Privacy Policy

Who we are

Bookend is operated by Orcha LLC. This policy covers bookendpartners.com, the partner storefronts we host for partners, and the Bookend iOS app.

What we collect

We collect only what the product needs to work:

• Account details. Your email address, your name, and a cryptographic hash of your password. We never store your password itself.
• Business details you give us. Your business name, website, market or location, phone number, the type of business, how you sell tickets, and your rough customer volume.
• Enquiry details. If you use a contact or get-started form, the business name, contact name, email, and category you enter.
• Push notification tokens. If you turn on notifications in the iOS app, we store the device token Apple issues so we can send you alerts. You can turn this off at any time in iOS Settings.
• Basic usage analytics. Aggregate page views and performance data via Vercel Analytics. It is not tied to your account and is not used to build a profile of you.

We do not collect location data, contacts, photos, health data, or advertising identifiers. We do not track you across other companies' apps or websites, and we do not use third-party advertising or analytics SDKs in the app.

Why we use it

• To create and secure your account and keep you signed in.
• To map the travel and lodging demand around your customers and line up the listings that appear in your portal and on your confirmation page.
• To contact you about your account, your pipeline, and revenue share.
• To keep the service working, debug problems, and prevent abuse.

We do not sell your personal information, and we do not share it with advertisers.

Who we share it with

Only the service providers that run the product on our behalf, and only as far as they need it: our hosting and analytics provider (Vercel), our database provider (Neon), our email delivery provider (Resend), and Apple for push notification delivery. We may also disclose information where the law requires it.

How long we keep it

We keep account and business information for as long as your account is open, and for a reasonable period afterwards for accounting and legal reasons. Enquiry form submissions are kept while the opportunity is live. Push tokens are deleted when they stop working or when you turn notifications off.

Deleting your data

You can ask us to delete your account and everything attached to it at any time by emailing privacy@bookendpartners.com from the address on the account. We will action it and confirm. Deleting your account removes your account record, your business details, and your push tokens.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete the personal information we hold about you, and to object to certain processing. Email the address above and we will help. You will never be treated differently for exercising a privacy right.

Children

Bookend is a business-to-business product and is not directed at children. We do not knowingly collect personal information from anyone under 13.

Security

Traffic is encrypted in transit. Passwords are stored as salted scrypt hashes. Sessions are signed and expire. Access to production data is limited to the people who operate the service.

Changes

If we change this policy we will update the date at the top of this page, and for material changes we will tell account holders by email.

Contact

Questions about this policy: privacy@bookendpartners.com.