Cookie Policy
Learn how Booky AI uses cookies, pixels, and tracking technologies, and how you can exercise your privacy choices under US and global privacy regulations.
Your Privacy Choices at a Glance
You have full control over non-essential cookies. You can update your preferences or opt out of targeted advertising and data sharing at any time by clicking the button below or using the "Your Privacy Choices" link in the footer.
1. Introduction
This Cookie Policy explains how Booky AI Ltd. and its affiliates ("Booky AI", "we", "us", or "our") use cookies, web beacons, local storage, software development kits (SDKs), and similar technologies when you visit our website (booky-ai.com) and use our AI appointment assistant and lead automation platform (collectively, the "Services").
This policy is designed to comply with applicable US state privacy legislation, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA), and federal transparency standards.
2. What Are Cookies and Tracking Technologies?
A cookie is a small text file containing a string of alphanumeric characters that a website transfers to your browser or device when you visit. Cookies enable the website to remember your actions and preferences (such as login credentials, theme settings, and session status) over a period of time.
We also utilize related technologies:
- Local Storage (HTML5 / Web Storage): Data stored in your browser without an automatic expiration date that allows client-side performance, state management, and offline capabilities.
- Web Beacons / Pixels: Transparent graphic images or small snippets of code embedded in web pages or marketing emails used to track user interactions and deliver cookies.
- Session Identifiers: Temporary server-side tokens that correlate sequential browser requests during a single visit.
3. Categories of Cookies We Use
We categorize the cookies and tracking technologies used across our Services into four primary groups:
3.1 Strictly Necessary Cookies
These cookies are essential for the operation, security, and administrative integrity of our platform. Without these cookies, services you have asked for (such as secure user login, session continuation, and CSRF attack prevention) cannot be delivered.
Consent Status: Always active; cannot be disabled in our preference center.
3.2 Functional & Preference Cookies
These cookies enable enhanced functionality, personalization, and persistence. For example, they remember your visual theme preference (light vs. dark mode), your chosen industry vertical, and interface customizations.
3.3 Analytics & Performance Cookies
These cookies collect aggregated, anonymized information about how visitors navigate and utilize our platform (e.g., page visit counts, average session duration, bounce rates, technical latency, and click funnels). They assist us in detecting errors and optimizing page loading speeds.
3.4 Marketing, Targeted Advertising & Cross-Context Behavioral Sharing
These cookies may be set through our site by third-party advertising partners and analytics vendors. They are used to build a profile of your interests, deliver relevant advertisements across the internet, and measure the effectiveness of our campaigns. Under the CCPA/CPRA, the use of these cookies may constitute a "sale" or "sharing" of personal information for cross-context behavioral advertising.
4. Detailed Cookie Inventory
Below is a non-exhaustive list of the primary cookies and local storage tokens utilized on Booky AI:
| Cookie / Key | Provider | Category | Purpose | Lifespan |
|---|---|---|---|---|
sessionid |
Booky AI | Strictly Necessary | Maintains encrypted session state for authenticated users. | Session (up to 14 days) |
csrftoken |
Booky AI | Strictly Necessary | Protects forms and API endpoints against Cross-Site Request Forgery attacks. | 1 Year |
theme |
Booky AI (Local) | Functional | Stores your selected Light or Dark UI theme preference. | Persistent |
bookyai_cookie_consent_v1 |
Booky AI (Local) | Strictly Necessary | Stores your granular cookie preferences and opt-out statuses. | 180 Days |
__cf_bm, cf_clearance |
Cloudflare | Strictly Necessary | DDoS mitigation, bot detection, and edge routing security. | 30 Minutes to 1 Year |
__stripe_mid, __stripe_sid |
Stripe Inc. | Strictly Necessary | Fraud detection and secure payment transaction authentication. | 1 Year / 30 Minutes |
_ahrefs_analytics |
Ahrefs | Analytics | Measures web traffic, search referrals, and page visit metrics. | 12 Months |
cal_embed_session |
Cal.com | Functional / Marketing | Powers interactive demo booking widgets and schedule management. | Session |
5. Third-Party Integrations and Cookies
Some third-party service providers that we partner with may place cookies or similar identifiers on your device. These providers include:
- Payment Gateways (Stripe): Used for secure processing and anti-fraud analysis.
- AI & Telephony Services (Twilio, Retell AI): Used for delivering voice receptionist capabilities and transactional SMS notifications.
- Calendar Integrations (Google Calendar): Facilitates real-time appointment synchronizations.
- Analytics Platforms: Aggregated diagnostic metrics to improve platform speed and usability.
6. US State Privacy Rights & Cookie Disclosures
If you are a resident of California, Colorado, Virginia, Connecticut, Utah, Texas, or another US state with comprehensive privacy legislation, please take note of the following rights regarding cookies and tracking technologies:
6.1 California "Do Not Sell or Share My Personal Information"
Under California Civil Code § 1798.140, the term "sale" or "sharing" of personal information includes disclosing personal identifiers, IP addresses, or browsing history to third parties for targeted advertising or monetary/valuable consideration.
You have the right to opt out of the sale or sharing of your personal information. You can exercise this right at any time by:
- Clicking "Your Privacy Choices / Do Not Sell or Share" and turning off the "Marketing & Data Sharing" toggle.
- Broadcasting an opt-out preference signal via the Global Privacy Control (GPC) in your web browser.
6.2 Global Privacy Control (GPC) Signal Recognition
Booky AI honors the Global Privacy Control (GPC) signal. When our platform detects an active GPC signal from your browser, we automatically disable all advertising, targeting, and non-essential third-party data sharing cookies on your behalf, without requiring you to manually adjust your preferences.
7. How You Can Control and Manage Cookies
You can manage and block cookies using several methods:
7.1 Our Privacy Preference Center
You can adjust your consent choices at any time by clicking the floating Your Privacy Choices button in the bottom-left corner of any page, or through the link located in our footer.
7.2 Browser Controls
Most browsers allow you to refuse or delete cookies through browser settings. For guidance:
- Google Chrome Cookie Settings
- Mozilla Firefox Cookie Settings
- Apple Safari Cookie Settings
- Microsoft Edge Cookie Settings
7.3 Industry Opt-Out Initiatives
You can also opt out of interest-based advertising from participating companies through the following self-regulatory programs:
8. Changes to this Cookie Policy
We may periodically update this Cookie Policy to reflect changes in our operational practices, technologies, or legal obligations. When changes are made, we will update the "Last Updated" date at the top of this policy and notify users via prominent notices or updated consent prompts where legally mandated.
9. Contact Us
If you have questions regarding this Cookie Policy or how we handle tracking technologies, please contact our Data Privacy Team:
- Email: [email protected]
- Contact Form: booky-ai.com/contact/
- Mailing Address: Booky AI Ltd., Privacy Operations, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom