Privacy Policy

Micali.online is a free online booking system. In this policy, “we”, “us” and “the service” refer to Micali.online. Account owners are the businesses, organizers or individuals who set up an account to accept bookings. Visitors are the people who book a slot through an account owner's booking page. For data created and collected inside an account (customer lists, bookings, form responses, messages), the account owner is the data controller and Micali.online acts as the processor.

Account data: when you create an account we collect your email address, login credentials, account name, language and any settings you configure (services, opening hours, message templates, connector configuration etc.).

Visitor data: when a visitor books a slot in an account, the account owner's form determines what is collected. Typically this includes the visitor's name, email address and/or phone number, the chosen service or event and the response data filled in the booking form. The visitor's bookings, payment status and attendance are also stored.

Communication data: every email and SMS sent through the system is logged (recipient, time, status) so the account owner can see what was delivered and so the service can be debugged.

Technical data: standard log information such as IP address, browser type, device type and timestamps of requests, used to operate and secure the service.

Analytics data: if you accept analytics cookies on the marketing website (micali.online), Google Analytics may collect usage data – see section 7.

We use personal data only to operate the booking service: to authenticate users, to create and manage bookings, to send confirmations, reminders and cancellation messages, to let account owners manage their customers and events, to keep the system reliable and secure, and to detect or prevent abuse. We do not sell or trade personal data and we do not use it for advertising.

We process personal data on the following legal bases: performance of the service you (or the account owner) requested (e.g. delivering a booking confirmation); our legitimate interest in keeping the platform working, secure and free of abuse; your consent where required (for example optional analytics cookies); and to comply with legal obligations where applicable.

Account data and the bookings, customers and messages inside the account are kept for as long as the account is active. Accounts that remain inactive for more than 3 months may be deleted together with all associated data, as described in our Terms of Service. Sent message logs and technical logs are kept for a limited period needed for support, debugging and abuse prevention. Account owners can delete individual records (customers, bookings, form responses, messages) at any time from within the application.

We do not sell personal data. We share data only with providers that are technically necessary to run the service:

Hosting and infrastructure providers that store the database and run the application.

Email and SMS providers used to deliver messages – when an account connects its own SendGrid, Twilio, SMTP or Gmail SMTP setup, the message content and the recipient address are transmitted to that provider for delivery, under that provider's own terms. Account owners are responsible for the choice and configuration of these providers.

Analytics – Google Analytics on the marketing website, only with your consent (see section 7).

We may also disclose data when required by law or to protect the rights, safety or property of the service or other users.

The application uses only the cookies and local storage strictly needed to keep you logged in and to remember basic preferences. The marketing website (micali.online) additionally uses Google Analytics (provided by Google LLC) to understand how visitors use the site. Google Analytics may set cookies and collect information such as pages viewed, device and browser type, approximate location derived from the IP address, referral source and interactions with the site. This data is used only in aggregated form to improve the service. You can decline analytics via the cookie banner – when declined, Google Analytics is not loaded at all. For details on how Google processes this data, see Google's privacy policy at https://policies.google.com/privacy.

Subject to applicable law (including the EU GDPR), you have the right to access the personal data we hold about you, to ask for it to be corrected or deleted, to object to or restrict certain processing, and to receive your data in a portable format. You also have the right to withdraw any consent you have given (for example by changing your cookie banner choice).

If you are a visitor who booked through an account, the account owner is the primary point of contact for your data – they decide what they collect and how long they keep it inside their account. You can ask them to update or delete your bookings and form responses. For technical platform-level requests, you can contact us through the contact information available in the application.

We take reasonable technical and organizational measures to protect personal data. However, because Micali.online is a free service provided “as is”, we cannot guarantee absolute security or uninterrupted availability. As described in our Terms of Service, the service may go offline, lose data or stop working at any time, and we accept no liability for such events. If the data you store in the system is important to you, do not rely on this free service alone – keep your own backups and arrangements.

We may update this Privacy Policy from time to time. The latest version always applies and is published on this page. If you have any questions about this policy or want to exercise your rights, you can reach us through the contact information available in the application.