← Back to Bober

Privacy Policy

Last updated: April 14, 2026

1. Introduction

Bober ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our platform and services.

2. Data We Collect

Account Data

When you register, we collect your name, email address, phone number, and business information (salon name, address, branch details).

Client Data

You may store your clients' names, phone numbers, visit history, and service preferences within the platform. You are the data controller for this information.

Usage Data

We automatically collect device information, IP address, browser type, pages visited, and feature usage to improve the Service.

Payment Data

Payment processing is handled by third-party providers (e.g., Stripe). We do not store your full credit card number. We receive only transaction confirmation and the last four digits of your card.

3. How We Use Your Data

  • To provide, maintain, and improve the Service
  • To process payments and manage subscriptions
  • To send transactional communications (booking confirmations, reminders)
  • To provide customer support
  • To detect and prevent fraud or abuse
  • To comply with legal obligations

4. Data Sharing

We do not sell your personal data. We may share data with:

  • Service providers — hosting, payment processing, SMS delivery, analytics (under data processing agreements)
  • Legal authorities — when required by law or to protect our rights

5. Data Storage & Security

Your data is stored on secure servers within the EU. We use encryption in transit (TLS) and at rest, access controls, and regular security audits to protect your data. Passwords are hashed using Argon2id.

6. Data Retention

We retain your account data for the duration of your subscription plus 30 days. After account deletion, all personal data is permanently removed within 30 days. Anonymized usage data may be retained for analytics.

7. Your Rights

Under applicable data protection laws (including GDPR and KVKK), you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Object to or restrict processing
  • Withdraw consent at any time

To exercise these rights, contact us at [email protected].

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use third-party advertising cookies. Analytics cookies are used only with your consent.

9. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect data from children.

10. International Transfers

If data is transferred outside the EU/EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice at least 30 days in advance.

12. Contact

For privacy-related questions, contact us at [email protected].