Privacy Policy

Last updated: 14 May 2026

OpenBook is operated by OpenHouse AI Limited (trading as OpenBook), registered in Ireland. This policy explains what we collect, why, and what you can do about it. Plain language; no fluff.

What we collect

Account data — when you sign in (Apple, Google or email + password) we store your email, your display name and, for OAuth, the identifier from the provider. Passwords are hashed by Supabase Auth — we never see or store the plaintext.
Booking data — for every booking you make: the business, the service, the time, the price and the booking status.
Wallet data — store credits and packages issued to you by businesses you've used.
Device data — basic information needed to make the app work (device type, language, push token if you opted in).
Diagnostic data — error reports and aggregated usage so we can fix bugs. Never tied to your name or email.

We do not sell or rent your data, ever.

How we use it

To show your bookings, wallet balance and preferences across devices.
To send transactional notifications (booking confirmed, slot opening, cancellation) — only the ones you've enabled.
To process payments, via Stripe Ireland (we never see your card details).
To improve the product (aggregate, anonymous analytics).

Who we share it with

The business you book with — they see your name, contact and booking details so they can serve you.
Stripe — when you pay online, to process the charge.
Supabase (our hosting and database provider) and Vercel (our app infrastructure), both bound by data-processing agreements.
Resend: delivers transactional email (booking confirmations, account confirmation and password-reset links). Content is limited to what the email needs and is never used for marketing.
OpenAI: when you use the in-app assistant, your question and the surrounding booking context are sent to OpenAI to generate a response. We do not send your name, email or phone, and your inputs are not used to train OpenAI models per their API terms.

We don't share your data with advertisers.

Your rights

Under GDPR and Irish data protection law you can:

Ask for a copy of the data we hold on you.
Ask us to correct it.
Ask us to delete it (use Delete account under Profile, or email us).
Object to processing.

Email sam@openhouseai.ie to exercise any of these rights and we'll respond within 30 days.

Data retention

We keep booking records for as long as you have an account, and for up to 6 years after deletion if Irish accounting law requires it (Revenue Commissioners). Diagnostic data is retained for 90 days.

Cookies

The app uses essential cookies for sign-in only. No advertising trackers, no third-party analytics in the app surface.

Contact

Privacy questions: sam@openhouseai.ie.

OpenHouse AI Limited (trading as OpenBook), Ireland.