How Mbooka handles account, business, and customer data.

Account details such as name, email address, password credentials, verification status, and session data.

Business details such as business name, address, phone number, website content, service listings, product information, booking details, leads, forms, invoices, and payment configuration details.

Customer interaction data submitted through tenant websites, including inquiries, booking requests, form submissions, checkout data, and basic analytics events.

Technical data such as IP address, device information, browser details, pages viewed, timestamps, cookies, and logs needed to operate and protect the service.

To create accounts, verify users, provide dashboards, publish websites, process business workflows, and keep the platform running.

To deliver email, storage, analytics, booking, commerce, payment, domain, and website builder features requested by users.

To prevent fraud, abuse, spam, unauthorized access, and misuse of the platform.

To improve reliability, support users, debug issues, and understand how the product is used.

Mbooka may connect with payment providers, email providers, storage providers, domain/DNS providers, analytics tooling, and hosting providers to deliver the service.

We share only the information needed for those providers to complete the requested service, such as payment references, domain names, DNS records, emails, uploaded files, or transactional metadata.

Payment credentials and sensitive integration settings should be handled as confidential operational data and protected from unauthorized access.

We keep account, business, billing, website, and operational records for as long as needed to provide the service, meet legal or accounting requirements, resolve disputes, and protect the platform.

Users can update many account and business details inside the dashboard. Some records may be retained in backups, logs, invoices, or audit trails for legitimate business and security reasons.

Requests to access, correct, export, or delete data can be sent to support using the contact details below.

We use reasonable technical and organizational measures to protect data, including access controls, encrypted transport, secure cookies, and operational monitoring.

No internet service is perfectly secure. Users are responsible for using strong passwords, keeping credentials private, and limiting access to their accounts and integrations.