Bookisia Privacy Notice

Implementation draft — last updated September 16, 2026.

Bookisia helps organizations manage websites, services, staff, customers, bookings, payments, communications, and connected providers. This notice explains the information handled by the Bookisia platform and the choices available to you.

Who is responsible

Bookisia is a trademark of OOPATECH INC., a federally incorporated company registered in Quebec. OOPATECH INC. is the legal party responsible for operating Bookisia and for its privacy obligations. The organization offering you a service through Bookisia normally decides why it uses your booking, customer, and appointment information. OOPATECH INC. operates the platform for that organization and also handles information for its own account, security, support, and billing purposes. Contact the organization first about a booking or its business records; contact us about the platform or a Bookisia account.

Information we handle

Account, identity, contact, business, staff, and tenant information.
Customer, lead, guest, service, booking, appointment, intake, and support information you or the organization provide.
Website content, configuration, and uploaded or generated media.
Payment status and provider references. Payment-card details are handled by the configured payment provider.
Google, Zoom, Stripe, email, and webhook connection metadata when an organization enables those services.
Security, audit, device/request, error, and performance information needed to protect and operate the platform.

Why we use it

We use information to provide and secure requested services, operate accounts and bookings, complete connected-provider operations, process and reconcile payments, deliver support, prevent abuse, meet documented obligations, and improve reliability. We do not treat use of the website as blanket consent to unrelated marketing.

Service providers and integrations

Depending on the features selected, information may be handled by infrastructure, object-storage, email, payment, calendar, video, security, error-monitoring, and observability providers, including DigitalOcean, AWS, Stripe, Google, Zoom, Cloudflare, Grafana, and Sentry. An organization's own privacy notice may identify additional services it controls. Disconnecting an optional integration stops future access through that connection, subject to provider and legally required records.

Retention and deletion

We keep information only for the service, security, dispute, financial, recovery, or legal purpose that applies. Retention varies by record. Tenant exports expire after 7 days and their signed access links after 60 minutes. Deleted generated media has a 30-day quarantine. Operational logs currently follow a 14-day provider window. Backups expire under a separate recovery schedule and are not returned to ordinary use after a completed erasure. Legal holds and required financial or professional records override automated deletion.

Your choices and requests

You may ask about access, correction, export, deletion, or withdrawal of an optional consent. We may need to verify your identity and authority and may refer a booking-record request to the organization that controls it. Legal exceptions, retention duties, disputes, shared records, and legal holds can affect the response. Optional marketing messages must provide a way to unsubscribe.

Security and support

We use access controls, encryption, guarded data-lifecycle operations, monitoring, and tested recovery processes appropriate to the platform. No system can guarantee absolute security. Never email passwords, one-time codes, API or OAuth tokens, complete payment-card numbers, or encryption keys.

Cookies, browser storage, and monitoring

Bookisia uses browser storage needed for account sessions, security, booking continuity, and language preferences. Google Analytics is disabled. Sentry receives scrubbed error information for security and reliability; default personal information, performance tracing, profiling, and session replay are disabled. We will update this notice and provide any required choice before enabling non-essential analytics or advertising storage.

Children and sensitive professional records

Bookisia is a business platform and is not intentionally designed as a child-directed service. An organization using Bookisia remains responsible for determining whether it may collect information about minors or regulated professional/clinical records. Those uses require additional review and must not be enabled merely because a field can store the information.

Contact

Andrew Enughwure is the OOPATECH INC. privacy officer. Privacy questions and requests can be sent to privacy@oopatech.com. Bookisia product enquiries can be sent to info@bookisia.com, and product support can be sent to support@bookisia.com. OOPATECH INC. legal or business enquiries can be sent to info@oopatech.com. Include the product, organization, and account involved, but do not include secrets or unnecessary personal records.