Privacy Policy

Last updated: May 2025

1. Who collects your data

moboo is operated by its founder (contact: contactmoboo404@gmail.com / contactmoboo404@gmail.com). The service is operated from Canada (Quebec) and is accessible worldwide.

2. Data collected

Account owner data: name, email address, password (hashed — never stored in plain text), business information (name, phone, address), opening hours, chosen language.

Client data of account owners: name, email address, appointment date and time, notes left during booking, language used during booking.

Technical data: IP address, browser type, pages visited, session duration.

Payment data: fully processed by Stripe — moboo never stores credit card numbers.

3. Why this data is collected

Contract performance: provide automated appointment booking service.
Legal obligation: tax compliance and billing.
Legitimate interest: service improvement, security, fraud prevention.
Consent: sending service-related emails (confirmations, reminders, subscription notifications).

4. Retention period

Account data: duration of subscription + 3 years after cancellation (accounting and legal obligations).
Appointment data: 1 year from the appointment date.
Navigation data: maximum 13 months (GDPR compliant).
Upon deletion request: data deleted within 30 days.

5. Your rights

You have the following rights regarding your personal data:

Right of access: request a copy of your data.
Right of rectification: correct inaccurate information.
Right to erasure: delete your account and all your data.
Right to portability: receive your data in a machine-readable format.
Right to object: object to certain processing activities.

To exercise these rights: contactmoboo404@gmail.com

6. Third-party data sharing

moboo uses the following sub-processors to provide its service:

Stripe (payments) — stripe.com/privacy
OpenAI / GPT-4o (AI chatbot conversation processing)
Vercel (hosting) — vercel.com/legal/privacy-policy
Resend (automated email sending)
Supabase (authentication and database)
Meta (Facebook Pixel) (advertising campaign measurement, only with your consent) — facebook.com/privacy/policy
Microsoft Clarity (visitor behavior analytics, session recordings, only with your consent) — privacy.microsoft.com

moboo never sells your data to third parties. Ever.

7. Cookies

Strictly necessary cookies: login session, language preferences. No consent required.
Analytics and advertising cookies: Meta Pixel and Microsoft Clarity, used only after your explicit consent via the consent banner shown when you arrive on the site. You can opt out at any time, and your choice is respected.

8. Security

Data is transmitted via HTTPS (SSL/TLS encryption). Passwords are hashed and never stored in plain text. Data access is restricted to authorized personnel only. moboo applies current security best practices.

9. Changes

moboo reserves the right to modify this policy at any time. In case of significant changes, users will be notified by email at least 30 days before the new provisions take effect.

10. Contact and supervisory authorities

Contact: contactmoboo404@gmail.com

Quebec: Commission d'accès à l'information du Québec (CAI) — cai.gouv.qc.ca
France: CNIL — cnil.fr
Spain: AEPD — aepd.es