Privacy Policy

This Privacy Policy describes how SilicaSites LLC(“SilicaSites”, “we”, “us”, “our”) collects, uses, stores, and shares information when you use BOOKDAH, including the public website, customer accounts, business portal, related APIs, and notifications. BOOKDAH is a product operated by SilicaSites LLC, a limited liability company registered in Wyoming, United States, serving customers and businesses primarily in the Caribbean.

By using BOOKDAH, you agree to this Policy. Questions: info@silicasites.com.

1. Who we are

The data controller for BOOKDAH platform account data is SilicaSites LLC (SilicaSites LLC - registered in Wyoming, United States). Contact: info@silicasites.com. Businesses that list on BOOKDAH may also process customer booking details for their own purposes when you interact with them; those businesses are separate controllers for that booking relationship.

2. Information we collect

We collect information you provide, information created through use of the service, and limited technical data needed to run it securely.

• Account data - name, email address, password (hashed and handled by our authentication provider), and optional phone or profile fields you add. Business owners may provide business name, category, slug, location, photos, services, rental items, hours, pricing, and cancellation preferences.
• Calendar integration data (business owners only) - if you choose to connect your Google Calendar or Microsoft Calendar, we access and collect: your connected Google account email and account identifier (to label the connection); calendar list metadata (calendar IDs and display names); calendar event details (start and end times, titles, busy/free status, and event IDs) from calendars you select; OAuth access and refresh tokens required to sync your BOOKDAH bookings to your calendar and read busy times; and internal mappings between BOOKDAH bookings and external calendar event IDs. We store OAuth tokens encrypted with industry-standard AES-256-GCM encryption. You control which calendar to sync with, and you may disconnect at any time from your Settings page. See also section 5 (Google Calendar API disclosures).
• Booking and inquiry data - appointment times, services or rentals selected, status (including no-show marks), notes, and related messages between customers and businesses on a booking thread.
• Reviews - ratings, review text, owner replies, and display names or service labels shown with a review. Reports about reviews (including auto-flagged content) may be retained for moderation.
• Payment and subscription data (businesses) - if you subscribe to a paid plan, our payment processor (Stripe) collects payment details. We store related identifiers such as Stripe customer and subscription IDs, plan tier, and trial status. We do not store full card numbers on our servers.
• Location - if you allow browser or device location, we use approximate coordinates for distance and near-you sorting. You may refuse permission. Business profiles may include coordinates or addresses the owner provides.
• Technical and usage data - IP address, device and browser type, pages or screens viewed, timestamps, error logs, and first-party product analytics events needed to operate, secure, and improve BOOKDAH. Session identifiers may be stored in local storage or cookies.
• Push subscriptions (business portal) - if an owner enables web push, we store the subscription endpoint and keys required to deliver alerts.

3. How we use information

• Create and administer customer and business accounts.
• Provide booking, messaging, review, rental request, and related marketplace features for the Caribbean.
• Calendar synchronization (business owners only) - when you connect a Google Calendar or Microsoft Calendar account, we use your calendar data solely to: (a) automatically create, update, or delete calendar events in your connected calendar when bookings are made, modified, or cancelled on BOOKDAH; (b) read busy times from your calendar to prevent double-bookings and show accurate availability to customers; and (c) generate read-only iCal subscription feeds you can use with other calendar applications. We use calendar data exclusively to provide and improve these calendar synchronization features for your business. We do not use calendar data for advertising, selling to data brokers, training AI/ML models, or any purpose unrelated to your calendar integration.
• Send transactional communications (account verification, password reset, booking and message notices) through our email and notification systems.
• Process business subscription billing via Stripe.
• Moderate content and enforce our Terms of Service, including review reports and account suspension for abuse or risk.
• Maintain security, prevent fraud, debug outages, and improve the product.
• Comply with law and respond to lawful requests.

We do not sell personal information. We do not share personal information with third parties for their independent advertising. We do not use Google user data, including calendar data, to develop, improve, or train generalized or non-personalized AI or machine learning models.

4. How information is shared

• Customers and businesses - when you book, inquire, or message, the other party receives the information needed to handle that interaction. Public business profiles and reviews may be visible to visitors of BOOKDAH.
• Service providers- vendors that process data on our instructions, including Supabase (database, authentication, storage, realtime); Stripe (business subscription payments); Hostinger SMTP (transactional email); OpenStreetMap / Nominatim (geocoding); OpenStreetMap and Carto map tiles proxied through our servers (map previews); and infrastructure hosting for the application. For calendar integrations, we connect directly to Google Calendar API and Microsoft Graph API to sync events and read availability; calendar data is not shared with any other third parties. Google Maps may open when you choose an external maps link; that interaction is governed by Google's terms and privacy notice.
• Legal and safety - we may disclose information when required by law, court order, or to protect rights, safety, or the integrity of BOOKDAH and its users.
• Business transfers - if SilicaSites LLC or BOOKDAH assets are involved in a merger, acquisition, or similar transaction, personal data may transfer under continued confidentiality obligations consistent with this Policy.

Important: We do not sell, rent, or disclose calendar data or any Google user data to third parties for purposes other than providing the calendar synchronization features described in this Policy. We do not transfer calendar data to third parties for advertising, creditworthiness determinations, lending purposes, or training AI/ML models.

5. Google Calendar API — Google user data disclosures

This section applies when a business owner connects Google Calendar through BOOKDAH (website business Settings). It describes our use of Google user data in line with Google API Services User Data Policy Limited Use requirements. BOOKDAH does not use Google Sign-In for customer accounts; Google user data is accessed only through optional calendar integration.

Limited Use compliance: The use of raw or derived user data received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5.1 Data access

Raw Google user data we access (only after you authorize the connection):

• Google account email address and Google account identifier (to identify and label your connected account)
• OAuth access and refresh tokens (to maintain the calendar connection)
• Calendar list metadata (calendar IDs and names from your Google Calendar account)
• Calendar event data from calendars you select: event IDs, start and end times, titles, and busy/free (availability) status
• Internal sync records linking BOOKDAH bookings to Google Calendar event IDs

Aggregated or anonymized Google user data: We do not create aggregated, anonymized, or de-identified datasets from Google user data for analytics, advertising, research, or any purpose separate from your calendar integration. Google user data is processed in raw form only to provide calendar synchronization for the business owner who connected the account.

5.2 Data use

We use raw Google user data solely to:

• Create, update, and delete calendar events in your connected Google Calendar when bookings are made, changed, or cancelled on BOOKDAH
• Read busy times from your selected calendars to prevent double-bookings and show accurate availability to customers
• Maintain the connection (token refresh, calendar selection, sync status, and error recovery)
• Generate read-only iCal subscription feeds tied to your business (see section 3)

We do not use Google user data for advertising, retargeting, selling to data brokers, creditworthiness or lending decisions, or developing, improving, or training generalized or non-personalized AI or machine learning models.

5.3 Data transfer

What we share: Raw Google user data is transmitted only between BOOKDAH, Google's Calendar API (and related Google OAuth endpoints), and our infrastructure providers that host encrypted storage and run the application on our instructions (including Supabase for encrypted token storage and database records needed for sync).

What we do not do:We do not sell, rent, or license Google user data. We do not disclose Google user data to advertising networks, data brokers, or other third parties except as required by law or as necessary for the calendar synchronization features described above. Choosing an external Google Maps link is governed by Google's own terms and privacy notice; that is separate from calendar integration.

5.4 Data protection

Google OAuth tokens are encrypted at rest using AES-256-GCM with keys stored separately from ciphertext. All Google Calendar API requests use TLS. Access to Google user data is limited to authorized systems and personnel needed to operate calendar sync. See also section 9 (Security).

5.5 Data retention and deletion

Google integration data (tokens, calendar mappings, and sync history) is retained while your Google Calendar connection is active. When you disconnect Google Calendar in Settings, we delete stored OAuth tokens and calendar mappings within 30 days and revoke ongoing sync. Events already written to your Google Calendar are not automatically removed; you may delete them in Google Calendar if you wish. Account deletion (section 11) removes Google integration data we control, subject to legal retention requirements. You may request deletion at info@silicasites.com.

6. Cross-border processing

SilicaSites LLC is based in the United States. BOOKDAH is designed for users in the Caribbean. Personal data may be processed in the United States and in other countries where our service providers operate. By using the Service, you understand that your information may be transferred to and stored outside your country of residence, subject to the safeguards described here and applicable law.

7. Legal bases (where applicable)

Where data-protection law requires a legal basis, we rely on: performance of a contract; legitimate interests (securing and improving the platform, preventing abuse), balanced against your rights; consent (for optional permissions such as location or push where required); and legal obligation.

8. Retention

We keep account, booking, message, review, and billing-related records while your account is active and for as long as needed to provide the service, resolve disputes, enforce agreements, and meet legal, tax, or accounting requirements. Calendar integration data (OAuth tokens, calendar event mappings, and sync history) is retained while your calendar connection is active. When you disconnect a calendar from your Settings page, we delete the associated OAuth tokens and calendar mappings within 30 days. You may delete your account in Settings (web), which starts a 14-day grace period you can cancel anytime; after that window (or on request at info@silicasites.com) we delete or anonymise personal data we control, including all calendar integration data, except where retention is required or justified by law.

9. Security

We use HTTPS, access controls, and provider security features appropriate to a hosted web application. Calendar OAuth tokens are encrypted at rest using AES-256-GCM encryption with a secure encryption key stored separately from the encrypted data. All calendar API communications use industry-standard TLS encryption. Access to calendar data is restricted to authorized systems and personnel necessary for providing the calendar synchronization features. No transmission or storage method is completely secure. Protect your password and device. Notify us at info@silicasites.com if you believe your account was compromised.

10. Cookies and similar technologies

We use cookies and local storage for authentication sessions, security, preferences (such as theme), and essential product functions. First-party analytics may use a session identifier in local storage. We do not use third-party advertising cookies on the core BOOKDAH product. See also our Cookie Policy at /cookies.

11. Your choices and rights

• Update profile and business information in-product where available.
• Revoke browser location or notification permission at any time.
• Calendar integration controls - you may disconnect your Google Calendar or Microsoft Calendar at any time from your Settings page. Disconnecting stops all future calendar synchronization, deletes stored OAuth tokens within 30 days, and removes the authorization from your Google or Microsoft account. Events previously synced to your external calendar will not be automatically deleted; you can remove them manually if desired.
• Request access, correction, or deletion of personal data we hold, including calendar integration data, or raise a privacy concern, by emailing info@silicasites.com. We may verify your identity before acting.
• Where consent is the basis for processing, you may withdraw consent without affecting prior lawful processing.

Businesses that collect personal data from their clients through BOOKDAH remain responsible for how they use that data outside our systems and for any separate privacy notices they publish.

12. Children

BOOKDAH is for users aged 18 or older. We do not knowingly collect personal information from children. If you believe a child provided us data, contact info@silicasites.com so we can delete it.

13. Changes

We may update this Privacy Policy. The “Last updated” date at the top shows the current version. Material changes will be posted on this page. Continued use after the effective date means you accept the updated Policy.

14. Contact

Privacy requests: info@silicasites.com. Operator: SilicaSites LLC - registered in Wyoming, United States. Product: BOOKDAH. Market: the Caribbean. Governing law for related contracts: the State of Wyoming, United States (see Terms of Service).