1. Introduction & Ownership
This Privacy Policy describes how BooKi ("BooKi", "Application", "we", "us", or "our"), an online appointment scheduling and business management platform developed and operated by Ki Software (a division of Ki Business Solutions, website: kibusiness.co), collects, accesses, uses, stores, protects, and discloses information when you access or use our services via our website (https://booki.kibusiness.co) and associated software endpoints (https://bookiapp.kibusiness.co).
We are firmly committed to protecting your privacy, honoring your trust, and complying with all applicable international data protection standards, including the EU General Data Protection Regulation (GDPR), the Turkish Law on the Protection of Personal Data (KVKK No. 6698), and Google's API Services User Data Policy.
2. Information We Collect
We collect personal information that you provide to us directly, information generated automatically through platform usage, and information accessed via third-party integrations when you explicitly authorize them.
A. Information You Provide Directly
- Account Registration & Profile: Full name, business name, phone number, email address, physical address, and password credentials.
- Appointment & Customer Data: Customer contact details, scheduled service dates, service durations, staff assignments, notes, and pricing information entered to manage reservations.
- Customer Inquiries & Support: Communications and records submitted when requesting technical support or billing assistance.
B. Automatically Collected Technical Data
- Log details, browser type, device information, IP address, request timestamps, and session identifiers collected strictly to maintain security, prevent abuse, and guarantee system performance.
3. Google User Data Accessed, Used & Disclosed
BooKi provides seamless integration with Google APIs (notably Google Calendar) to allow business owners, staff providers, and customers to coordinate schedules without conflicts. When you connect your Google Account to BooKi, our application requests access to specific Google user data under your explicit consent.
🛡️ Google API Services User Data Policy Compliance
BooKi's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
| Google OAuth Scope | Google User Data Accessed | Purpose & Specific Use |
|---|---|---|
openid.../auth/userinfo.email
|
Google User ID, primary email address, and profile name. | To authenticate your identity, securely sign you into your BooKi account, and verify ownership of the connected Google Account. |
.../auth/calendar
|
Calendar titles, event summaries, event descriptions, start and end dates/times, attendee status, and calendar IDs. |
Two-way appointment synchronization: 1. Inserting confirmed BooKi appointments directly into your selected Google Calendar. 2. Reading existing busy slots on your Google Calendar to block unavailable times in BooKi, preventing double-bookings. |
.../auth/contacts(Optional Admin Add-on) |
Customer names, phone numbers, and email addresses. | Optionally synchronizing client contacts into the provider's directory to streamline appointment reminders, strictly when explicitly enabled by the administrator. |
.../auth/spreadsheets.../auth/drive.file(Optional Admin Add-on) |
Spreadsheet content and user-designated files created or selected by BooKi. | Exporting appointment registries and revenue reports into a Google Sheet chosen by the user for internal business bookkeeping. |
.../auth/tasks(Optional Admin Add-on) |
Task titles, due dates, and task lists. | Creating actionable reminders on the provider's Google Tasks list for upcoming appointments. |
4. Prohibited Uses of Google User Data
In strict accordance with Google Cloud verification and OAuth data policies, we explicitly guarantee and disclose that:
- No Sale of Data: We will never sell, lease, trade, or rent Google user data or customer information to third parties, data brokers, or advertisers under any circumstances.
- No Targeted or Interest-Based Advertising: We do not use or transfer Google user data for serving advertisements, including personalized, re-targeted, or interest-based advertising.
- No Creditworthiness or Lending Determinations: Google user data is never accessed or used to determine creditworthiness or for credit/lending scoring.
- Strict Feature Limitation: Our use of Google user data is strictly limited to providing and improving the user-facing appointment booking and calendar synchronization functionality of BooKi.
🤖 Mandatory AI / Machine Learning Affirmation
Google Workspace APIs and Google user data are NEVER used to develop, improve, or train generalized, non-personalized artificial intelligence (AI) and/or machine learning (ML) models.
5. Data Sharing, Transfer & Disclosure
We do not transfer or disclose your Google user data to third parties for purposes other than the ones explicitly provided in this policy. We may only disclose data in the following strictly limited situations:
- Authorized Service Providers: Secure cloud hosting, database, and infrastructure providers who process data strictly on our behalf under binding confidentiality agreements and ISO 27001 / SOC 2 certifications.
- Legal Compliance: When strictly required to comply with a valid court order, subpoena, or applicable statutory obligation.
6. Data Security & Protection Mechanisms
We implement comprehensive technical and organizational safeguards to ensure the confidentiality, integrity, and availability of Google user data:
- Encryption in Transit: All communications between your browser, our application, and Google API servers are encrypted using modern Transport Layer Security (TLS 1.3 / HTTPS).
- Encryption at Rest: All stored OAuth credentials, access tokens, refresh tokens, and personally identifiable information (PII) are encrypted at rest using AES-256-GCM (Galois/Counter Mode) with cryptographic key separation.
- Cryptographic Verification: Field-level indexing uses HMAC-SHA256 to permit exact search without exposing plain-text keys or raw PII.
- Access Control: Strict Role-Based Access Control (RBAC) ensures only authorized account owners can view their respective appointment data.
7. Data Retention & Right to Deletion
We store Google user data only for the period necessary to provide the services requested, or until you choose to disconnect the integration or close your account.
How to Disconnect Google Integration & Delete Data
- From the BooKi Application: Navigate to Settings > Integrations > Google Calendar and click "Disconnect". This action immediately and permanently purges your stored OAuth tokens and ceases all calendar synchronization.
- From Google Account Settings: You can revoke BooKi's access at any time via your Google Account Permissions portal at https://myaccount.google.com/permissions.
- Right to Erasure (Complete Account Deletion): You can request full erasure of your account, appointments, and all associated personal data by visiting our automated privacy portal or emailing our data protection officer at [email protected]. We fulfill all valid deletion requests within 30 days.
8. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data handling practices, please contact us:
Ki Software / Ki Business Solutions
Address: Çekirge Mh. Süleyman Sk. No 29 Osmangazi / Bursa, Türkiye
Website: https://kibusiness.co
App Website: https://booki.kibusiness.co
Privacy Inquiries: [email protected]
Technical Support: [email protected]