Privacy Policy

1. Who We Are

AudaBook provides a WhatsApp-based AI receptionist and booking platform for service businesses. For privacy questions or to exercise your rights, contact us at info@audabook.com.

If you are a business using AudaBook, you are the data controller for your own customers' personal data, and AudaBook acts as your data processor. For our website visitors and account holders, AudaBook is the data controller.

2. Data We Collect

Account & business data

• Name, email address, password (stored hashed), and business details you provide.
• Business configuration: services, prices, working hours, team members, and AI settings.

Booking & messaging data

• Messages exchanged between your business's WhatsApp number and your customers, processed to generate replies and bookings.
• Customer contact details, appointment details, and booking history that flow through the Service.

Payment data

• Subscription and billing information is collected and processed by our payment provider, Paddle (our Merchant of Record). We do not store your full card details on our servers.

Usage & technical data

• Log data, device/browser information, IP address, and usage metrics used to operate, secure, and improve the Service.

3. How We Use Data

• To provide, operate, and maintain the Service (answering messages, creating bookings, sending reminders).
• To process subscriptions and payments (via Paddle).
• To provide support and respond to your requests.
• To monitor, secure, debug, and improve the Service.
• To send important account, transactional, and (where permitted) product communications.
• To comply with legal obligations.

4. Legal Bases (GDPR)

Where the GDPR applies, we process personal data on the bases of: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (where required, e.g. certain communications), and legal obligation.

5. Sub-Processors & Third Parties

We share data with trusted service providers only as needed to run the Service. Key sub-processors include:

We do not sell personal data. We require our sub-processors to protect data and use it only to provide their services to us.

6. International Transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

7. Data Retention

We retain personal data for as long as your account is active and as needed to provide the Service. Certain records (e.g. message and booking logs) are subject to automatic time-based deletion, and we delete or anonymize data within a reasonable period after account closure, unless a longer retention period is required by law.

8. Your Rights

Depending on your location, you may have the right to access, correct, delete, export, or restrict the processing of your personal data, and to object to certain processing or withdraw consent. The Service provides data export and deletion tools, and you can also email info@audabook.com to exercise these rights. You may also have the right to lodge a complaint with your local data-protection authority.

9. Cookies

Our website and dashboard use essential cookies for authentication and core functionality, and may use limited analytics to understand usage. You can control cookies through your browser settings; disabling essential cookies may affect functionality.

10. Security

We use technical and organizational measures to protect data, including encryption in transit, hashed passwords, tenant isolation, role-based access control, and audit logging. No method of transmission or storage is 100% secure, but we work continuously to safeguard your information.

11. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal data.

12. Changes & Contact

We may update this Privacy Policy from time to time and will notify you of material changes. For any privacy question or request, contact info@audabook.com. Payment data handled by Paddle is also covered by Paddle's privacy policy at paddle.com/legal/privacy.