Skip to content
Bookesto

Legal

Privacy policy

Status — drafted, pending legal review · last updated

This is a draft published for review. It is not a binding agreement, and the operator's counsel has not approved it.

This document is not yet in force because Bookesto has no customers and no deployed service. What is stated below is our intended position, published early so that it can be read before there is anything to agree to. It will be replaced by a reviewed and dated document before the first account is created.

Intended position

Each line is what we intend the reviewed document to say. None of it is in force.

What we collect from visitors
Aggregate page analytics through self-hosted Umami. No cookies, no cross-site tracking, no personal identifiers
What we collect from the early-access list
Email address, and any optional company, team size and current tooling you provide
What we will collect from customers
Account data, booking data, conversation content and payment metadata
What we never collect
Card numbers. Stripe handles payment data and it does not reach our servers
Subprocessors
Listed in full at /legal/subprocessors
Retention
To be stated per data class in the reviewed document
Your rights
Access, correction, export and deletion. Email legal@bookesto.com
EU, EEA and UK
We are not accepting signups from these regions until an Article 27 representative, a DPA with standard contractual clauses, and EU-region hosting are in place

Automated assistants

Bookesto ships no customer-facing automated assistant today, on this website or in the product.

A customer-facing assistant will not be switched on until a commercial API runtime, a signed data-processing agreement and an approved budget cap all exist. That gate is written on the roadmap next to the capability, and until it clears there is no assistant to talk to and nothing about you being processed by one.

When one does ship, it will identify itself as automated in its first message, before any input is taken from you, and it will carry a persistent label in its header reading Automated assistant. That is the standard set by Article 50 of the EU Artificial Intelligence Act, in force , and it applies to us regardless of which regions we sell into.

The disclosure, in the words it will use

You are talking to an automated assistant, not a person. Ask for a human at any time and this conversation will be handed over.

We do not train models on customer data. There is no customer-facing model runtime at all today, and if one is ever approved, training on customer data will not be part of it.

Questions: legal@bookesto.com. Changes to any of these documents are published on the changelog before they take effect.