Last Updated: October 2026

US State Privacy Notice

California Consumer Privacy Act (CCPA/CPRA), Colorado Privacy Act (CPA), Virginia (VCDPA), Texas (TDPSA), and US State Privacy Disclosures.

Notice at Collection & Do Not Sell or Share

If you are a California resident or resident of another US state with privacy legislation, you have the right to know what personal information we collect, the purposes for which it is used, and the right to opt out of the "sale" or "sharing" of personal data for targeted advertising.

Submit Privacy Request

1. Scope and Application

This US State Privacy Notice ("Notice") supplements the Booky AI general Privacy Policy and applies exclusively to individual residents of United States jurisdictions that have enacted comprehensive consumer privacy statutes, including:

  • California: California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, "CCPA/CPRA", Cal. Civ. Code § 1798.100 et seq.).
  • Virginia: Virginia Consumer Data Protection Act ("VCDPA", Va. Code Ann. § 59.1-575 et seq.).
  • Colorado: Colorado Privacy Act ("CPA", Colo. Rev. Stat. § 6-1-1301 et seq.).
  • Connecticut: Connecticut Data Privacy Act ("CTDPA", Conn. Gen. Stat. § 42-515 et seq.).
  • Utah: Utah Consumer Privacy Act ("UCPA", Utah Code Ann. § 13-61-101 et seq.).
  • Texas: Texas Data Privacy and Security Act ("TDPSA", Tex. Bus. & Com. Code § 541.001 et seq.).
  • Nevada: Nevada Senate Bill 220 / NRS Chapter 603A.

Any terms defined in the CCPA/CPRA or other state statutes have the same meaning when used in this Notice.

2. Notice at Collection: Categories of Personal Information Collected

In the preceding 12 months, Booky AI has collected the following statutory categories of Personal Information from consumers for business and commercial purposes:

Category Examples Collected Business Purpose Retention Period
A. Identifiers Name, email address, phone number, business address, IP address, unique online identifier, account login name. Account setup, identity verification, multi-channel communication, appointment scheduling, billing. Duration of active account + 7 years for tax and accounting compliance.
B. Customer Records Payment details (processed via Stripe), business details, invoicing records, appointment notes. Processing transactions, customer service, booking operations. Duration of customer relationship + statutory audit retention.
C. Commercial Information Subscription plans, transaction histories, service requests, quotes generated, features used. Platform billing, service enhancement, financial audits. 7 years in accordance with legal and financial standards.
D. Internet & Network Activity Browsing history, session duration, clickstream data, search queries, browser type, interaction with widgets. Performance monitoring, error debugging, fraud prevention, traffic analytics. Aggregated or retained up to 12 months.
E. Audio & Voice Information Voice audio recordings, live call transcripts, and conversational intent data generated via AI voice receptionist calls. Delivering AI receptionist call answering, transcribing client booking requests, quality assurance. Configurable by workspace subscriber; default 90 days to 1 year unless deleted earlier by user.
F. Professional / Employment Data Business name, trade industry (e.g. plumbing, cleaning, HVAC), team members, staff roles. Customizing AI prompts, booking calendar dispatch, multi-user workspace management. Duration of workspace subscription.
G. Inferences Caller appointment preferences, recurring job schedules, lead priority scoring. Automating appointment follow-ups and CRM lead assignments. Duration of active customer subscription.

3. Notice of "Sale" or "Sharing" of Personal Information

We do NOT sell your personal information for monetary compensation.

However, under California and certain state definitions, "sharing" includes the disclosure of personal data (such as online identifiers, IP addresses, and browsing behavior) to third-party advertising networks for targeted advertising (cross-context behavioral advertising).

In the preceding 12 months, we may have shared Internet & Network Activity data with analytics and advertising partners to measure campaign effectiveness.

Right to Opt-Out of Sale or Sharing

You have the right to direct us not to sell or share your personal information. To exercise this right:

4. Sensitive Personal Information

We collect sensitive personal information (such as account credentials and encrypted payment tokens) solely to perform the services requested, secure accounts, and comply with legal requirements. We do not use or disclose sensitive personal information for purposes that would require offering a right to limit use under California Civil Code § 1798.121.

5. Your US State Consumer Privacy Rights

Depending on your state of residence, you have the following rights regarding your personal information:

5.1 Right to Know and Access

You have the right to request that we disclose:

  • The categories of personal information we have collected about you.
  • The categories of sources from which the personal information was collected.
  • The business or commercial purposes for collecting or sharing the information.
  • The categories of third parties to whom we disclosed your information.
  • The specific pieces of personal information we have collected about you (data portability).

5.2 Right to Delete

You have the right to request the deletion of personal information that we collected from you, subject to certain legal exceptions (e.g., completing transactions, fulfilling warranty obligations, detecting security incidents, or complying with statutory retention mandates).

5.3 Right to Correct Inaccurate Personal Information

You have the right to request that we rectify inaccurate personal information maintained about you in our records.

5.4 Right to Opt-Out of Targeted Advertising & Profiling

You have the right to opt out of the processing of your personal information for purposes of targeted advertising, the sale of personal data, and profiling in furtherance of automated decisions that produce legal or similarly significant effects.

5.5 Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA or state privacy rights. We will not deny you goods or services, charge different prices, or provide a different level of quality unless permitted by law.

6. How to Submit a Verifiable Consumer Request

To exercise your rights to know, access, correct, or delete your personal information:

  • Email Request: Send an email to [email protected] with the subject line "US Privacy Rights Request".
  • Online Contact Form: Submit a request via our Contact Page.

Verification Procedure

To protect your privacy and security, we must verify your identity before fulfilling your request. We will verify your request by matching the contact details you provide with the information in our active systems (e.g., verifying access to the email address on file or confirming recent account transaction details). We will respond to verifiable requests within 45 days of receipt (extendable by an additional 45 days when reasonably necessary).

Authorized Agents

You may designate an authorized agent to make a request on your behalf. The authorized agent must provide proof of your written authorization (such as a valid power of attorney or signed letter of representation), and we may verify your identity directly with you.

7. California "Shine the Light" Law

Under California Civil Code § 1798.83 ("Shine the Light"), California residents who provide personal information in obtaining products or services for personal, family, or household use may request information regarding our disclosures of certain categories of personal information to third parties for their direct marketing purposes. Booky AI does not disclose personal information to third parties for their own direct marketing purposes without affirmative consent.

8. Nevada Privacy Rights (NRS Chapter 603A)

Nevada residents have the right to opt out of the sale of certain "covered information" to third parties for monetary consideration. Booky AI does not sell covered information under Nevada law. Nevada residents may submit an opt-out inquiry by emailing [email protected].

9. Children's Privacy (COPPA)

Our platform is designed for businesses and is not directed to individuals under 16 years of age. We do not knowingly collect, sell, or share personal information from individuals under 16 years of age. If we become aware that we have collected information from a child under 13 (or under 16 in applicable states) without parental consent, we will take immediate steps to delete the information.

10. Contact Us

If you have questions regarding this US State Privacy Notice or wish to exercise your rights, please contact our Privacy Compliance Officer: