Privacy notice
DRAFT for CEO review. Not in effect. Bracketed items must be completed or confirmed before launch, and this box removed.
Last updated: 2026-10-28 (draft)
Who this notice covers
This notice covers BookingAI, the booking service at bookingai.pro. It applies to two groups: people who book a time on a BookingAI booking page ("bookers"), and professionals who create an account to run a calendar ("owners").
Where the service is offered
BookingAI is offered in the United States only. We do not offer the service to people outside the United States, and this notice is written for use in the United States.
Who is responsible for your information
BookingAI is operated by GCEXPERTS LLC, 300 Brushy Creek Rd, Ste 404, Cedar Park, TX 78613-3144.
What we collect
- From bookers: name, email address, mobile number, the time chosen, the booking status and the payment status.
- From owners: name, email address, a password (stored only as a salted hash, never as plain text), calendar rules, and the email addresses of staff they add.
- Payments: card details are entered on Stripe's checkout page. BookingAI does not store card numbers. We store the Stripe checkout reference and whether the payment was made.
- Browser storage: BookingAI does not load analytics, advertising or marketing cookies or tags. The owner sign-in token is kept in the browser's session storage for the length of the visit. It is not sent to any third party.
Why we use it
- To create and manage bookings, show the owner their bookings, and show the price for each time.
- To take payment for paid bookings through Stripe.
- To send booking confirmations, reminders and password-reset emails, once email sending is switched on.
- To keep the service secure and to answer support requests.
Who we share it with
- The owner of a calendar sees the bookings made on that calendar.
- Service providers that run the service for us, such as Stripe for payments and the email and hosting providers we use, receive only what they need to do that job.
- We do not sell personal information.
How long we keep it
- Booking records (name, email, mobile number, appointment time, notes and status): 24 months after the appointment date, then deleted.
- Email records (confirmations, reminders, reset emails): 90 days after they are created, then deleted.
- Password-reset links: valid for 60 minutes. A link is deleted as soon as it is used or has expired.
- Sign-in sessions: 30 days. An expired session is deleted.
- Application logs that contain personal information: 30 days, then deleted.
- Owner accounts and calendars: kept while the account is open. When an owner asks us to delete the account, we first give the owner an export of their calendars and bookings, then delete the account and its data within 30 days.
How to ask us to delete your information
Email [email protected] from the address you used to book or to sign up. Say that you want your information deleted. We will confirm receipt and delete the information within 30 days. We may keep a record where the law requires it, such as the record of a completed payment for tax purposes. We will tell you if we do.
You can use the same address to ask what information we hold about you, or to ask us to correct it.
Payments
Stripe processes card payments and its own privacy policy applies to the payment details you give Stripe. While BookingAI is in preview, payments are turned off and no money is taken.
Security
Passwords are stored as salted hashes. Once the service is live, it is served over HTTPS only.
Changes to this notice
We will post any change on this page and change the date at the top.