Privacy Policy

Last updated: October 18, 2026

Okiba provides booking websites and business management tools for service businesses. This notice explains what information we handle, why, and the choices available to business owners, staff, booking customers, and site visitors.

1. Who is responsible for the data?

Okiba operates the platform and decides how to use its own account, billing, support, and marketing data. Each business decides what customer and staff details it enters or collects through its booking site and is responsible for its services and its own privacy notices. Okiba processes that business data to provide the platform. Contact the business directly about its booking records; you can also contact Okiba for help routing a request.

2. Information we handle

We handle account names, email addresses, authentication identifiers, business profiles, staff and service details, booking details and customer contact information entered into the service, support messages, and subscription or payment references. Our systems also receive basic request and device information needed to operate and secure the service. Payment card details are handled by Stripe; Okiba receives payment status and references rather than full card numbers.

3. Why we use it

We use information to create accounts, publish booking sites, manage appointments and calendars, send transactional messages, process subscriptions and customer payments, provide support, prevent abuse, maintain security, and improve the service. We use optional measurement only after the relevant visitor allows it. Where consent is required, you may withdraw it through the privacy choices shown on the site.

4. Service providers and integrations

Okiba uses Firebase/Google for authentication and data storage, Vercel for hosting, Stripe for payments, Brevo for transactional email, and Google Calendar when a business connects a calendar. If measurement is enabled and accepted, Google Ads or Vercel Analytics may also receive measurement data. These providers process information under their own terms and may operate in other countries. A business may also enable its own Google Ads tag for its booking site.

5. Website measurement and choices

With permission, Okiba records marketing page views and signup steps using a random session ID, page path, time, broad device type, referrer source, and permitted campaign parameters. A business can enable similar visit and booking counts on its site. Contact details and passwords are excluded from these measurement events. Do Not Track and Global Privacy Control signals block this optional collection. You can decline or change the choice using the privacy control on the relevant site. Some browsers and providers may use cookies or local storage for authentication, payments, and consent settings.

6. Disclosure and advertising

We disclose data to the providers above to run the service, to a connected business for its bookings, or when required by law. We do not sell customer lists. When you allow optional Google Ads measurement, Google may receive event and attribution data; privacy laws may treat that as sharing for advertising. Declining measurement prevents Okiba from sending those optional events. We do not use booking contact details for ad personalization.

7. Retention and deletion

We keep account, booking, billing, and support data while needed for the service and applicable legal or accounting duties. New, unsubscribed trial business data is scheduled for deletion 90 days after trial expiry. Okiba acquisition events have 90 day expiry and are also cleaned by a scheduled task. Business website analytics records have 90 day expiry timestamps, but automatic deletion depends on Firestore TTL being enabled and may not be immediate. Payment, calendar, email, hosting, and backup copies may follow provider or legal retention schedules. Contact us about specific records or deletion requests.

8. Your privacy rights

Depending on your location, you may ask to access, correct, export, or delete your personal information, object to or restrict some uses, or withdraw consent. Contact service@okiba.net. We may need to verify your identity and may retain information where law requires it. Booking customers should also contact the business they booked with. We will respond under applicable law and will not discriminate for exercising privacy rights.

9. Security and incidents

We use access controls and service provider safeguards to protect information, but no online service can promise perfect security. If we discover a security incident, we will investigate it and notify affected people and authorities when required by law. Report a suspected issue to service@okiba.net. Business owners should manage staff access, protect account credentials, and avoid entering unnecessary sensitive information.

10. Changes to this policy

We may update this notice as the service or law changes. We will post the revised date here and give additional notice when required.

Contact Okiba

For privacy questions or requests, email service@okiba.net.