Skip to content

Privacy Policy

In effect from 13 September 2026.

Introduction

At EasyBook AI shpk (referred to as "EasyBook AI", "we", "us" and "our"), we are committed to protecting the privacy of our users. We are the data controller for the personal information we process, in accordance with Albanian data protection law (Law No. 9887, dated 10.3.2008 "On Personal Data Protection" and subsequent amendments) and applicable EU data protection regulations. Please read the following privacy policy that explains how we collect, manage and protect your personal information.

This is the Privacy (and Cookies) Notice ("Notice") for the website www.easybook.ai, and all EasyBook AI affiliate sites ("Sites"), or our applications ("Apps") (together "Services").

Who is the controller

  • Company: EasyBook AI shpk, registered in Albania.

  • Registered office: Street Adem Abazi, Zona kadastrale 8602, Apartamenti me nr. pasurie 12/387-N2, Vlore, Albania.

  • NUIS: M56506203S.

  • Data protection contact: [email protected].

When a business on our platform (a "Partner") uses EasyBook AI to manage its own clients, that business is the controller of its client records and EasyBook AI is its processor. This Notice describes what EasyBook AI does as controller.

Contacting us

If you have any questions, comments and requests regarding this Notice you can get in touch with us via our Contact Us page, via email at [email protected], or, for data protection matters specifically, at [email protected].

What information do we collect & how do we use it?

This Privacy Notice will apply to you if:

  • You visit and browse our Sites and Apps.

  • You book appointments with our Partners through us (we'll refer to you as a "Client").

  • you are self-employed and/or you work for a business on the EasyBook AI platform (we'll refer to you and/or the business as a "Partner").

We will only use the information we collect about you if there is a reason for doing so, and if that reason is permitted under data protection law. We say what these reasons usually are in each section below, and we explain each one under 'What do each of these legal reasons mean?'.

If you visit our services

We use your information to provide you with our Services. If you visit any of our Services, whether you're just browsing or you have an account, we will automatically collect information from you each time you use our Sites. This includes technical information, information about your visit and (if you opt-in) location data:

Technical information

Technical information may include the phone number, Internet Protocol (IP) address, login information, browser type and version, browser plug-in types and versions, device IDs, social log-in ID/email address, time zone setting, operating system and platform, hardware version, device settings (e.g. language and time zone), file & software names and types (associated with your device and/or the Services), battery & signal strength, information relating to your mobile operator or Internet Service Provider (ISP).

Information about your visit

Information about your visit may include the full Uniform Resource Locators (URL), clickstream to, through and from our Site (including date and time), pages and services you viewed or searched for, demographic information (including age and gender), page response times, download errors, length of visits to certain pages, page interaction information (such as scrolling, clicks, and mouse-overs), traceable campaign links (e.g. in emails, or via tracking URLs), methods used to browse away from the page, and any phone number used to call our customer service number or social media handle used to connect with our customer service team and our social media accounts.

Location data

Location data includes your country, derived from your IP address, and — only if you grant the permission — the coordinates of your device. We use it to show you businesses near you, to sort search results by distance, and to detect unusual sign-in activity on your account. We do not use location data for advertising.

Delivery of location services will involve us checking either of the following: - the coordinates (latitude/longitude) of your location, when you allow your device to share them, - your current country or region, by referencing your current IP address against a local lookup database. You can opt in and out of location sharing by changing your device settings.

We use this automatically collected information to:

  • understand how individuals use our Site, and how we can improve it;

  • ensure content from our site is presented in the most effective manner for you and for your devices; and

  • provide you with the information, products and services that you request from us or we think you may be interested in.

If you contact or engage with us

If you contact or engage with us, we will collect your contact information, and the other communications information you provide.

Contact information includes basic contact information you provide:

  • email address,

and anything else you include, for example:

  • first and last name,

  • phone number(s),

  • social media handle (for example, if you engage with us on social media).

Communications information includes your correspondence with us, for example, if you get in touch with our Customer Service team about an order or booking or to report a problem with our Site. This includes:

  • emails,

  • texts, in-app messaging & other digital messaging,

  • calls,

  • letters,

  • any in-person conversations you have with us.

We use this contact and communications information to:

  • Contact you if you have asked us to do so, including to respond to your queries, troubleshoot problems, and help with any issues you may have with our Services.

  • Provide you with information you might request about our Services.

  • Put you in touch with Partners you ask us to share your information with.

  • Provide you with technical and other service updates (for example, if we update our Terms of Use and Terms of Service).

Reasons: contract with you | legitimate interests | consent

If you use our services to book an appointment

When you create an EasyBook AI account using any of our Services, we may collect your:

  • First and last name

  • Date of birth

  • Gender

  • Email address

  • Address

  • Mobile phone number(s)

  • Your photo, if uploaded (optional)

  • If you choose to use your Google or Apple account to sign into EasyBook AI, we receive from that provider your first and last name, email address, the provider's user ID and, for Google, your profile photo. Signing in this way does not give us access to your calendar or your contacts.

  • We assign unique user IDs or other account-level IDs to your EasyBook AI account.

As you use your account, we may collect information about your:

  • Booking history, including appointments, class bookings, passes, memberships and vouchers

  • Bookmarks (e.g. your bookmarked salon or gym)

  • Account settings

  • Social login information

  • We may also collect information, if you provide it, about your preferences, referrals, or how you found out about our Services, or other user-generated content (e.g. profile photo, reviews).

We use this account and related information to manage your account with us, including to:

  • Maintain your EasyBook AI account

  • Provide customer support

  • Enable you to contact and make bookings with our Partners

  • Enable you to make bookings with your account, and to see what you owe the business and have paid it

  • If a Partner offers home services and you select the option, to enable you to book appointments at the address you provide

  • Provide you with a personalised experience, including recommending features, services, products, and Partners we think you may be interested in

Reasons: contract with you | legitimate interests

You may provide Partners with consultation, order, and booking information (like the date and time of your appointment). Partners may also ask you, via consultation forms on our Services, for health information (for example, if you are pregnant) or other sensitive information (called "special category data").

You may opt-in to receive marketing from a Partner. Partners may also upload their own customer information to EasyBook AI, including to use our Services to send marketing (EasyBook AI will not use this uploaded information for its own purposes). Partners are responsible for their own marketing.

The Partner is the data controller for this information. If you have any questions, please contact the relevant Partner.

If you work for a Partner

If you work for our Partner (e.g. as an employee, contractor, or worker), we may collect contact and company information from you:

Contact information may include:

  • First and last name

  • Role title

  • Company name

  • Email address

  • Contact number

  • Log-in details

Company information may include:

  • Company address

  • Business type (e.g. salon, spa, gym)

  • Consultation form content

  • Historical and future appointments

  • Records of what clients owe and have paid at the venue (no card or bank details, because we never receive any)

  • Reporting and analytics

  • Client data and promotions

  • Pictures and marketing materials

We also process other information on behalf of your company that is not personal data (for example, financial data and product inventory)

We use this contact and company information to manage the Partner's account with us, including to:

  • Maintain the Partner's account

  • Provide Partner customer support, including technical support for our suite of business tools

  • Enable the Partner to use our suite of business tools, including managing staff and appointment scheduling

  • Enable the Partner to record what its clients owe and have paid at the venue

  • Enable the Partner to manage marketing promotions via the Services

  • Enable the Partner to list on the EasyBook AI's marketplace

  • Contact Partner staff to enable them to create a Partner-specific account with appropriate authorisations, and to manage those accounts

Reasons: contract with you | legitimate interests

The Partner can access and manage your EasyBook AI account details. Partners may also control what information Clients can see about the Partner, including order or booking information, staff names, and certain profile information, offers, ratings, and reviews (which may talk about staff members), prices and discounts, appointment availability, and related data.

The Partner you work for is the data controller for this information. If you have any questions, please contact the Partner you work for.

If we send you offers, updates, or other marketing material from us

We may collect contact information (as explained above), like your name and email address.

We may also collect marketing preferences, which are our records of what information you would or would not like to receive from us, and if you have opted out of any direct marketing.

We use this contact and marketing preference information to:

  • Send you offers, updates, promotions, newsletter(s), insights, and other marketing material

  • Send you personalised marketing, including offers, features, services, products, and Partners we think you may be interested in

  • If you work for a company we are interested in partnering with, we may contact you about our Services and opportunities with EasyBook AI

  • Contact you to ask for feedback, including through surveys and other marketing research

You can opt-out of further marketing at any time by selecting the "unsubscribe" link at the end of all our promotional updates.

Reasons: legitimate interests | consent

The EasyBook Explorer website

EasyBook Explorer, our public explorer site, is covered by this Notice, and the service providers and safeguards described here apply to it unchanged. It works differently from the rest of our Services in three ways.

There are no accounts. You cannot sign in or create an account on EasyBook Explorer. You browse it without identifying yourself, and we set no sign-in or session cookie there.

The contact form. If you write to us through the contact form on that site we collect the contact and company details you enter there (your name, email address, phone number, job title, company name and size, country, the reason for contacting us and the details you add), together with the consent you give by ticking the box on that form, the time you gave it and the version of this policy you accepted. We use it only to get in touch with you about EasyBook AI, and we keep it until you ask us to remove you — write to [email protected] and we will.

Analytics only with your consent. Google Analytics loads on EasyBook Explorer only after you have accepted analytics cookies; if you have not, no analytics script runs at all. There is no advertising or marketing tracking on that site.

Your cookie choice on EasyBook Explorer is stored separately from your choice on easybook.ai, so accepting or rejecting on one site does not carry over to the other. The cookies EasyBook Explorer sets are listed in our Cookie Policy.

The EasyBook documentation assistant

Our documentation site at docs.easybook.ai offers an assistant called Illyria that answers questions about how EasyBook works.

What is sent when you ask. The text of your question, the documentation page you were on and the language you are reading in are sent to the model provider that answers it — Google (Gemini) by default, or Anthropic (Claude) where we have configured it. The same question text is also sent to Google or OpenAI to compute an embedding, a numerical representation we use to find the documentation pages that match what you asked.

What we keep. We store the question, the page it was asked from, the language, and whether it was answered, so that we can see what the documentation fails to explain and improve it. We do not store your name or your account against it. Your IP address is used only to limit how many questions can be asked in a period of time, and it is not stored alongside the question. We keep a logged question for up to six months, after which it is deleted automatically.

Please do not put personal data in a question. Write it as you would in a public forum: the assistant needs nothing about you or your clients in order to explain how a feature works.

We rely on our legitimate interest in providing and improving our documentation. The model and embedding providers act as our processors, and the safeguards described in Cross-Border Data Transfers apply to what is sent to them.

We must have a relevant legal justification, called a 'lawful basis' for each way in which we use your personal information.

Lawful bases may include consent, a contract with you (as a data subject), compliance with our legal obligations, and our specified legitimate interests.

We'll use your personal information to send you promotional or marketing content (for example, our insight updates or newsletters), if you have given us consent to us doing so, where required by law. We may also send direct marketing based on our legitimate interests (see below).

You can opt-out of further marketing at any time by selecting the "unsubscribe" link at the end of all our promotional updates and marketing to you.

We also rely on consent for some of the cookies we use (see our Cookies Notice for more detail).

Contract

We collect, store, and process your personal information if it is necessary for performing a contract you have with us (for example, our Terms of Use and Terms of Service), or where you have asked us to take specific steps before entering into that contract. This includes notifying you about changes to our Services. This does not include any agreement we have with a Partner, whether you are a Booker or Partner staff – this is based on our legitimate interests (see below).

We may need to process any of your personal information to comply with our legal obligations, including under applicable Albanian law, EU regulations, and/or any court orders. This includes keeping the accounting and tax records we are required to keep.

Legitimate Interests

We may process your personal information if it is necessary for our legitimate interests or the legitimate interests of a third party, provided those interests are not outweighed by your rights and interests.

Our legitimate interests include:

  • Administering, improving, and expanding our Site and services Keeping our records updated. Gaining insights on how you use our Services. Gaining your feedback and reviews. Delivering, developing, and improving our Services. Enhancing, customizing, or modifying our Services and communications. Implementing and improving our security measures. Growing our business and informing our marketing strategy.

  • Marketing Marketing and promoting our Services to a company you work for or provide services to. Measuring how our own campaigns and emails perform. We do not run advertising cookies, advertising pixels or web beacons, and we do not track you across other websites.

  • Fulfilling agreements with another organization Complying with or enforcing any agreement EasyBook AI has (or that you may have, for example, any extra Partner-specific terms) with a Partner you have purchased goods or services from as a Client.

  • Complying with or enforcing any agreement we may have with a company you work for or provide services to (for example, if you work at a Partner).

In each case, these legitimate interests are only valid if they are not outweighed by your rights and interests. If you would like further information about how we assess our legitimate interests, please contact us at [email protected].

We also use different types of cookies on our Site – we explain this in the Cookies Notice.

Who do we share your information with?

If you are a Client

We will share your information with our Partners if you have asked us to (for example, if you want to connect with, order from, or make a booking with one of our Partners). We may share your contact and account information, and they will receive any other information you provide through EasyBook AI (for example, completing a Partner's consultation form). Partners may use this information to manage your communications, orders, and bookings with them.

If you leave a public review for a Partner (or any of their products in their shop on our Services), your rating, review, review date, and first name and last initial will be published on EasyBook AI. Other EasyBook AI users and members of the public may be able to see your reviews. Reviews may be published or syndicated on third-party websites. Public reviews will survive the termination or expiry of the EasyBook AI Terms of Service.

If you work for a Partner

EasyBook AI users may rate the Partner you work at or for, and may rate you as an individual. Your individual ratings may be shared with the relevant Partner, and may be publicly available on our Services.

We may publish limited Partner information (including individual and business public reviews and ratings) so that it can be indexed by search engines and included in our own marketing channels.

If EasyBook AI processes your information as a Client, Partner staff, or otherwise

We may also share your information with:

  • Any member of our company group, which means our ultimate holding company and its subsidiaries, and/or our subsidiaries who may support our processing of personal information under this Notice.

  • Our service providers, organizations who process your personal data on our behalf and in accordance with our instructions and the data protection law. This includes supporting the services we offer through the Site, in particular those providing website and data hosting services, distributing communications we send, supporting or updating marketing lists, customer support, facilitating feedback on our services, digital invoicing, and providing IT support services from time to time. We use no payment processing provider, because no payment is made through our Services.

  • These organizations (which may include third-party suppliers, agents, sub-contractors, and/or other companies in our group) will only use your information to the extent necessary to perform their support functions.

  • If you create a Partner Account with us by using a Referral Link, the Partner who the Referral Link relates to may view the progression of your Partner Account.

  • If we run surveys, competitions, promotional campaigns, offers, or other occasional activities and you opt-in, we may share certain information with our commercial partners (for example, if you chose to enter into a prize draw we run with a third party). We will provide more detailed privacy information at the time.

  • Our auditors, legal advisers, and other professional advisers.

  • If we sell or buy any business or assets, in which case we will disclose your personal data to the prospective seller or buyer.

  • Any person to whom disclosure is necessary to enable us to protect our rights, property, or safety, our clients, or other third parties, and to enforce our rights under this Notice or under any agreement (for example, our Terms of Use and Terms of Service) with you. This includes exchanging information with other companies and organizations for the purposes of detecting and preventing fraud and cyber-crime.

  • If required to do so by court order or if we are under a duty to disclose your information in order to comply with (and/or where we believe we are under a duty to comply with) any legal obligation. This includes exchanging information with law enforcement agencies, regulators, or other similar government bodies.

Where do we store your information?

Your information is held in our database and file storage on Google Cloud Platform. Beyond that, only the service providers listed below receive personal information from us, and only for the purpose named:

  • Google Cloud Platform (Frankfurt, Germany) — our database and the storage of the images and files you upload.

  • Hostinger (Netherlands) — hosting of the servers that run our Sites and of the session cache alongside them, in the Netherlands (European Union).

  • Resend (United States) — delivery of every email we send you, including verification codes, booking confirmations and calendar invitations. Resend is certified under the EU-U.S. Data Privacy Framework.

  • Google Firebase Cloud Messaging — delivery of push notifications to your device.

  • Google — sign-in with Google; Google Maps, which loads when you open a map view; Google Analytics, which we load only if you have given analytics cookie consent; and the optional Google Calendar and Google Contacts features described below, which run only if you connect those accounts yourself.

  • Apple — sign-in with Apple.

  • Cloudflare — delivery of our Sites through its content delivery network, termination of the TLS (https) connection, and protection against denial-of-service attacks.

We receive no payment data and therefore use no payment processor. See "Payments" below.

We do not sell personal information, and we do not share it with advertising networks or data brokers.

We may transfer your personal information outside Albania and the European Economic Area (EEA):

  • In order to store it

  • In order to enable us to provide our Services to you

  • In order to facilitate the operation of our businesses, where it is in our legitimate interests and we have concluded these are not overridden by your rights

  • Where we are legally required to do so

We will put legal protections in place to safeguard personal data transfers in compliance with Albanian data protection law and applicable EU data protection regulations.

We update our service providers as we grow, and will update this Notice when we do. For more information about how we currently transfer and protect data, please contact [email protected].

How do we protect your information?

All information you provide to us is securely stored. Our website uses secure end-to-end encryption to protect your information. All connections into our platform are secured using industry-standard security and encryption.

All data we capture is stored in secured databases and data storage systems with strict access limitations. All data access requests are logged and monitored in accordance with any threat detection policies.

Unfortunately, the transmission of information via the internet is not completely secure. We do our best to protect your personal information, but we cannot guarantee the security of your data transmitted to us – even where a particular transmission is encrypted. Any transmission is at your own risk. Once we have received your information, we use strict procedures and security features to try to prevent unauthorized access.

Payments

Bookings made through EasyBook AI are paid at the venue, directly to the business you booked with, so no payment data of any kind reaches us: we have no payment processor, we never ask for or store card or bank details, and we never charge you. All we record is that an amount is due or has been settled, so that you and the business hold the same record of the booking.

External sites

EasyBook AI may, from time to time, contain links to external sites. If you follow a link to any of these websites, please note that these websites have their own privacy policies. EasyBook AI does not accept any responsibility or liability for these policies or any content on external sites and does not necessarily endorse the views expressed within them. EasyBook AI has no control over the availability of any of these websites. Please check each site's policies before you submit any personal information to these websites.

How long is your information kept for?

We will generally process personal information:

  • For as long as it is necessary for the purpose(s) for which it was originally collected (for example, holding it on behalf of a Partner, or for as long as you have an account with us), and

  • For up to six years after that to identify any issues and resolve any legal proceedings.

We may retain your personal data for a longer period in the event of a complaint, if we reasonably believe there is a prospect of legal proceedings, or we are aware of pending or ongoing legal proceedings. In some circumstances, we may keep data longer if applicable law requires us to do so.

If you have opted to receive insights, newsletters, or other promotional material, but later decide to opt out of receiving these updates, or object to any other processing of your personal information, we may keep a record of your opt-out or objection so we can respect your preferences.

We may keep aggregated, anonymized, or pseudonymized data – for example, for reporting and analytics – for longer periods.

Aggregated data

In some circumstances, we will anonymize your personal data (so that it can no longer be associated with you and you cannot be re-identified). This anonymized data (for example, aggregated statistics) is no longer personal data, and we may keep and use this anonymized information indefinitely without further notice to you.

We use this to help us provide, develop, and improve our services, including to:

  • Better understand how people use our Services

  • Provide our Partners and Clients with information about our Services, including user statistics (e.g., total numbers, broad demographics statistics)

  • Develop useful insights and improvements to the Services

What rights do you have with your personal information?

In certain circumstances, you have the following rights:

  • To be provided with a copy of your personal information held by us

  • To request the correction or deletion of your personal information held by us

  • To request that we restrict the processing of your personal information (while we verify or investigate your concerns with this information, for example)

  • To object to the further processing of your personal information, including the right to object to marketing

  • To request that your provided personal data be moved to a third party

  • To withdraw consent

If you wish to exercise any of these rights in relation to the personal information we hold about you, you can contact us at [email protected]. If you have any concerns, you have the right to lodge a complaint with a data protection supervisory authority.

The Commissioner for the Right to Information and Protection of Personal Data is the supervisory authority in Albania and can provide further information about your rights, an organization's obligation in relation to your personal information, as well as deal with any complaints that you may have.

Albanian Information and Data Protection Commissioner:

  • Website: www.idp.al

  • Email: [email protected]

  • Address: Commissioner for the Right to Information and Protection of Personal Data, Rr. "Abdi Toptani", Nd. 5, Tiranë, Albania

If you are located outside Albania, you may also contact your local data protection authority for assistance with privacy-related matters.

Your data export

You can ask for a copy of everything we hold about you from Settings → Privacy, without contacting us. We prepare an archive containing your account details, addresses, appointments and class bookings, passes, memberships, transactions, reviews, registered devices, consent history, connected accounts, any calendar events we copied from Google, and your notification history. The archive is made available on a private download link that expires after 24 hours; we then delete the archive, and keep only the record that you requested it.

The files are in JSON, a structured, commonly used, machine-readable format, so that you can take them to another provider. Your own email address and phone number appear in full — they are yours.

Closing your account

You can close your EasyBook AI account yourself, from Settings, without asking us. You are offered two options:

  • Deactivate. Your account and profile stop being visible and you stop receiving messages from us. Signing back in restores it. Nothing is deleted.

  • Delete. Your account is deactivated immediately and scheduled for deletion 30 days later. During those 30 days you can sign back in to cancel the deletion. After that the deletion runs and cannot be undone.

Before closing an account we check for anything that would be left stranded — an upcoming appointment, an unsettled payment, or a business that would be left without an owner — and tell you what to resolve first.

When the deletion runs we permanently delete your notifications, unsubscribe and calendar tokens, any calendar events copied from Google, your likes, bookmarks, prize-draw entries, feedback, and your uploaded files. Records we are required to keep are stripped of the parts that identify you: invoices and transactions keep their amounts, dates and references but lose your name, notes and IP address; reviews stay published under "Deleted User"; the record that you gave or withdrew a consent is kept as proof, with your email address replaced by an irreversible hash. If you connected Google Calendar or Google Contacts, we also withdraw our access at Google, so the grant does not survive your account.

Children

Our Services are not intended for children. You must be at least 16 years old to create an EasyBook AI account, and we ask you to confirm this when you sign up. We do not knowingly collect personal information from anyone below that age. If you believe a child has given us their information, write to [email protected] and we will delete the account and its data.

A parent or guardian may of course book an appointment for a child using their own account; in that case the booking is made by the adult and the child's details are held by the business you booked with.

Automated decisions

We do not make any decision about you that produces a legal effect or similarly significantly affects you by automated means alone, and we do not carry out profiling for such decisions.

We do use automated processing to make the Services useful: which businesses and services we suggest to you, which businesses appear near the top of a search, when to remind you that it may be time to rebook, and automated checks that look for suspicious sign-in activity. None of these decide whether you may use our Services or on what terms. Where a business you have booked with sees indicators we compute about its own clients — for example how reliably appointments are kept — that business is the controller of that assessment, a person at the business makes any decision, and you can ask them about it.

Push Notifications

We use Firebase Cloud Messaging (FCM), a service provided by Google, to send push notifications to your device. When you enable push notifications, we collect and store a device push token that uniquely identifies your device for notification delivery.

You can manage your push notification preferences at any time through your account notification settings or your device's operating system settings. Disabling push notifications will not affect the core functionality of our Services. Your push token is deleted from our servers when you log out or revoke notification permissions.

Push notification data is processed by Google's Firebase Cloud Messaging infrastructure. For more information, see Google's privacy policy at policies.google.com/privacy.

Security Features

We offer multi-factor authentication (MFA) to help protect your account. If you enable MFA, we may process the following additional data:

  • TOTP (Time-based One-Time Passwords): An encrypted secret is stored on our servers to generate verification codes. This secret does not contain personal information.

  • WebAuthn/Passkeys: If you register a passkey or security key, we store a public key credential and device metadata (credential ID, device type) on our servers. Your private key never leaves your device.

  • Recovery codes: Recovery codes are stored only as hashes and serve as a backup authentication method.

MFA secrets are encrypted at rest. You can manage your security settings, including removing MFA methods, through your account security settings at any time.

Cross-Border Data Transfers

Some of the third-party services we use to provide our platform are operated by companies based outside of Albania and the European Economic Area (EEA). When your data is transferred outside the EEA, we ensure appropriate safeguards are in place:

  • Google (Analytics, Maps, OAuth, Firebase): Data may be processed in the United States. Google participates in the EU-U.S. Data Privacy Framework and provides Standard Contractual Clauses (SCCs) as transfer mechanisms.

  • Resend (email delivery): The emails we send you are delivered from the United States. Resend provides Standard Contractual Clauses for international transfers.

  • Cloudflare (CDN and security): Requests may be processed at global edge locations. Cloudflare provides Standard Contractual Clauses for international transfers.

We only transfer personal data to countries or organizations that provide an adequate level of protection as recognized by relevant authorities, or where appropriate safeguards (such as Standard Contractual Clauses approved by the European Commission) are in place.

Rewards Program

If you participate in our rewards program, we collect and process additional information including your points balance, tier status, referral activity, and reward redemption history. This data is used to operate the program, calculate your benefits, and prevent fraud. Your rewards data is retained for as long as you maintain an active account and participate in the program.

Google Calendar and Google Contacts

Business users can choose to connect their Google account to EasyBook AI for two optional features: Google Calendar synchronisation and Google Contacts import. Each feature asks for its own permission, at the moment you turn it on, and only for the Google data that feature needs. Signing in with Google does not grant either permission.

Google Calendar. When you connect Google Calendar we read the list of your calendars and their time zones so that you can choose which calendar to sync, and we read the events in the calendar you choose so that your existing commitments block your availability in EasyBook AI. For each event we store its times, status, title, description, location, links to the event and to its meeting, organiser and the number of attendees. We also create, update and delete events in that calendar for the appointments booked with you through EasyBook AI. Events from your Google calendar are shown only to you and to colleagues in your organisation who are allowed to see your schedule; they are deleted when you disconnect Google Calendar and in any case no later than one year after the event ends.

Google Contacts. When you connect Google Contacts we read the names, email addresses, phone numbers and profile photos of the contacts in your Google account and show them to you in an import list. Only the contacts you explicitly select are saved, as clients of your business, and from that point on they are governed by the rest of this Notice. Contacts you do not select are not stored. We never write to your Google contacts.

Data obtained through Google is used only to provide the feature you enabled. It is not used for advertising, is not sold, is not shared with third parties except the service providers that host our Services on our behalf, and is not read by people except with your consent, for security or legal reasons, or in aggregated form. EasyBook AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar or your Google account at any time from your EasyBook AI account settings, and you can remove EasyBook AI's access to your Google account at myaccount.google.com/permissions. Disconnecting deletes the calendar events we copied from Google.

Updating this Privacy Notice

This Notice was last updated on 13 September 2026.

We may update this Notice from time to time and will post any changes on this page.

If we make any substantive changes, we will notify you through email or website pop-ups within our Site.

Our Sites use cookies and similar technologies, such as device IDs and in-app codes, to collect and store certain information. These typically involve pieces of information or code that a website transfers to or accesses from your computer hard drive or mobile device to store and sometimes track information about you. Cookies and similar technologies enable you to be remembered when using that computer or device to interact with websites and online services and can be used to manage a range of features and content as well as storing searches and presenting personalized content. We do not use pixel tags, web beacons or any other advertising or cross-site tracking technology.

Our Sites use cookies and similar technologies either alone or in combination with each other to create a unique device ID, and to distinguish you from other users of our Sites. This helps us to provide you with a good experience when you browse our Sites and also allows us to improve our Sites.

A number of cookies and similar technologies we use last only for the duration of your web or app session and expire when you close your browser or exit one of our Sites. Others are used to remember you when you return to one of our Sites and will last for longer.