Privacy policy

Who is responsible for the data

The service is run by the bot's developer (who also runs Docker Event Bot), acting as the controller of personal data. You can reach us at dockereventbot@gmail.com (see “Contact” below).

The specialist you book with receives your data in order to see you. How they use it outside the bot — for example, if they call you or keep their own records — is their decision and responsibility.

What we get from Telegram

When you open the bot or the app, we receive from your Telegram account:

• your Telegram user ID;
• your first and last name, and your username (@handle) if you have one;
• your interface language;
• if you create a specialist page — a link to your Telegram profile photo, if you keep it on the page.

If you book a specialist

• your bookings: with whom, which service, date and time, status, reschedules and cancellations — and who cancelled;
• notes to the booking, if you wrote any;
• your phone number — only if the specialist asks for it when booking and you entered it;
• your personal notification settings in the Profile — which messages the bot sends you;
• the reason for a cancellation, decline or reschedule — yours or the specialist's, if given;
• your client card with this specialist: name, @handle, phone, number of visits and no-shows. The specialist can add a private note about you and a “don't accept bookings” mark — only they see these, they are not shown to you.

If you are a specialist

• your page: name, what you do (a category from the list and your own title), city and the “I work online” mark, icon, Telegram photo or your own picture (we store it downsized, without location data), “about” text, address and map link, link address and previous addresses for 7 days after a change (so old links still lead to the page), time zone, currency, the message shown while bookings are paused, and the “Show in the catalog” and “Clients can message me” choices;
• work photos, if you add them (up to 8, downsized, without location data): anyone who opens your page sees them; they are deleted one by one or together with the page;
• links to your social media and website, if you add them (up to 5): anyone who opens your page sees them as buttons; they are deleted one by one or together with the page;
• services and prices, working hours, days off, blocked time with labels, booking rules and notification settings;
• your agreement to the terms of use — which version you accepted and when;
• your clients' bookings and client cards — including clients you added manually by name and phone — and your notes about them.

When you add a client manually, you enter their data into the bot yourself: do so only if the client doesn't mind, and use it only for booking.

If you are in a salon

• salon owner: the salon page — name, subtitle and category, city or “online”, address and map link, picture, photos, social media links, price list, booking rules, link address — and the secret invite link for specialists;
• salon member (specialist or administrator): which salon you're in and in what role, when you joined and left, your salon card (name, profession, icon or picture, about text), your working hours, days off and busy time at the salon, and the bookings and client cards of the salon clients you served.

A specialist has one schedule across all their pages: a booking at a salon takes their time on their own page too, and vice versa, so to count free time the bot matches the person's bookings and busy time across all their pages.

Reviews and feedback

• your rating and optional review of the bot, if you send one — with your Telegram first name (no last name), @handle and whether the review may be shown on the website;
• messages from the “Idea or bug” form, if you send them: type, text and time, plus the app version, platform (e.g. iOS) and language — so the bot's author can look into it and reply to you. We don't store screenshots: the app shrinks them on your device and strips file metadata (such as location), and the server passes them straight to the bot's author in Telegram;
• a review of a specialist after a visit, if you leave one: rating, optional text and your Telegram first name (no last name or username);
• the waitlist, if you ask to be notified when a slot opens: which specialist, service and day. It's deleted as soon as the bot has messaged you, and also when you book with that specialist, when the day has passed, or after 30 days.

Service data

• the dates you first and last used the bot, and your Telegram language code;
• which booking messages have already been sent (reminders, “book again”, “time for another visit”, the morning summary) — so they aren't sent twice.

What we do NOT collect

We don't ask for or store passwords (you sign in through Telegram), payment or card details (the bot doesn't take payments), documents, your contacts, location or chats. A phone number appears in the bot only if you or the specialist entered it.

Why we process data

• To provide the service you asked for: show free time, book you, send the confirmation, reminders, “time for another visit” (if the specialist turned it on for the service) and messages about reschedules and cancellations. The bot can't work without this.
• So the specialist can manage bookings: schedule, requests, clients, statistics and the free-slots text — that's what they use the bot for.
• To protect the service and specialists from abuse: limit the number of upcoming bookings per client and the request rate, and let a specialist stop accepting bookings from a particular person — our legitimate interest.
• To handle bot reviews and “Idea or bug” messages and reply when needed — based on the consent you give by sending them.
• To show your bot review on the dockerbot.app/visit/ website — only if you ticked “Can be shown on the website”, based on that separate consent. The bot's author decides which of the allowed reviews to show.
• To show your review of a specialist on their page — based on your consent: you decide to leave it, see where it will appear, and can delete it.
• To reply to your emails — based on your request.

Where data is stored and who sees it

Data is stored in our own database on our server — encrypted, as are its backups; the encryption key is kept separately from them. We don't sell data or pass it to advertisers or other third parties for their own purposes.

• A specialist sees about their clients: name and @handle, phone (if given), bookings with them, notes, history of visits and no-shows, and whether you confirmed a visit with “I'll be there” in a reminder. They don't see bookings with other specialists. If the specialist connected their own calendar (Google or Apple), bookings with them — with your name and phone — appear there too.
• Visit record. Specialists you book with see three numbers for the past 12 months, across all specialists together: how many visits, no-shows and late cancellations (you cancelled a confirmed booking less than 2 hours before the start, not in the first 10 minutes after booking) you had. No reasons, dates or specialists' names. A no-show is marked by the specialist; a late cancellation can be left out by the specialist you had the booking with. You see the same numbers in your Profile. After you delete your data with /privacy, the record is no longer counted.
• Salons. If you book at a salon, your booking, client card and visit history there are seen by the specialist you booked with and by the salon's owner and administrators. Salon clients belong to the salon: when a specialist leaves, the history stays with the salon and the specialist loses access to it. If you are a specialist at a salon, its owner and administrators see your schedule, bookings and clients at the salon; your time on your own page and at other salons they see only as “busy” — without clients or the name of the place. Everyone who opens the salon page sees your salon card.
• A client sees the specialist's page and free time. They don't see other clients — only that a time is taken.
• A specialist's page is visible to all bot users in the app's catalog: name, title and category, city or “online”, picture, the first services and the average rating. You can take the page out of the catalog with the “Show in the catalog” switch — it stays available by link. The bot's author gets a message about every new page, own picture, work photo and social media or website link and can remove a page from the catalog or delete a photo or link.
• The “Add to calendar” link leads to a file with the service, the specialist's name, address and booking time — without your data. The file opens without signing in to Telegram, so don't forward the link if you don't want to show when your booking is. The “Google Calendar” option opens Google's website with the service, the specialist's name, address and time already filled in — Google receives this data, and only if you choose this option yourself.
• Clients see a specialist's @username only if the specialist turned on “Clients can message me”: then their page and bookings have a Message button.
• Everyone who opens a specialist's page sees reviews of them: first name (no last name or username), rating, text and date. The specialist can hide the text — the rating then stays in the average to keep it honest.
• The bot's author reads bot reviews and “Idea or bug” messages — they arrive in their Telegram with the screenshots; if they reply, the bot forwards the answer to your DM.
• If you allowed it and the bot's author chose your bot review, any visitor to dockerbot.app/visit/ sees it: first name (no last name or username), rating and text, sometimes with a translation into the page's language. The average and the number of reviews on the website are aggregated, without names. You can withdraw consent at any time: turn the switch off and send the review again, or delete your data — the review disappears from the website within a minute. A changed review is taken off the website automatically until the bot's author looks at it again. A removed review may stay in search engines' cached copies for a while — that's beyond our control.
• Telegram as a platform processes your messages under its own privacy policy, which we don't control.
• The bot runs at a hosting provider that stores data on our behalf.
• We disclose data to authorities only on a lawful request and to the extent the law requires.
• If you play the video on the website, it is shown by YouTube (Google) — see the section about the website.
• Emails you send to our address are stored in Google's email service (Gmail). We use them only to reply to you.

Website and app

The dockerbot.app/visit/ website itself doesn't set cookies or load third-party visit counters. The server keeps a technical request log — time, page opened, browser type and the site you came from (only its address, e.g. google.com) — without IP addresses; an address may only appear in rare server error records. The log is kept for 14 days.

To see whether the site gets read, a page itself sends an anonymous mark to our own server: which page, theme, screen width in steps, how far you scrolled (in quarters), how long you stayed (in steps) and whether the video was started; the “Create a page” buttons and the link to the bot go through our address so we can count clicks. No identifiers and nothing stored on your device — these marks can't tell that two visits were made by one person. If your browser has “Do Not Track” or Global Privacy Control on, no mark is sent. Daily totals — numbers only — are kept longer than the log.

The home page has a YouTube video. Until you start it, nothing is sent to YouTube: the preview image loads from our own server. When you press play, the player loads from youtube-nocookie.com and from then on the video is shown by YouTube (Google): it receives your IP address and browser details and may store data in your browser, under Google's privacy policy (policies.google.com/privacy). Our server only learns that the video was started — nothing about you.

The theme and language you choose on the website and in the app, and the city in the catalog filter, are stored only in your browser.

City names in the app come from the open GeoNames database (geonames.org, CC BY 4.0 license). It is a directory of places, not your data: what you type in the city field goes nowhere but our server.

How long we keep data

We keep data as long as it's needed for bookings, history and statistics. You can delete your data yourself at any time with the /privacy command to the bot: it happens automatically and immediately, and it can't be restored.

To delete only your specialist page, use the “Delete page” button in the app (Workspace → “Page & link”): the page is deleted as described below for specialists, while your data as a client, your reviews and messages stay.

• If you booked: upcoming bookings are cancelled and the specialist gets the usual cancellation message. Past bookings stay in the specialist's statistics, anonymized — without your name, @handle, phone, notes and their note about you. If the specialist stopped accepting your bookings, that mark stays (without a name) — otherwise deleting your data would lift it.
• If you are a specialist: your page is deleted entirely — services, schedule, your own picture, client cards and all bookings with you; the page disappears from the catalog and previous link addresses are freed. The bot tells clients with upcoming bookings that they're cancelled.
• If you are a specialist at a salon and leave it (or are removed): your upcoming bookings at the salon are cancelled and the bot tells the clients; past bookings and client cards stay with the salon. After /privacy you leave all salons, and your name, profession, picture and busy time don't stay in the salon's history.
• If you own a salon: when the salon is deleted (the “Delete salon” button or /privacy), the salon page, price list, members, their bookings and the salon's clients are deleted; the bot tells clients with upcoming bookings and the specialists. Specialists' own pages are not affected.
• Of your bot review only the number of stars stays in the average — without a name, text or link to you. Of your reviews of specialists, likewise only the stars stay in their average, without a name or text. “Idea or bug” messages are deleted; the bot removes their copies in the author's Telegram if they are less than 48 hours old (Telegram doesn't allow longer) — older ones the author will delete at your request.
• The bot's author gets a notice that the data was deleted: name and Telegram ID, no content.
• Messages the bot has already sent to other people — to a specialist about your bookings and reviews, to the bot's author copies of bot reviews — stay in their chats with the bot: we can't delete them from someone else's Telegram. The bot's author will delete their copies of your reviews at your request.

Database backups are kept for no longer than 14 days, so deleted data disappears from them within 14 days. The bot's technical log is kept just as long — it may contain your Telegram ID, for example if a message couldn't be delivered to you. The command doesn't affect email correspondence — we'll delete it on your request by email. If you start using the bot again, data will be collected anew.

Your rights

Depending on your jurisdiction (for example, the GDPR in the EU or Serbia's data protection law), you have the right to access your data, correct it, delete it, restrict or object to its processing, and withdraw consent. To exercise any of these rights, contact us (see below). You may also lodge a complaint with a data protection supervisory authority.

Children

The bot is not intended for people under the age set by Telegram's terms and local law. We don't knowingly collect data from such users.

Changes to this policy

We may update this policy from time to time. The “last updated” date at the top always shows the current version; we may announce important changes in the bot.

Contact

For any privacy questions, write to dockereventbot@gmail.com. You can see your bookings in the app's “Bookings” tab, and you can delete your data yourself: send the /privacy command to @DockerVisitBot.