Privacy Policy

• Your mobile number, to sign you in with a one-time code sent on WhatsApp, and to show which libraries you can open.
• What you enter to run your library: library and branch names, seats, plans and shifts, your members’ names and mobile numbers, memberships, fee payments, receipts, and attendance records if you turn attendance on.
• Staff access you grant (their mobile numbers and branches) and, if you turn it on, staff clock-in and clock-out times.
• For your BookMyDesk plan: the plan you choose and Razorpay order and payment references. Card, UPI and bank details are handled by Razorpay; we never see or store them.
• If you collect fees by UPI: your UPI ID and the name members see. Members pay you directly from their UPI app; we never receive, hold or see those payments.
• Basic technical data such as IP address and request times, used to keep sign-in safe (for example, to stop repeated code requests) and to fix problems.

Library owners decide what member information to record and are responsible for having their members’ consent, including for automatic WhatsApp reminders. We process that information only to provide BookMyDesk to the library, never for our own marketing, and we do not sell it. A member who does not want reminders can ask the library, which turns them off for that member. A UPI pay link shows the member’s first name, seat, amount due and the library’s UPI ID to whoever opens it, and stops working after 15 days.

• Vercel (website hosting) and Neon (database), with servers in Singapore.
• A WhatsApp Business messaging provider (and Meta, which runs WhatsApp), to deliver sign-in codes and, if a library switches them on, automatic renewal reminders to its members.
• Razorpay, to take payments for BookMyDesk plans.
• An AI provider (such as Anthropic or an OpenAI-compatible service), only when an owner uses the AI assistant. Member phone numbers are never sent to the AI.

These providers act on our instructions. Reminders an owner sends by hand go from the owner’s own WhatsApp. If an owner switches on automatic reminders, BookMyDesk sends them through its WhatsApp provider using the member’s first name and mobile number, the library name, the seat and the date the membership ends.

We use a sign-in cookie to keep you signed in, and your browser’s local storage for small conveniences. We do not use advertising or tracking cookies.

We keep your library’s data while your account is in use so your records stay complete. You can ask us to export or delete it; we delete it within 30 days of a verified request, except records we must keep by law (for example, payment records).

Data travels over HTTPS, access is checked on every request, staff only see the branches you give them, and fees and payments are visible to owners only. No system is perfectly secure, so please keep your phone and WhatsApp account safe.

You can ask to see, correct, export or delete your data, or withdraw consent, by writing to us. Under India’s Digital Personal Data Protection Act, 2023, you can also contact our grievance officer below.

We reply within 7 working days.

If we change this policy, we will update this page and, for important changes, tell owners in the app.