Privacy Policy

Introduction

Bokvyx ("we", "us", "our") is a SaaS platform that helps restaurants manage bookings and guest flow. This privacy policy explains how we collect, use, and protect personal data from our business customers — restaurant owners, operators, and their authorised staff.

Data We Collect

When you register for and use Bokvyx, we collect the following data:

• Business and owner name — to set up and identify your account
• Email address — for account access, service communications, and billing
• Phone number — for account verification and support
• Restaurant details — name, address, opening hours, table layout, and other operational information you provide
• Staff accounts — names and email addresses of team members you invite to your account
• Billing data — invoicing details and deposit payment history (card details are handled by Stripe)
• Usage analytics — how you interact with the platform, to help us improve the product
• Cookies — for session management and user preferences
• Device information — device type, operating system, and app version when using the Bokvyx mobile app
• Push notification tokens — via Firebase Cloud Messaging (FCM), to deliver booking alerts and updates to your device

How We Use Your Data

We process your data for the following purposes:

• Providing and operating the Bokvyx platform for your restaurant
• Managing your account and invoicing
• Sending service-related communications such as updates, maintenance notices, and support responses
• Delivering push notifications about bookings and updates via Firebase Cloud Messaging
• Analysing usage patterns to improve and develop the product

Data Retention

Your data is retained for as long as your account is active. After account closure, we delete your data within 30 days unless a longer retention period is required by law. You may request earlier deletion by contacting us.

Who Has Access to Your Data

Your data may be accessed by:

• The Bokvyx team — support and engineering staff, for providing and maintaining the service
• Stripe — our payment processor, for handling deposit payments securely
• Firebase (Google) — for delivering push notifications to your mobile device

Third-Party Services

We use Stripe to process deposit payments. Your payment information is handled directly by Stripe and is subject to their privacy policy. We do not store your payment card details on our servers. We use Firebase Cloud Messaging (FCM), a service provided by Google, to send push notifications to your mobile device. Firebase may collect device identifiers and tokens necessary for notification delivery, subject to Google's privacy policy.

Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your personal data
• Right to data portability — receive your data in a structured, machine-readable format

You can export or delete your data from the Settings page in the app. Note: Bokvyx acts as a data processor for guest personal data collected through the booking widget. Your restaurant remains the data controller for that data and is responsible for its own GDPR compliance towards guests.

Data Security

We take the security of your data seriously. All personal data, including guest names, email addresses, and phone numbers, is encrypted at rest using AES-256-GCM encryption. Data in transit is protected by TLS/HTTPS. Access to production systems is restricted to authorised personnel.

Children's Privacy

Bokvyx is a business tool designed for restaurant operators and is not directed at children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or for legal, technical, or regulatory reasons. We will notify you of material changes at least 30 days in advance via email or in-app notice.

Contact

For questions about this privacy policy or to exercise your data rights, contact us at privacy@bokvyx.com.