Privacy Policy

BookApp Privacy Policy (v1) This policy is written to comply with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and describes how BookApp collects, uses, and protects your personal data. 1. Data we collect Phone number, email, name, profile photo, saved addresses, and approximate location (only if you grant location permission). Merchants additionally provide business details, staff information, and photos of their premises/work. 2. Why we collect it To create your account, process bookings, show nearby services, send booking-related notifications, and — only with your separate opt-in — send promotional messages. 3. How we protect it Personal data is encrypted at rest (database-level encryption plus column-level encryption for phone and email). We never log your phone number or email address in plain text in our operational systems. Payment card details are never received or stored by BookApp — Razorpay, our PCI-DSS-compliant payment partner, handles all card/UPI data directly. 4. Your rights - **Access & correction**: view and edit your profile at any time in the app. - **Export**: request a copy of your data at Profile → Download my data. Delivered as a downloadable file within 7 days. - **Erasure**: request account deletion at Profile → Delete account. Your account enters a 30-day grace period (during which logging back in restores it), after which your personal data is irreversibly anonymized. Your booking history is retained in anonymized form for the Merchant's own records and platform statistics, with no data that identifies you. 5. Data sharing We share the minimum booking details necessary (name, phone, booking time) with the Merchant you book with, so they can serve you. We do not sell personal data to third parties. 6. Data retention Operational data (OTP codes, idempotency keys) is purged automatically within 24 hours of use. Audit logs of account/security-relevant events are retained for 2 years for security and compliance purposes, then deleted. 7. Grievance contact Privacy questions or a Data Protection grievance can be raised through the in-app Support section. This is v1 draft copy pending legal counsel review before general availability.