Privacy Policy

1. Introduction

At Bobibo, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal information when you use our website and services.

2. Information We Collect

2.1 Information You Provide

  • Account information, such as your name, email address, business name, timezone, and currency
  • Business data you enter, such as clients and their contact details, jobs and appointments, estimates, proposals, contracts, invoices, employees, and timesheets
  • Billing information for your subscription (card details are collected and stored by Stripe, not by Bobibo)
  • Contact information when you reach out to us
  • Feedback and survey responses

2.2 Automatically Collected Information

  • Device and browser information
  • IP address and location data
  • Usage data and interaction with our services
  • Cookies and similar tracking technologies

2.3 Information Collected from Google Services

  • Basic Google profile information (name and email address) if you sign in with Google
  • Google Calendar events, if you connect Google Calendar

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Bobibo service
  • Personalize your experience
  • Analyze usage patterns and optimize performance
  • Communicate with you about our services
  • Ensure security and prevent fraud

4. Use of Google User Data

4.1 Access to Google Services

Our application integrates with Google services and may request access to certain Google user data, including:

  • Google Account sign-in (OAuth), which gives us your name and email address
  • Google Calendar (read and write access to calendar events), only if you choose to connect your calendar

4.2 Purpose of Using Google Data

We use Google user data strictly for enhancing your experience within Bobibo. If you sign in with Google, we use your name and email address to create and secure your account. If you connect Google Calendar, we read events from your calendar so your availability and appointments appear in Bobibo, and we add events to your calendar for the jobs and appointments you schedule in Bobibo. We do not use Google user data for advertising, and we do not modify your calendar except to carry out the sync you turned on.

4.3 Sharing of Google Data

We do not sell, share, or transfer Google user data to any third parties, except when required by law.

4.4 Data Storage & Security

Any Google user data accessed is stored securely using industry-standard encryption and access controls. We do not retain Google user data longer than necessary for providing our services.

4.5 User Control & Revocation

You can manage or revoke our access to your Google data at any time through yourGoogle Account security settings. You can also request deletion of your Bobibo account and associated Google user data by contacting us atsupport@bobiboapp.com.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

  • Service providers who assist in our operations
  • Legal authorities when required by law
  • Third parties with your explicit consent

6. AI Assistant Integrations

You can connect Bobibo to AI assistants such as ChatGPT and Claude. These connections use the Model Context Protocol (MCP) and OAuth, and only start after you sign in to Bobibo and approve access on our consent screen.

6.1 What Is Shared With the Assistant

When you ask the assistant to do something in Bobibo, we return only the records needed for that request, such as your account name, timezone and currency, or the clients, jobs, and invoices you ask about. Actions the assistant takes for you (for example, creating a client, scheduling a job, or sending an invoice) are saved to your Bobibo account just as if you had done them in Bobibo. Data returned to the assistant is then handled under the assistant provider's own privacy policy.

6.2 What Bobibo Receives

Bobibo receives only the inputs the assistant sends to our tools (for example, a client name, a date range, or invoice line items). We do not receive your chat history or conversations with the assistant beyond those tool inputs. We use these inputs only to carry out your request and to keep your account secure.

6.3 Access Tokens and Revocation

Connected assistants receive an OAuth access token limited to your Bobibo account. We never share your Bobibo password with the assistant. Access tokens are short-lived and expire automatically. You can revoke an assistant's access at any time from the assistant's own app or connector settings, or from Dashboard → Integrations → ChatGPT & Claude. When you revoke access, the assistant's tokens stop working and it can no longer read or change your Bobibo data.

6.4 No Sale of Data

We do not sell data accessed through AI assistant integrations, and we do not use it for advertising.

7. Cookies and Tracking

We use cookies and similar technologies to enhance your experience and collect usage data. You can control cookie preferences through your browser settings.

Types of Cookies We Use:

  • Essential cookies for site functionality
  • Analytics cookies to understand usage
  • Preference cookies to remember your settings

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission over the internet is 100% secure.

9. Data Retention

  • We keep your account data for as long as your account is active.
  • If you ask us to delete your account, we delete or anonymize your personal information and business data within 30 days of your request, except where the law requires us to keep it. For example, invoice and payment records may be retained for tax and accounting purposes for up to 7 years.
  • Deleted data may remain in our encrypted backups until those backups roll off, which happens within 90 days.
  • OAuth access tokens issued to connected services and AI assistants are short-lived and are revoked when you disconnect the integration.

10. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability
  • Withdraw consent

11. Children's Privacy

Our services are not intended for children under 13. We do not knowingly collect personal information from children under 13.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

13. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes through our website or other communication channels.

14. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

Last updated: October 17, 2026

By using our Service, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.