Privacy Policy

1. Who We Are

BookMo ("we," "us," "our") is an AI-powered Facebook Messenger receptionist service operated by BOOKMO INFORMATION TECHNOLOGY SERVICES, a sole proprietorship registered with the Philippine Department of Trade and Industry (DTI Business Name No. 8362154).

We provide AI-assisted messaging automation for aesthetic clinics, dermatology clinics, dental clinics, and similar healthcare-adjacent businesses in Metro Manila and across the Philippines.

Contact for privacy questions: getbookmo@gmail.com

2. What This Policy Covers

This policy explains what information we collect when patients interact with a BookMo-powered Facebook Page, how we use that information, who we share it with, and what rights patients and clinic owners have regarding their data.

This policy applies to:

• Patients who send messages to a Facebook Page powered by BookMo
• Clinic owners and staff who subscribe to and use BookMo services
• Visitors to getbookmo.com

3. Information We Collect

3.1 From Patients Messaging a BookMo-Powered Page

When a patient sends a Facebook Messenger message to a Page using BookMo, we collect:

• Facebook User ID (sender_id) — a numeric identifier Facebook assigns to each user
• Message content — the text of the messages the patient sends and the AI-generated replies
• Name and phone number — but only if the patient voluntarily provides them (e.g., when booking an appointment)
• Service interest — inferred from the conversation content (e.g., "facial," "acne treatment")
• Timestamps — when each message was sent
• Language preference — inferred from how the patient writes (English, Filipino, or a mix)

We do not collect:

• Facebook profile photos, friend lists, or private profile information
• Facebook posts or content from other pages
• Health records, medical history, or medical diagnoses
• Payment information from patients
• Location beyond what a patient volunteers in their message

3.2 From Clinic Owners

When a clinic subscribes to BookMo, we collect:

• Business name, address, contact information
• Email address for notifications and billing
• Facebook Page administrative access (granted by the clinic, revocable at any time)
• Billing and payment information (processed by our payment processor — see Section 7)

4. How We Use This Information

4.1 To Provide the BookMo Service

• Generate AI-powered replies to patient inquiries
• Store conversation history so the AI can maintain continuity across messages
• Capture leads (name and phone number when volunteered) and pass them to the clinic
• Send lead notifications to the clinic owner's email
• Provide performance dashboards and reports to clinic owners

4.2 To Improve the Service

• Analyze aggregated, anonymized conversation patterns to improve AI response quality
• Monitor for and address technical issues

4.3 To Communicate

• Send service updates, security notices, and support communications to clinic owners
• Respond to patient or clinic inquiries about their data

We do not use patient data for advertising, marketing to patients, or selling to third parties.

5. Legal Basis for Processing

We process data based on:

• Legitimate interest — providing the clinic reception service the patient is voluntarily using by messaging the clinic's Page
• Consent — where patients voluntarily provide their name, phone number, or other identifying information
• Contractual necessity — to deliver the service clinic owners have subscribed to
• Legal compliance — where required by Philippine law (Republic Act 10173, the Data Privacy Act of 2012) or Meta Platform Policies

6. How We Store and Protect Data

6.1 Storage

• Patient conversation data is stored in Google Sheets owned by BookMo and shared with the respective clinic
• Data is hosted on Google's cloud infrastructure (typically US or EU data centers, per Google's routing)
• Access is protected by Google's authentication systems and two-factor authentication on all BookMo administrator accounts

6.2 Security

• All communications between BookMo services (n8n workflow automation) and Facebook, Google, and OpenAI use HTTPS encryption
• API keys and access tokens are stored in encrypted environment variables, never in plain text within workflows
• Only authorized BookMo team members have administrative access
• Facebook Page Access Tokens are rotated periodically as a security best practice

6.3 Retention

• Patient conversation data is retained for as long as the clinic is subscribed to BookMo, plus 90 days after cancellation for transition purposes
• Clinic owners may request earlier deletion at any time (see Section 9)
• Aggregated, anonymized analytics data may be retained indefinitely

7. Third Parties We Share Data With

BookMo uses the following third-party services to deliver its functionality. Each has its own privacy policy:

Service	Purpose	Privacy Policy
Meta Platforms (Facebook / Messenger)	Messaging infrastructure	facebook.com/policy.php
OpenAI	AI model that generates message replies. Patient messages are sent to OpenAI's API for processing. OpenAI does not retain conversation data for training when accessed via API.	openai.com/policies/privacy-policy
Google (Sheets, Gmail)	Data storage and email notifications	policies.google.com/privacy
DigitalOcean & n8n	Cloud hosting and workflow automation infrastructure	digitalocean.com/legal/privacy-policy n8n.io/legal/privacy
PayMongo	Payment processing for clinic subscriptions (does not process patient data)	paymongo.com/privacy

We do not sell patient data to anyone. We do not share patient data with advertisers, marketers, or unrelated third parties.

8. Legal Disclosure

We may disclose data if required by:

• A valid court order or subpoena from Philippine courts
• Investigation by the Philippine National Privacy Commission
• A lawful request from law enforcement in connection with an investigation
• Enforcement of our Terms of Service

We will notify affected parties of such disclosures where legally permitted.

9. Your Rights

Under the Philippine Data Privacy Act (RA 10173), and consistent with international best practices, patients and clinic owners have the right to:

• Access — Request a copy of the data we hold about you
• Correction — Ask us to correct inaccurate information
• Deletion — Ask us to delete your data
• Objection — Object to how we process your data
• Portability — Request a copy of your data in a portable format
• Complaint — File a complaint with the National Privacy Commission (privacy.gov.ph)

To exercise any of these rights

Email us at getbookmo@gmail.com with:

• Your full name
• The Facebook Page and clinic the request relates to (if applicable)
• What you're requesting (access, deletion, correction, etc.)

We will respond within 15 business days.

Data Deletion Request

Patients who want their data removed from BookMo systems can:

1. Email getbookmo@gmail.com with subject line "Data Deletion Request"
2. Include the Facebook Page name of the clinic they messaged
3. We will delete their conversation history within 15 business days
4. Confirmation will be sent by return email

Alternatively, patients can request deletion directly through Facebook by removing the BookMo-powered clinic Page from their Messenger contacts. See our dedicated Data Deletion page for full instructions.

10. Children's Privacy

BookMo is intended for use by adults (18+) or minors with parental consent. Clinics offering services to minors are responsible for obtaining appropriate parental consent under Philippine law. We do not knowingly collect data from unaccompanied minors under 18 through the BookMo service.

If we become aware that a minor has provided personal information through BookMo without parental consent, we will delete that information promptly.

11. Meta Platform Compliance

BookMo is built on the Meta Platform APIs and complies with Meta's Platform Policies, Developer Policies, and Data Use Policy. Specifically:

• We only request the pages_messaging permission necessary to reply to patient inquiries on behalf of clinics
• We do not use Meta Platform data for advertising, ad targeting, or discriminatory practices
• We do not sell Meta Platform data or share it with data brokers
• Patient data collected via Messenger is used solely to deliver the reception service the clinic has subscribed to
• We honor patient opt-outs and Messenger's blocking mechanisms immediately

12. International Data Transfers

Because BookMo uses cloud services provided by Google, OpenAI, and other US-based companies, patient data may be transferred to and processed in the United States or European Union. All such transfers are subject to appropriate legal safeguards, including standard contractual clauses where applicable.

13. Changes to This Policy

We may update this policy from time to time. Material changes will be announced by:

• Updating the "Last Updated" date at the top of this page
• Posting a notice on getbookmo.com
• Emailing subscribed clinic owners at their registered email address

Continued use of BookMo after changes are posted constitutes acceptance of the updated policy.

14. Contact

For all privacy-related questions, data access requests, deletion requests, or concerns:

You may also file a complaint with the Philippine National Privacy Commission:

This privacy policy is provided in English. A Filipino translation is available upon request at getbookmo@gmail.com.