1. Who is responsible
Labooka is operated by Individual Entrepreneur (ԱՁ) «ՆԱՐԵԿ ԿՆՅԱԶՅԱՆ ԱԼԲԵՐՏԻ», registered in the Republic of Armenia on 4 March 2024, TIN (ՀՎՀՀ) 74445895. Registered address: Հայաստան, Գեղարքունիք, Գավառ (Կամո) Մարզկենտրոն, Զարգարյան Փ., Շ 52, Բն. 5, 1201. Contact: support@labooka.com (support: support@labooka.com).
This entity is responsible for the personal data described here. For personal data that a business on the platform holds about its own clients and processes using Labooka's tools, that business decides how it is used, and Labooka acts on its instructions; see section 7 and the Business and Partner Terms (/business-terms).
2. What we collect
- Account data: name, phone number, email address, password or authentication identifiers, profile photo, language and locale, notification preferences.
- Booking data: appointments you make or receive, services, specialists, times, status and history, and the notes or comments attached to a booking.
- Business data (for partners): business profile, locations, working hours, services and prices, team members and their roles, client records you create or import, and business analytics derived from your activity.
- Content you upload: photos, logos, media and texts, including material used with AI features.
- Messaging data: which notifications were sent to you, over which channel, and their delivery status; your Telegram chat identifier and username if you connect Telegram; messages you send to a business's connected Facebook Page or Instagram professional account, with the identifiers and profile information Meta makes available; your browser push subscription if you enable push notifications; unsubscribe status for marketing.
- Story publishing data (for partners): if a business connects its Instagram professional account or Facebook Page to publish Stories, the account identifier, username or Page name, the permissions granted and an access token stored in encrypted form; the image the business chooses to publish; and the status, timestamps and Meta identifiers of each publication.
- Payment data: for payments a business makes to Labooka, we store the amount, currency, status, timestamps and the provider's transaction identifiers. Card details are entered on the payment provider's own page and are not collected or stored by Labooka.
- Location data: an approximate or chosen location when you search nearby, and the map coordinates a business sets for its own address.
- Technical data: device and browser information, IP address, log and error data, and usage measurements needed to operate, secure and improve the platform.
- Cookies and similar technologies: as described in section 9.
We do not ask you for special-category data, and we ask you not to put health or other sensitive details into free-text fields such as booking comments.
3. Why we use it
To create and secure your account; to make, confirm, change and remind you about bookings; to provide the business tools a partner subscribes to; to send transactional notifications; to send marketing messages where you have agreed to receive them; to take and reconcile payments for subscriptions and credits; to prevent fraud and abuse; to provide support; to meet legal and accounting obligations; and to measure and improve the platform.
4. Notification channels
We send messages by email, SMS, WhatsApp, web push notification and, if you connect it, Telegram. Transactional messages about your bookings and account are part of the service. Marketing messages are sent only where consent has been recorded, and consent and opt-outs are checked before each marketing send. Marketing email and marketing SMS include an unsubscribe link; for Telegram you can disconnect the integration or ask the business to stop. You can change these settings in your account.
Facebook Messenger and Instagram. If a business connects its Facebook Page or Instagram professional account to Labooka, Labooka may receive messages sent to that connected account and related identifiers and profile information made available by Meta. We process this information to display conversations to the business, to help the business respond to booking-related questions and manage bookings, including through automated AI assistance where enabled, and to keep the service secure. We access only accounts that the business chooses to connect and data made available to Labooka through the permissions granted to our Meta application. A business can disconnect a connected channel in Labooka settings. To request deletion of data held by Labooka, follow the instructions at /data-deletion. Use of Facebook and Instagram is also subject to Meta's applicable terms and policies.
Publishing Stories to Facebook and Instagram. A business owner or manager can connect the business's own Instagram professional account or Facebook Page to Labooka in order to publish a Story. Labooka publishes only an image that the business has chosen, only to the account it has connected, and only when the business confirms the publication. We use the Meta permissions granted at connection to publish the Story and to check that the account can be published to. We do not use them to read your followers, messages sent to your account or other content, and we do not publish anything else on your behalf. The image is kept in private storage only as long as needed to publish it and to resolve problems, and is then removed. A business can disconnect a publishing account in Labooka settings, which removes the stored access token and cancels publications not yet sent. This does not remove the Story already published on Facebook or Instagram, which the business manages there. To request deletion of data held by Labooka, follow the instructions at /data-deletion. Use of Facebook and Instagram is also subject to Meta's applicable terms and policies.
WhatsApp. Labooka uses the WhatsApp Business Platform to send booking-related and other permitted messages described in this Privacy Policy. When WhatsApp is used, Meta may provide Labooka with delivery information and identifiers necessary to send and manage those messages.
5. Who processes data for us
We use service providers that process personal data on our behalf, under contract and only for the purposes above:
| Purpose | Provider |
|---|---|
| Hosting, database, authentication, file storage | Supabase |
| Application hosting, delivery, performance measurement, feature flags | Vercel |
| Error and performance monitoring | Sentry |
| Rate limiting and abuse protection | Upstash |
| Transactional email delivery | Resend |
| SMS delivery in Armenia | ООО ВИНГС Солюшнс |
| WhatsApp message delivery | Meta Platforms (WhatsApp Business Platform) |
| Facebook Messenger and Instagram messaging, if a business connects them | Meta Platforms |
| Publishing Stories to Facebook and Instagram, if a business connects them | Meta Platforms |
| Telegram messages, if you connect Telegram | Telegram |
| Card payment processing for subscriptions and credits | Ameriabank CJSC |
| AI text, image and video generation | AI service providers |
| Map tiles | OpenStreetMap contributors |
| Browser push delivery | The push service of your browser or operating system |
6. Sharing with businesses on the platform
When you book, the business receives the booking details and the contact information it needs to serve you and to contact you about that appointment. A business must use that data only for those purposes; see the Business and Partner Terms (/business-terms).
7. Data a business holds about its clients
A partner business may create or import its own client records and use Labooka to message them. That business decides what to collect and who to contact, and is responsible for having a lawful basis and any required consent. Labooka processes that data to provide the platform and does not use it for its own marketing.
8. Retention
We keep personal data for as long as your account exists, and after that only for as long as we need it for the purposes above, including legal, accounting and dispute-resolution requirements.
9. Cookies and similar technologies
We use cookies and similar storage that are necessary to run the platform - sign-in sessions, security, language and locale - and measurement technologies that help us understand performance and usage.
10. Your rights
Subject to applicable law, you can request access to your data, correction, deletion, restriction of processing, a copy of the data you provided, and withdrawal of consent for marketing. Write to support@labooka.com and we will respond within the period the applicable law requires. You can also complain to the competent supervisory authority.
11. Security
We use technical and organisational measures to protect personal data, including encryption in transit, access controls and monitoring. No service can be completely secure; if a breach affects your data and the law requires it, we will notify you and the competent authority.
12. International transfers
Some of our providers operate outside Armenia, which means your data may be processed abroad. Where that happens we rely on the safeguards required by applicable law.
13. Children
Labooka is available to clients aged 13 and over, with parent or guardian consent where required by applicable law; business accounts require users aged 18 and over. We do not knowingly collect data from anyone below those ages and will delete it if we learn we have.
14. Changes
We will publish any updated version with a new version number and effective date, and notify you of material changes through the platform or by email.
15. Contact
Labooka is operated by Individual Entrepreneur (ԱՁ) «ՆԱՐԵԿ ԿՆՅԱԶՅԱՆ ԱԼԲԵՐՏԻ», registered in the Republic of Armenia on 4 March 2024, TIN (ՀՎՀՀ) 74445895. Registered address: Հայաստան, Գեղարքունիք, Գավառ (Կամո) Մարզկենտրոն, Զարգարյան Փ., Շ 52, Բն. 5, 1201. Contact: support@labooka.com (support: support@labooka.com).