Privacy Policy
Last updated: July 27, 2026
Boocki (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service (“Boocki” or the “Service”).
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- Password (hashed; we never see your plain-text password)
- Full name
- Personal phone number
- Home address and zip/postal code
1.2 Service Usage Data
When you use Boocki to create jobs, we collect:
- Job descriptions — the natural-language description of the service you need (e.g., “plumber to fix a leaking sink”)
- Preferred dates and times for service providers to visit
- Your selected communication method (AI call or callback)
1.3 Phone Numbers
When you purchase a phone number through our Service, we collect and store:
- The phone number purchased (Twilio-provided)
- Area code preference
- Purchase and renewal dates
- Monthly subscription cost
1.4 Call Data
When our AI makes calls on your behalf, we collect:
- Call recordings (audio)
- Call transcripts (text)
- Call summaries — availability, quoted prices, and timing information
- Call duration and status
1.5 Payment Information
We use Stripe to process payments. We do not store your full credit card number, CVV, or bank account details on our servers. Stripe collects and processes this data according to its Privacy Policy. We store:
- Stripe customer ID (a reference to your Stripe account)
- Transaction history (amount, date, type)
- Wallet balance
1.6 Automatically Collected Data
When you access the Service, we may automatically collect:
- Browser type and version
- Device information
- IP address
- Pages visited and time spent
- Referring URLs
2. How We Use Your Information
We use the collected information to:
- Create and manage your account
- Find and call service providers on your behalf using Google Places data and AI calling (via Retell and Twilio)
- Process your job requests — analyzing your description with AI (Google Gemini) to determine the service type needed
- Process payments and manage your wallet balance
- Provision and manage phone numbers you purchase
- Send service-related communications (no marketing emails)
- Improve and optimize our Service
- Comply with legal obligations
3. Third-Party Services We Use
We share your data with the following third-party service providers solely to the extent necessary to provide our Service:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication & database hosting | All account and service data |
| Stripe | Payment processing | Payment method, transaction amounts, customer ID |
| Twilio | Phone number provisioning & call connectivity | Purchased phone numbers, call metadata |
| Retell AI | AI-powered phone calls | Provider phone numbers, job descriptions, call recordings/transcripts |
| Google Places API | Finding local service providers | Zip code, service type query |
| Google Gemini | Analyzing job descriptions with AI | Job description text |
Each third-party service has its own privacy policy. We encourage you to review them:
4. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you the Service. You may request deletion of your account and associated data at any time (see Section 6).
Specifically:
- Account data — retained until you delete your account
- Call recordings and transcripts — retained for up to 90 days after the associated job is completed, unless you request earlier deletion
- Transaction history — retained for 7 years to comply with financial record-keeping requirements
- Phone numbers — retained until you release the number or your account is deleted
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of data at rest (Supabase encrypted storage)
- Password hashing (bcrypt/scrypt via Supabase Auth)
- Row-Level Security (RLS) policies ensuring you can only access your own data
- Rate limiting on API endpoints
No method of electronic storage or transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
6. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure— request deletion of your personal data (“right to be forgotten”)
- Portability — receive your data in a structured, machine-readable format
- Objection — object to certain processing of your data
To exercise any of these rights, contact us at the email address provided in Section 8. We will respond within 30 days.
You can also update your profile information directly from your account settings at any time.
7. Children's Privacy
Our Service is not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
8. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:
- Email: privacy@boocki.com
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by:
- Posting the updated policy on this page
- Updating the “Last updated” date
- Sending an email notification for significant changes (if you have an active account)
Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.