Privacy Policy

Okalyo is online booking software. Businesses (we call them shops) use it to take appointments, and their customers use it to book. This page explains what we collect, why, and what you can do about it. In short: we only use your information to run bookings, we never sell it, and we don't show ads.

What we collect

From customers who book. Your name and phone number, and anything else you choose to give: your email, notes for the shop, answers to the shop's booking questions and, for mobile car detailing, your vehicle and address. We also keep the booking itself: the service, time, price and status. You don't need an account to book.

From shop owners and their staff. Your email address and password (stored encrypted, never in plain text), your shop's details (name, link, phone, address, hours, services and prices), the names of your team, photos you upload for your page, and messages you send us. When paid plans start, payments are handled by Stripe; we never see or store card numbers.

Automatically. Our hosting providers keep standard server logs, such as IP addresses and browser type, to keep the service running and secure. We use cookies only to keep you signed in. We don't use advertising or tracking cookies.

How we use it

• To make, show and manage bookings, for the customer and for the shop they booked with.
• If you give your email when you book, to send you a booking confirmation and reminders before your appointment, at the times your shop chose. These are only about your booking, never marketing.
• To run shop accounts: signing in, settings, staff and billing.
• To help when someone contacts us, and to tell shop owners about changes to Okalyo.
• To keep Okalyo secure, for example by limiting spam bookings and blocking misuse.

We don't sell personal information, share it for advertising, or use it to build profiles of you.

Who can see it

• The shop you book with sees your booking and the details you entered, so they can serve you. Each shop is responsible for how it uses its customers' information. Shops can only see their own bookings, never another shop's.
• Companies that run Okalyo for us: Supabase (our database and sign-in), Vercel (our hosting), Resend (the confirmation and reminder emails) and, once paid plans start, Stripe (payments). They may only use the information to provide their service to us.
• Authorities, only if the law requires it.

Health and sensitive information

Okalyo isn't built for medical records. Please don't put health details, government ID numbers or payment card numbers in booking notes or messages. Clinics using Okalyo shouldn't ask for them.

How long we keep it

We keep shop accounts and their booking history while the account is open, so owners can see past appointments. When an owner asks us to delete their account, we delete it along with the shop, its team, services, hours, bookings and the photos it uploaded.

Keeping it safe

Everything is sent over encrypted connections. Every shop's data is locked to that shop by the database itself, and owners can turn on two-factor sign-in. No system is perfectly secure, but we work to protect your information and will tell affected people if something goes wrong.

Your choices

• Customers: you can cancel a booking from its booking link. To see, correct or delete your information, ask the shop you booked with. They control your booking, and we'll help them.
• Shop owners: you can edit your shop and team in Settings at any time, and ask us to delete your account from the Messages page in your dashboard.

Depending on where you live, you may have more rights over your information. We'll honor them.

Children

Okalyo is for businesses and adults booking appointments. We don't knowingly collect information from children under 13. If a parent books for a child, the parent's details are used.

Changes

If we change this policy, we'll update the date at the top, and tell shop owners on their dashboard about anything important.

Contact

Shop owners can message us from the Messages page in their dashboard. Customers can reach us through the shop they booked with.