Privacy Policy

Last updated: 2026-10-20.

What we collect

• Business owners: name, email, password (stored as a salted hash), business details (address, phone, services, prices, hours), their photo, and team members' names and photos.
• Business registration: the type of business, its legal and trade names, where it is registered and its registration number. We use it only to check public records that the business exists. It is private: only the owner and our team see it; it is never shown to customers, search engines or AI assistants. It is deleted when the account is closed.
• Verification: the result of the identity check (performed by Stripe) and whether the verified name matches the business's legal name (we keep only the yes or no, not the name), and, if the owner uploads them, license and insurance documents with their number, issuer and expiry date.
• Okalo Line (when available): if you call Okalo's phone line, an automated AI assistant answers. What you say is turned into text and sent to our phone, speech and AI providers only to find and book a professional during the call. We don't keep recordings or transcripts of these calls. We keep the number you called from, the time, the length of the call and whether a booking was made, for up to 90 days, to apply call limits and prevent abuse. A booking made in the call is kept like any other booking, and the professional gets your name, phone number and what you asked for.
• One free trial per business: to stop the same business or person from starting free trials again and again, we keep one-way codes (hashes) of the owner's email, the business phone, its website or social page and, if the owner verifies their identity, their verified name and date of birth. They can't be turned back into the original details. We keep them for up to 3 years, even if the account is deleted, and use them only to check new sign-ups and listings.
• Customers: name, phone, email, service address, who the appointment is for, what they need, notes they or their assistant submit with a booking or quote request, and any reference photos they choose to attach (kept in private storage and visible only to the business receiving the booking).
• Reviews and reports: rating and comment; for safety reports, what happened and the reporter's name and contact details.
• Support: the name, email and message you send us.
• Testimonials: if you send us your experience, we keep your name, city, comment, rating, photo (if you add one), your email (never published) and the exact permission text you agreed to, with the date. We only publish what our team approves, and we remove it whenever you ask.
• Waitlist: if you search for a service where no professionals are listed yet and leave your email, we keep that email and what and where you searched, only to tell you when professionals become available.
• Launch list: if you leave your email on our "Launching soon" page, we keep it with your language, whether you run a business or want to book, and the site or ad that brought you to the page (for example "Facebook" or "LinkedIn", read from the link you clicked), only to send you one email when we open and to know which ads work. Ask us anytime to delete it.
• Launch notification on your device: if you tap "Notify me on this device" on our "Launching soon" page, your browser gives us a notification address for that device (not your name or email). We keep it with your language only to send you one notification when we open. Turn it off on that same page or in your browser or phone settings.
• Status emails: if you subscribe on our status page, we keep your email, your language and when you confirmed, only to email you about problems we post there. Each email has a one-click unsubscribe, which deletes your address; requests nobody confirms are deleted after 7 days.
• Payments: subscriptions and customer payments to businesses are handled by Stripe. We never see or store full card numbers; Stripe shares with us the subscription status.
• Plan changes: when an owner confirms a plan change, we keep what was shown (plan, amounts and dates), the date, the IP address and the type of browser, as proof of their authorization, for as long as the account exists.
• Technical data: which assistant or website sent each request, basic usage statistics, your approximate country (reported by our hosting provider) and your IP address, kept for up to 31 days to prevent abuse.
• Cookies: a session cookie to keep you logged in, a language cookie and, if you have an account, a cookie that remembers this browser so we can email you if someone opens your account from a new one. We don't use advertising cookies.
• Account security: when you sign in from a new browser we email you the date, the type of browser and the approximate city (estimated from the IP address). We don't keep those details apart from the email.
• Robot protection: some forms use Cloudflare Turnstile, which checks browser signals to confirm you're a person.
• WhatsApp (when available): only if you choose WhatsApp for updates when booking, we send your confirmation, reminders and changes about that appointment to your number through Meta's WhatsApp Business service. If you write to Okalo's WhatsApp number, we keep the conversation for 30 days to answer you and to show it to the business you booked with. Reply BAJA or STOP to stop.
• Text messages (when available): only if you check "Text me" when booking, we text your confirmation, reminders and changes about that appointment to the number you gave, through our SMS provider. Reply STOP to stop. Message and data rates may apply. We never use your number for marketing or share it for others' marketing.
• Customer sign-in, waitlist and reminders: if you ask for a sign-in link, we email it to you and keep a sign-in cookie for up to 90 days. If you join a day's waitlist, we keep your email until that day and email you once if a time opens. Businesses can turn on "time to book again" emails a few weeks after a visit; each has a link to stop them.
• Search near you: if you tap "Near me", your browser shares your approximate location for that search only. We don't store it.
• Business location and "Available now": we place each business on the map from its address (using OpenStreetMap) or, if the owner chooses, from their device's location. While "Available now" is on and the professional shares their device's location, we use it to show customers the distance, and delete it when it ends. Customers only see an approximate distance (whole numbers, worked out from a position rounded to about 2 km when it comes from a device), never the exact location.
• Okalo Now (urgent requests): when you ask for help right away, we use your location or the address you type to alert the nearest available professionals. They see the kind of service, your description and the distance; only the one who accepts sees your name, phone number and address, as with any appointment at your place. If you type an address, we look it up on OpenStreetMap to place it on the map. If a professional accepts, the address (or your map position, if you didn't type an address) is saved on the appointment, like any booking at your place. We erase your location and the address from the request when it closes or is accepted, and delete the request after 30 days.
• "On my way" location: when a professional taps "On my way", their phone shares its location with that customer until they arrive or stop sharing (at most 3 hours). Then the location is erased. If you're the customer and tap "Use my location", it stays on your phone and is only used there to estimate the arrival time.
• Phone notifications for businesses: if a business owner turns them on, their browser gives us a technical address to deliver notifications to that device. Turning them off deletes it.

How we use and share it

Booking details are shared with the business that receives the booking, so it can provide the service, and with the assistant or app that made the booking, to confirm it. We send emails about bookings, reviews and your account. We do not sell personal information.

Service providers

Cloudflare (hosting and database), Stripe (payments and identity checks), an email delivery provider, Google (sign in with Google), OpenStreetMap and OpenFreeMap (maps), Twilio (phone calls and text messages), Meta (WhatsApp), Expo, Apple and Google (app notifications), and an automated text and image service that writes the answers of the help chat, the AI receptionist, the Okalo Line, "Show me the problem" and AI estimate drafts.

Help chat

Questions typed in the help chat are sent to the automated text service only to write the answer, and are not stored by Okalo after the conversation. The help chat cannot see your account, bookings, payments or documents, and those are never sent to it. Please don't type passwords, card numbers or ID numbers in the chat.

"Show me the problem" and AI estimates

If you use "Show me the problem", your photos and description are sent to the automated service only to answer you (what kind of pro you need and what to tell them). Okalo doesn't keep those photos or the answer. Businesses can use photos and notes of a job to have the AI draft an estimate with their own listed prices (for parts or labor the business hasn't listed, the AI may suggest typical prices marked "Est.:"); those photos aren't kept either, and the business reviews the draft before sending it. It's an automatic estimate, not an inspection. Please don't include people's faces or personal documents in photos.

Forms you sign

If a business asks you to fill in a form or waiver before your appointment, your answers, your typed name, an optional drawn signature, the date and time, your IP address and type of browser are saved as the signed copy. Only that business (and our staff when needed for support or legal requests) can see it. Health answers are shared only with that business.

AI receptionist

Businesses can turn on an AI receptionist that answers on their page and, when available, on Okalo's WhatsApp number. Your messages, the business's public information and its open times are sent to the automated text service to write each answer. To book, change or cancel, it uses the same booking rules as the booking page. The conversation is kept for 30 days so the business can read it, then deleted. On WhatsApp it can show, move or cancel only the appointments made with your own phone number. When available, businesses will also be able to use it to answer their phone: the call's audio is turned into text and back into speech by our telephone provider (Twilio) as you talk; we keep the text of the conversation (30 days) and your number and call length, not a recording.

Offers, loyalty and birthdays

If a business turns on its campaigns, Okalo emails you on its behalf: "We miss you" messages, your birthday gift (only if you added your month and day) and its discounted open times. Every email has a link to stop them. If the business runs a loyalty program, we keep your visits or points with that business, identified by your phone or email.

Okalo Pro app (for businesses)

The businesses' phone app uses the professional's location only during an "On my way" trip they start themselves, including with the screen off, and shares it only with that appointment's customer. It stops on arrival, on "Stop sharing", or after 3 hours, and the coordinates are erased when the trip ends. We keep the device name and a notification token to announce new bookings; the business can sign a phone out from its dashboard.

Verification documents

License and insurance documents are stored in private, encrypted storage with no public address. Only the owner and our verification staff can open them. They are never shown to customers, never published, and never shared with search engines, assistants or other third parties. Customers only see badges.

What is public

The business profile, its services, prices and hours, owner and team photos, badges, and reviews (first name, rating and comment).

How long we keep it

Account and booking data for as long as the account exists or until you ask us to delete it. Support messages for 2 years. "One free trial per business" codes for up to 3 years. Owners can delete their verification documents at any time.

Your rights

You can ask for a copy of your data, or ask us to correct or delete it, by writing to support@getokalo.com. Owners can close their account and delete their data from Account in the dashboard, and owners on the Pro plan can also export their bookings and quotes. Customers can cancel bookings from the link in their confirmation and delete their data from "My appointments".

Who we are

Okalo is operated by Okalo Technologies Inc., a Delaware corporation, 8 The Green, Ste B, Dover, DE 19901.