Legal

Privacy Policy

Last updated August 22, 2026

Who we are

booked.bio is operated by Zainab Hareem Tayyab. This policy explains what data we collect when you use booked.bio, why, and how you can control it.

What we collect

Account holders (creators):

  • Account info: email address and password (handled by our authentication provider, Supabase; we never see your raw password).
  • Profile info: username, display name, avatar, and the content you add to your page(s).
  • Uploaded media: images and files you add to your page, stored securely with our storage provider.
  • Brand inquiries: messages, budgets, and deadlines that brands submit to you through your page's contact form.
  • Basic usage stats for your own pages (views and clicks), so you can see how your page is performing.
  • Billing info, if you subscribe to a paid plan: handled entirely by our payment processor, Paddle. We do not store your card details.

Visitors to a booked.bio page:

  • Anonymous page-view and click events, used only to power the creator's own on-page stats.
  • Anything you voluntarily submit through a page's contact/inquiry form (name, email, message).

What we don't do

We don't use third-party advertising or tracking analytics, and we don't sell your data. We don't require a cookie banner because we don't use non-essential tracking cookies.

How we use your data

  • To operate your account and display your page(s).
  • To deliver brand inquiries to your dashboard.
  • To process payments and manage your subscription, via Paddle.
  • To send account-related emails (e.g. inquiry notifications, billing receipts).
  • To keep the service secure and prevent abuse.

Data after cancellation

If you cancel a paid plan, your account and page content remain under your Free plan limits. If you delete your account, we delete your profile, page content, and uploaded media within 30 days, except where we're required to keep billing records for legal or tax purposes.

Third parties we use

  • Supabase — authentication, database, and file storage.
  • Paddle — payment processing and billing (acts as merchant of record).
  • Our email provider — for transactional emails (e.g. inquiry notifications, receipts).
  • Vercel or our hosting provider — to run the application.

Each of these providers only receives the data needed to perform their function.

Your rights

You can access, correct, export, or delete your data at any time from your account settings, or by emailing us. If you're in the EU/UK, you have rights under GDPR including the right to request a copy of your data or ask us to delete it.

Contact

Questions about this policy or a data request? Email support@booked.bio.