Privacy Policy

Who we are

Booknexo (“we”, “us”) is online booking software operated by TouchDesigns, based in Malta, at booknexo.com and its shop subdomains. Contact us about anything on this page at hello@booknexo.com.

For the personal data you give us directly — your account details and your billing contact — TouchDesigns is the data controller. For the customer data inside your shop (your clients’ names, contact details, appointments and notes) you are the controller and we act as your processor: we hold and process it so the software works, and we act on your instructions about it.

Data we process

Depending on how you use Booknexo, we may process:

• Account details for shop owners and staff (name, email, role)
• Business profile data (shop name, address, branding, services)
• Customer booking details (name, email, phone, appointment times, notes)
• Payment-related identifiers when Stripe or other processors are connected
• Technical logs needed to operate and secure the service

Why we process data

To provide booking, reminders, shop dashboards, marketplace listings (when enabled), billing of subscriptions, support, fraud prevention, and product improvement. Shop owners act as controllers for their customer booking data; Booknexo processes that data to deliver the service.

Sharing

We use infrastructure and service providers (for example hosting, email/SMS delivery, analytics, and payment processors) strictly to run Booknexo. Analytics is Google Tag Manager and Google Analytics, which means some data is processed by Google in the United States. We do not sell personal data or rent customer lists to third-party marketplaces.

Cookies

Some cookies are strictly necessary and are always set: they keep you signed in and keep your session secure. These cannot be turned off without breaking the product.

Analytics cookies are optional and are only set if you accept them. We use Google Analytics and Google Tag Manager, which tell us which pages people find useful. You are asked before any of it loads, and if you decline, no Google script runs at all.

Analytics run on booknexo.com only — our own marketing and signup pages. They are not loaded on a shop's public booking page, on a shop's own domain, or anywhere inside the dashboard. If you book an appointment with a business that uses Booknexo, we do not track you on their behalf.

To change your mind at any time, use the Cookie choices link in the footer of any page. Your answer is kept in your own browser under booknexo:cookie-consent and is never sent to us. What we load is the Google Tag Manager container GTM-PRC88WDK and the Google Analytics property G-SJ47LJDEFP, which sets the _ga cookies. The strictly necessary cookies are Supabase sign-in cookies, set only once you sign in or verify your email.

Retention & security

We retain data while accounts are active and as needed for legal obligations. We apply access controls, encryption in transit, and separation between shops (database-level boundaries). No method of transmission is 100% secure; report concerns to hello@booknexo.com.

Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or object to certain processing. Where we rely on your consent — as we do for analytics cookies — you can withdraw it at any time, and doing so does not affect anything done before you withdrew it. Shop customers should contact the shop they booked with for booking-specific requests; account holders can contact us directly.

Changes

We may update this policy as the product evolves. Material changes will be reflected on this page with an updated date.