated accordingly.
22. What data we collect
We collect only the data necessary to provide the service.
a) Data you provide directly
- Email address (for authentication)
- Name (if provided)
- Business information (optional, e.g. business name, description) and any logo or photos you upload for your website
- Billing information (only after official launch)
b) Automatically collected data
- IP address
- Browser and device information
- Usage data (pages visited, actions taken)
- Generated website content and configurations
c) Third-party service providers
We use Supabase for authentication and secure data storage (hosted in the EU), Vercel for hosting, Resend for transactional email, Sentry (EU region) for error monitoring, Microsoft (Clarity) for anonymous usage statistics on our own site with your consent, Stripe for subscription billing, Upstash for abuse prevention, and — for AI website generation and translations — OpenAI, plus Apify only when you provide an Instagram handle. Each provider processes data according to its own privacy policy and our agreements with it (see section 9 on transfers).
33. Purpose of data processing
We process your data to:
- Provide and operate the Bookora platform
- Generate and host preview and published websites
- Allow login and account management
- Improve product performance and user experience
- Communicate important service-related messages
44. Legal basis (GDPR)
Under the General Data Protection Regulation (GDPR), processing is based on:
55. Cookies and tracking
Bookora may use:
- Essential cookies (authentication, session management)
- Error tracking and session replay (Sentry) and anonymous usage statistics (Microsoft Clarity) — only with your consent
- Advertising tracking (Meta Pixel) for campaign measurement and optimisation — only with your consent
You may disable cookies in your browser, but some features may not function correctly.
66. Data storage & security
- Data is stored on secure cloud infrastructure
- Access is restricted to authorized personnel
- Reasonable technical and organizational measures are applied to protect data
77. Data retention
- Preview websites are retained for a limited time
- Published websites remain available until deleted by the user
- Account data is retained until you delete your account — self-service deletion is available in your account settings
You may request deletion at any time; automated retention limits also apply to booking history and logs.
88. Your rights (GDPR)
You have the right to:
Requests can be sent to: support@bookora.gr
99. Data transfers
Your data is primarily stored and processed within the EU. Some of our service providers (including hosting, email delivery and AI providers) process certain data in the United States: where a provider is certified under the EU-U.S. Data Privacy Framework we rely on that certification, and we are putting additional safeguards (standard contractual clauses and EU data residency) in place with our AI provider.
1010. Changes to this policy
This Privacy Policy may be updated, especially when Bookora transitions from beta to official release.