Privacy Policy

Last updated: September 7, 2026
Effective date: September 7, 2026

This Privacy Policy explains how Bookazoid (“Bookazoid”, “we”, “us”, or “our”) collects, uses, discloses, stores, and protects personal information when you visit our website, sign up for early access, create or use a Bookazoid account, communicate with us, or otherwise interact with our services.

This Privacy Policy applies to the Bookazoid marketing website, signup and onboarding flows, the Bookazoid web application, customer support and communications, and related services that link to this Policy.

1. Who we are

Bookazoid is operated by:

2. Our role when processing personal information

2.1 Information we process for our own purposes

We generally act as a controller, business, or equivalent role under applicable privacy law when we process personal information for our own purposes, including when we:

  • operate the Bookazoid website and signup flows;
  • create and manage Bookazoid user accounts;
  • communicate with users, prospective customers, and customers;
  • provide onboarding and support;
  • secure, maintain, analyze, and improve the Service;
  • measure website and advertising performance where permitted; and
  • comply with legal, accounting, security, and administrative obligations.

2.2 Customer Data and Guest Data

Bookazoid is a business-to-business property management system. Customers use the Service to manage properties, bookings, guests, invoices, taxes, fees, housekeeping, owner reporting, operational records, and related workflows.

When a Customer determines what personal information is entered into Bookazoid and why it is processed, the Customer is generally the controller and Bookazoid acts as the Customer’s processor, service provider, or equivalent role.

This may include personal information relating to guests, occupants, payers, property owners, vendors, Customer staff, and other people whose information is entered into the Service by or on behalf of a Customer.

If you are a guest or another individual whose information has been entered into Bookazoid by one of our Customers, please contact that Customer first regarding your privacy rights. We will assist the Customer where required by applicable law and our Data Processing Addendum.

3. Information we collect

3.1 Information you provide directly

We may collect information you provide when you sign up, create an account, request support, communicate with us, or otherwise use Bookazoid. This may include:

  • name and business contact details;
  • email address and phone number, if provided;
  • company, property, or organization name;
  • job title, role, or business function;
  • country, region, or business location;
  • account and authentication information;
  • information received from a third-party authentication provider when you choose to use it;
  • communication preferences;
  • support requests, feedback, and correspondence; and
  • other information you voluntarily provide.

3.2 Account and application information

When you use the Bookazoid application, we may process account and workspace information, user roles and permissions, login and session data, audit records, configuration settings, diagnostic information, and other data needed to operate and secure the Service.

3.3 Sign in with Google

If you choose to create or access a Bookazoid account using Google authentication, Google authenticates your Google account and provides Bookazoid with information permitted by the authentication request and your Google settings. Depending on the scopes used, this may include a Google account identifier, email address, email-verification status, name, and profile image.

We use this information to authenticate you, create or link your Bookazoid account, maintain account security, and provide the Service. We do not receive your Google password.

Your use of Google authentication is also subject to Google’s own terms and privacy practices. You may manage your Google account and third-party connections through Google.

3.4 Customer Data

Customers may submit, create, import, store, or generate data in Bookazoid, including:

  • guest names and contact details;
  • booking, stay, occupancy, and payer information;
  • property, room type, and unit information;
  • invoices, charges, fees, taxes, and related financial records;
  • pricing, cancellation, and operational policies;
  • housekeeping, maintenance, and operational records;
  • owner, payee, vendor, and reporting information;
  • notes, comments, audit records, and internal operational data;
  • calendar, integration, webhook, import, and export data; and
  • documents or templates created or uploaded by Customers.

Customers are responsible for ensuring that they have a lawful basis, appropriate notices, permissions, and authority to process Customer Data through Bookazoid.

3.5 Payment information

Bookazoid does not intend to store full payment card numbers on its own application servers. If subscription billing, online payments, or payment integrations are introduced or enabled, payment information may be processed by third-party payment providers under their own terms and privacy notices.

3.6 Technical and device information

When you visit our website or use the Service, we may automatically collect technical information such as:

  • IP address;
  • browser and device type;
  • operating system and language settings;
  • approximate location derived from IP address;
  • referring page or campaign information;
  • pages or features accessed;
  • dates and times of access;
  • session and security identifiers;
  • cookie or similar identifiers where permitted;
  • error, performance, and diagnostic data; and
  • security and audit events.

3.7 Cookies and similar technologies

We use cookies and similar technologies for authentication, security, preferences, analytics, and advertising measurement where enabled and permitted. Non-essential technologies are subject to consent where required by law.

For more information, see our Cookie Policy.

4. How we use personal information

We may use personal information to:

  • provide, maintain, and secure Bookazoid;
  • create and administer accounts and workspaces;
  • authenticate users and manage permissions;
  • process Customer instructions and Customer Data;
  • provide onboarding, support, and service communications;
  • manage early access and beta participation;
  • understand product usage and improve usability, reliability, and performance;
  • detect abuse, fraud, unauthorized access, and security incidents;
  • maintain audit and operational records;
  • measure website traffic and advertising conversions where permitted;
  • send relevant marketing communications where permitted;
  • comply with legal obligations and lawful requests; and
  • establish, exercise, or defend legal claims and enforce our agreements.

5. Legal bases for processing

Where the EU GDPR, UK GDPR, or similar laws apply, we rely on one or more lawful bases depending on the activity:

Purpose Typical legal basis
Providing and administering the Service Contract; legitimate interests
Authentication, security, and fraud prevention Contract; legitimate interests; legal obligation where applicable
Signup, onboarding, and pre-contract communications Steps at your request before entering a contract; legitimate interests; consent where required
Customer support Contract; legitimate interests
Product improvement and diagnostics Legitimate interests; consent where required for device storage or access
Marketing communications Consent or legitimate interests, depending on applicable law and context
Analytics and advertising cookies Consent where required
Legal and compliance activities Legal obligation; legitimate interests

Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect processing that occurred before consent was withdrawn.

6. How we share personal information

We do not sell personal information for money.

We may disclose personal information to:

  • hosting, infrastructure, database, storage, backup, and security providers;
  • transactional email providers, including Brevo, where needed to send Service-related messages;
  • third-party authentication providers, including Google, when a User chooses that sign-in method;
  • support, monitoring, analytics, and advertising providers where applicable;
  • authentication and integration providers chosen or used by Customers;
  • professional advisers such as lawyers, accountants, and auditors;
  • authorities or other recipients where disclosure is required or permitted by law;
  • parties involved in a merger, acquisition, financing, restructuring, or sale of all or part of our business; and
  • third parties selected by a Customer through integrations, exports, webhooks, calendar feeds, or similar Customer-controlled functionality.

When we act as a processor of Customer Personal Data, subprocessors are engaged in accordance with our Data Processing Addendum. Our current list is available at Subprocessors.

7. Hosting and international data transfers

Bookazoid is operated by Metalprotekt LLC, a company established in Belarus. Our primary production hosting infrastructure is provided by DigitalOcean and is located in the United States. Customer Data and other Service data may therefore be stored and processed in the United States. Authorized Bookazoid personnel may access the Service and Customer Data from Belarus when reasonably necessary to operate, support, secure, or maintain the Service.

Our service providers may also process data in other countries in accordance with their services, subprocessors, and contractual arrangements.

Where applicable data protection law restricts international transfers, we use appropriate transfer mechanisms. These may include the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or International Data Transfer Agreement, adequacy or data-privacy-framework mechanisms where legally available, and other lawful safeguards.

For Customer Personal Data processed by Bookazoid as a processor, international transfer terms are addressed in our Data Processing Addendum.

DigitalOcean, LLC acts as a hosting subprocessor for Bookazoid. DigitalOcean publishes its own Data Processing Agreement and subprocessor information and, where applicable, relies on recognized transfer mechanisms for international data transfers.

We use Brevo (operated by Sendinblue SAS or the applicable Brevo contracting entity) to send transactional and Service-related email. Brevo may process recipient email addresses, recipient names where supplied, email content, delivery metadata, and related message logs. Brevo states that the servers used to process and store its databases are located within the European Union.

If you choose Sign in with Google, authentication is performed through Google’s identity services. Google processes information in accordance with its own privacy practices and, after successful authentication, provides Bookazoid with the account information authorized for the sign-in flow.

8. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, to provide the Service, to meet contractual obligations, or to comply with applicable law.

In general:

  • account information is retained while an account or business relationship remains active and for a reasonable period afterwards where needed for legal, security, or administrative purposes;
  • Customer Data is retained in accordance with the Customer’s use of the Service, the applicable agreement, backup cycles, and legal requirements;
  • security, diagnostic, and audit records may be retained for a period appropriate to their security and operational purpose;
  • support and business correspondence may be retained for support, recordkeeping, dispute, and security purposes; and
  • marketing contact information is retained until you unsubscribe, object, or we no longer have a lawful business reason to retain it.

When information is no longer needed, we delete or anonymize it, subject to legal obligations and limited retention in backups until those backups are overwritten or deleted in the ordinary course.

9. Security

We use reasonable technical and organizational measures designed to protect personal information and Customer Data from unauthorized access, loss, alteration, misuse, or disclosure.

Depending on the relevant system, these measures may include authentication controls, password hashing, role-based access controls, encrypted transport, logging and audit trails, infrastructure monitoring, backups, access restrictions, and security review procedures.

No online service can guarantee absolute security. Customers are also responsible for using appropriate passwords, access controls, user permissions, devices, and internal procedures.

10. Your privacy rights

Depending on your location and applicable law, you may have rights to:

  • request access to personal information;
  • request correction of inaccurate information;
  • request deletion of information;
  • request restriction of processing;
  • object to certain processing;
  • withdraw consent;
  • request portability where applicable;
  • opt out of marketing communications;
  • opt out of certain targeted advertising, sale, or sharing activities where applicable; and
  • lodge a complaint with a competent data protection authority.

To exercise rights relating to information Bookazoid controls directly, contact mail@bookazoid.com. We may need to verify your identity.

If your request concerns Customer Data controlled by a Bookazoid Customer, please contact that Customer. We will assist the Customer as required by applicable law and our DPA.

11. United States privacy rights

Residents of certain U.S. states may have additional privacy rights where the relevant state law applies to Bookazoid. These may include rights to access, correct, delete, or obtain a copy of personal information, and to opt out of certain targeted advertising, sale, or sharing activities.

We do not sell personal information for money. If our use of advertising technologies constitutes “sale”, “sharing”, or “targeted advertising” under an applicable law, eligible users may exercise the relevant opt-out through our cookie controls or by contacting us.

12. European Economic Area, United Kingdom, and Switzerland

If EU, UK, or Swiss data protection law applies, you may have the rights described above and the right to lodge a complaint with your local supervisory authority.

When Bookazoid processes Customer Personal Data as a processor, the processing is governed by our Data Processing Addendum, including applicable international transfer provisions.

13. Marketing communications

We may send business users and prospective customers information about early access, onboarding, product updates, launch information, feature announcements, or offers where permitted by applicable law.

You can unsubscribe from marketing emails using the unsubscribe mechanism in the message or by contacting us. We may still send non-marketing messages relating to accounts, security, transactions, or the operation of the Service.

14. Analytics, advertising, and cookies

We may use analytics and advertising tools on the public website and signup or marketing flows to understand traffic, measure campaign performance, and improve our marketing. Where consent is required, these technologies are not used until the required consent has been obtained.

We do not intentionally use Guest Data, booking contents, invoice contents, or other Customer Data from inside the signed-in Bookazoid application for advertising targeting.

See our Cookie Policy for more information.

15. Children

Bookazoid is a business-to-business service and is not intended for use by children as account holders. We do not knowingly invite children to create Bookazoid accounts.

Customer Data may contain information about minors where an accommodation business lawfully needs that information for a booking or stay. In that context, Bookazoid processes the information on behalf of the Customer.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our business, service providers, or applicable law. The “Last updated” date shows when the Policy was most recently revised.

If a change materially affects how we process personal information, we may provide additional notice where appropriate or required.

17. Contact us

For privacy questions or requests, contact:

Metalprotekt LLC
220074 ul. Kharkovskaya 58, office 1N
Minsk, Belarus
Email: mail@bookazoid.com