Privacy Policy

1. Introduction

Bookr ("we," "us," or "our") operates the bookr.dev website and service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

We are committed to transparency and privacy. If you have questions about this policy, contact us at alex@bookr.dev.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, role (freelancer/client)
• Profile Information: Professional headline, bio, location, skills, portfolio links, avatar, banner image
• Business Information: Company name, website, rates, payment details, banking information
• Booking Information: Hold requests, bookings, availability blocks, project details
• Invoice Information: Line items, payment terms, client billing details
• Communication: Messages, notes, and other content you share through our platform

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, clicks, search queries
• Device Information: Browser type, operating system, IP address, device identifiers
• Cookies: Session cookies for authentication and preference storage (see Cookie Policy below)
• Analytics: We use PostHog and Vercel Analytics to understand platform usage (privacy-focused, can be opted out)

2.3 Third-Party Integrations

If you choose to connect third-party services (like Google Calendar), we collect:

• Google Calendar: Access tokens, calendar events (to sync bookings and check availability)
• OAuth Tokens: Securely encrypted and stored for authentication

You control what we sync and can disconnect at any time from your settings.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Bookr platform
• Process bookings, holds, and invoices
• Facilitate communication between freelancers and clients
• Send transactional emails (booking confirmations, invoice reminders, hold notifications)
• Sync your bookings with third-party calendars (if enabled)
• Detect and prevent fraud, abuse, or security issues
• Comply with legal obligations
• Analyze usage to improve features (anonymized data only)
• Respond to support requests

We do NOT: Sell your data, use it for advertising, share it with third-party marketers, or train AI models on your private information.

4. Information Sharing and Disclosure

4.1 With Your Consent

We share information between freelancers and clients when you create holds, bookings, or invoices. You control your profile visibility and what information is shared.

4.2 Service Providers

We use trusted third-party services:

• Supabase: Database and authentication (encrypted data storage)
• Vercel: Hosting and deployment
• Resend: Transactional email delivery
• PostHog: Privacy-focused analytics (opt-in only)
• Stripe: Payment processing (if you choose to use it)
• Google: Calendar sync (only if you enable it)

These providers have their own privacy policies and are bound by data protection agreements.

4.3 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect the safety of our users and the public.

4.4 Business Transfers

If Bookr is acquired or merged, your information may be transferred. We'll notify you before your information is subject to a different privacy policy.

5. Data Security

We take security seriously and implement industry-standard measures:

• All data transmitted over HTTPS (encrypted connections)
• Passwords hashed using bcrypt
• OAuth tokens encrypted at rest
• Database access restricted and audited
• Regular security updates and monitoring
• Row-level security policies in our database

While we strive to protect your data, no system is 100% secure. If we discover a breach, we'll notify affected users promptly.

6. Your Rights and Choices

You have the right to:

• Access: View all data we have about you
• Export: Download your data in a portable format
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Opt-out: Unsubscribe from marketing emails (we rarely send them)
• Portability: Take your data to another service

To exercise these rights, email alex@bookr.dev. We'll respond within 30 days.

7. Data Retention

We retain your data as long as your account is active or as needed to provide services. When you delete your account:

• Personal data is deleted within 30 days
• Some data may be retained for legal or accounting purposes (invoices, payments)
• Anonymized analytics data may be retained indefinitely
• Backups are purged within 90 days

8. Children's Privacy

Bookr is not intended for users under 18. We do not knowingly collect information from children. If you believe we have collected data from a minor, contact us immediately.

9. International Users

Bookr is operated in the United States. If you're accessing from outside the US, your information may be transferred to, stored, and processed in the US or other countries where our service providers operate.

We comply with applicable data protection laws, including GDPR for European users and CCPA for California residents.

10. Cookie Policy

We use cookies and similar tracking technologies to improve your experience on Bookr. This section explains what cookies we use and how you can control them.

10.1 What Are Cookies?

Cookies are small text files stored on your device that help us remember your preferences and understand how you use our platform. They enable essential features and improve your experience.

10.2 Types of Cookies We Use

10.3 Managing Your Cookie Preferences

You have full control over your cookie preferences:

• Cookie Banner: When you first visit Bookr, you'll see a cookie consent banner. You can accept all cookies, reject non-essential cookies, or customize your preferences.
• Browser Settings: Most browsers allow you to manage cookies through their settings. You can block cookies, delete existing cookies, or receive warnings before cookies are stored.
• Do Not Track: We respect the Do Not Track (DNT) browser setting and won't track analytics if you have DNT enabled.

10.4 Third-Party Cookies

We don't use third-party advertising cookies. The only third-party services that may set cookies are:

• Supabase: For authentication and session management
• PostHog: For analytics (only if you consent)
• Vercel: For hosting and performance monitoring

10.5 Cookie Retention

Session cookies are deleted when you close your browser. Persistent cookies remain until their expiration date or until you delete them. Your cookie preferences are stored locally and persist across sessions.

11. Third-Party Links

Our platform may contain links to external websites (like portfolio sites). We're not responsible for the privacy practices of those sites. Review their policies before sharing information.

12. Changes to This Policy

We may update this policy occasionally. If we make significant changes, we'll notify you via email or a prominent notice on the platform. Continued use after changes indicates acceptance.

Check this page periodically for updates. The "Last Updated" date at the top shows the most recent revision.

13. Contact Us

Questions, concerns, or requests about this Privacy Policy?