Privacy Policy

BookMyChat (“BookMyChat”, “we”, “us”, “our”) provides a WhatsApp-based appointment booking service for businesses such as salons, clinics, and spas. This policy explains what information we collect, how we use it, the legal responsibilities of the parties, and the choices you have. It applies to the businesses that subscribe to BookMyChat (“Businesses”) and to their customers who book through WhatsApp (“Customers”). By using the service you agree to this policy.

Roles and responsibilities

For a Business’s own account, billing, and configuration data, BookMyChat is the data controller. For the personal data of Customers that a Business collects to run its bookings, the Business is the controller and BookMyChat acts solely as its processor, handling that data only on the Business’s instructions to provide the service. The Business is solely responsible for having a valid legal basis and all necessary consents to collect and process its Customers’ data (including any messaging or marketing consents required by applicable law), and for its own privacy notices to its Customers.

Information we collect

• Business account data: business name and type, owner name, email address, time zone, staff names, services, and working hours you configure.
• Customer booking data: the Customer’s WhatsApp phone number, display name, the messages exchanged with the booking assistant, chosen service, staff, appointment times, and any answers to booking questions the Business has set up.
• WhatsApp / Meta data: when a Business connects its WhatsApp number, we receive from Meta the WhatsApp Business Account identifier and phone number identifier needed to send and receive messages on the Business’s behalf. We access message content only to operate the booking conversation the Customer has initiated.
• Payment data: subscription payments are handled by a third-party payment processor. We store only limited references such as a customer reference, subscription reference, plan, and payment status — we do not collect or store card numbers, UPI PINs, bank credentials, or other full payment details.
• Technical data: log and usage data (for example timestamps, device/browser information, and error logs) generated when you use the service.

How we use information

• To create and manage bookings, reschedules, cancellations, and reminders.
• To send WhatsApp messages required to complete a booking the Customer initiated.
• To provide the Business dashboard, calendar, and account management.
• To process subscription billing and to detect, prevent, and address fraud or abuse.
• To operate, secure, maintain, and improve the service and provide support.
• To comply with law and enforce our terms.

We do not sell personal data, and we do not use WhatsApp message content for advertising.

The WhatsApp Business Platform

BookMyChat operates on the WhatsApp Business Platform provided by Meta. Our receipt and use of information through the WhatsApp Business API complies with Meta’s Platform Terms and Developer Policies. Messages are exchanged with Customers within the context of a booking the Customer starts, and messages sent outside WhatsApp’s 24-hour service window use approved message templates. Meta’s own handling of data is governed by Meta’s privacy policy, over which we have no control.

Service providers

We use trusted third-party service providers to operate BookMyChat, in the following categories:

• the WhatsApp Business Platform, to send and receive WhatsApp messages;
• payment processing providers, to process subscription payments;
• cloud hosting, infrastructure, and database providers, to host and run the application and store data securely.

These providers process data only to perform services for us, under contractual confidentiality and data-protection obligations. We may also disclose information where required by law, to enforce our agreements, or to protect our rights, users, or the public.

International transfers

Your information may be processed or stored on infrastructure located in countries other than your own. Where it is, we take reasonable steps to ensure an appropriate level of protection consistent with this policy and applicable law.

Data retention

We retain Business account data for as long as the account is active. Customer booking data is retained while it is needed to provide the service to the Business and is deleted or anonymised within a reasonable period after an account is closed, unless we are required or permitted to keep it longer for legal, tax, accounting, or dispute-resolution purposes.

Your rights and data deletion

Subject to applicable law, you may request access to, correction of, export of, or deletion of personal data we hold about you. A Business can manage most of its data directly in the dashboard. To request deletion of an account or of specific Customer data — including data obtained through WhatsApp — email support@bookmychat.com and we will action valid requests within a reasonable period, typically within 30 days. Where we act as a processor for a Business, we will refer Customer requests to the relevant Business.

Security

We use reasonable technical and organisational measures to protect information, including encryption in transit, restricted access, and isolation of each Business’s data from others. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Children

BookMyChat is a business tool and is not directed to children. We do not knowingly collect personal data from children under 13 (or the minimum age required by local law).

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notifying you. Continued use of the service after changes take effect constitutes acceptance.

Contact

Questions about this policy or your data? Email support@bookmychat.com.