Privacy Policy.

Booqit is a booking backend operated by Katoa GmbH, Stanserstrasse 100, 6064 Kerns, Schweiz (“we”, “us”). We are the data controller for the personal data described here. For contact details see our support page and imprint.

• Account data — the email address and name you provide when you sign up, and authentication metadata.
• Booking data — the polls, booking pages, options, and responses you and your invitees create. Invitees may submit a name, an email, and their availability to respond to a link.
• API keys — we store a hash of each key, never the secret itself, plus its name, scopes, and timestamps.
• Billing data — subscription status and a customer reference. Card details are handled by our payment processor (Stripe); we never see or store full card numbers.
• Technical data — basic request logs needed to run the service securely and debug problems.

We process account and booking data to provide the service you asked for (Art. 6(1)(b) GDPR — performance of a contract), billing data to take payment and meet legal obligations, and technical data on the basis of our legitimate interest in operating a secure, reliable service (Art. 6(1)(f)). We do not sell your data and we do not run advertising or third-party tracking.

We run on managed cloud infrastructure and rely on a small set of processors (hosting, database, and payment). Data may be processed outside the EU/EEA. Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses. We do not claim EU-only hosting or data residency. The GDPR still applies to the personal data of people in the EU/EEA, and we honour it regardless of where processing occurs.

We keep account and booking data for as long as your account is active. Delete a poll or booking page to remove its responses, or close your account to remove your account data, subject to retention we are legally required to keep (e.g. invoicing records).

Under the GDPR you have the right to access, correct, delete, port, and restrict processing of your personal data, and to object to processing based on legitimate interests. To exercise any of these, contact us via the support page. You may also lodge a complaint with a data protection supervisory authority.

We may update this policy as the service evolves. Material changes will be reflected in the “last updated” date above.