Privacy Policy

Who we are

BookInt is operated by Allan IO. For anything in this policy, email allanboiebiaspunzalan@allan-io.dev.

Businesses that use BookInt (“customers”) decide what their assistant asks and what happens with the leads it collects. For website visitors who chat with a customer’s assistant, that customer is responsible for the data and we process it on their behalf.

What we collect

• Customer accounts: your name, email address, the business details you enter (services, FAQs, hours, branding), and the logo or photo you upload.
• Website visitors: the chat messages you send, and the details you choose to give: name, email, project description, budget and timeline. If you book, the meeting time.
• Technical data: a salted hash of your IP address (never the raw address) to limit abuse, and standard server logs.
• Google account data: described in the next section.

Google user data

When a customer connects Google Calendar, BookInt asks for these permissions and uses them only as follows:

• Email address (openid, email): to show which Google account is connected.
• Free/busy (calendar.freebusy): to see when the connected calendar is busy, so the assistant only offers open times. We receive busy time ranges only, never event titles, descriptions or attendees.
• Events (calendar.events): to create the meeting when a visitor books, and to move or delete that same meeting when they reschedule or cancel. BookInt does not read, change or delete any other event on your calendar.

Google tokens are stored encrypted (AES-256-GCM). Busy times are used at the moment of booking and are not stored. We do not sell Google user data, do not use it for advertising, and do not use it to train AI models. People never read it unless you ask us to for support, it is needed for security, or the law requires it.

BookInt’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar at any time from Settings → Calendar in BookInt, or from your Google account’s third-party access page. Disconnecting in BookInt revokes our access at Google and deletes the stored token.

How we use data

• To run the assistant: answer questions, qualify leads, offer times and book meetings.
• To send booking confirmations, reschedule and cancel links, and account emails such as invitations.
• To send a customer’s lead and booking events to the webhook they configure.
• To keep the service secure and fix problems.

Who processes it

We use these providers to run BookInt. Each receives only what it needs:

• Vercel: hosts the app.
• Supabase: stores the database (Tokyo region).
• Anthropic: generates the assistant’s replies from the conversation and the business’s details. Google Calendar data is never sent to it beyond the open times on offer.
• Vultr: hosts the server that relays AI requests and sends emails.
• Google: Calendar for bookings, and Gmail to send emails.

How long we keep it

Conversations, leads and bookings are kept while the customer’s account is active, so the business can follow up. A customer can ask us to delete them at any time. When an account is closed, its data is deleted within 30 days.

Your choices

You can ask to see, correct or delete your data by emailing allanboiebiaspunzalan@allan-io.dev. If you chatted with a business’s assistant, you can also contact that business directly.

Changes

If this policy changes in a meaningful way, we will update the date above and tell customers by email.