Privacy Policy

Last updated: May 13, 2026

Who we are

Booking OS is operated by Piquant Media Labs Pvt Ltd, a private limited company incorporated in India and based in Delhi. We provide a B2B print-order automation service for wholesale photobook and album printing businesses.

What data we collect

  • Account info: email, name and organization, captured when an administrator creates your Booking OS account or when you sign in with Google.
  • Gmail data: message metadata, body content and attachments — only from mailboxes the user explicitly connects via OAuth.
  • Drive data: file metadata and the contents of files inside folders the user explicitly shares with Booking OS.
  • Usage analytics: minimal — login times and feature usage. No third-party trackers, no advertising pixels, no cross-site fingerprinting.

How we use your data

  • Read inbound emails on connected mailboxes to detect new print orders.
  • Extract order details from those emails — size, paper type, customer, file count.
  • Read Drive folders shared with the connected account to inspect uploaded customer files for print specifications.
  • Send replies to customers via Gmail on the user’s behalf when the user has explicitly configured Booking OS to do so.

We do NOT use Gmail or Drive data for advertising, AI training, or sale to third parties.

Google API Services User Data Policy

Booking OS’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The restricted Google API scopes Booking OS requests are:

  • gmail.modify — read and label incoming order emails on connected mailboxes.
  • gmail.send — send replies to customers on the user’s behalf when explicitly configured.

How long we store data

  • OAuth refresh tokens are encrypted at rest with AES-256-GCM and held only until the user disconnects the integration.
  • Processed email metadata (subject, sender, parsed fields) is retained for up to 90 days for audit and re-processing.
  • Raw email bodies are not stored beyond the immediate processing window required to detect and book an order.

Who we share data with

We do not sell or rent your data, and we do not share it with any party for marketing purposes. Our subprocessors are limited to:

  • Hetzner Cloud — hosting infrastructure (Germany).
  • Google — OAuth identity and Gmail APIs that power the connected-mailbox features.

No AI vendors are involved, and no customer data is used to train any third-party model.

Where data is stored

Booking OS runs on Hetzner Cloud servers in Falkenstein, Germany. The primary database is a self-hosted Postgres instance on the same infrastructure; we do not use a managed database provider.

How we protect it

  • AES-256-GCM encryption at rest for OAuth refresh tokens.
  • TLS 1.2 or higher in transit for all external traffic.
  • Role-based access controls inside the application (user, manager, admin, superadmin).
  • Audit logging on privileged actions and integration changes.

Your rights

You may disconnect any integration at any time, export the data associated with your account, or request deletion of your account and its data. Email automation@justgotwyrd.com and we will respond within a reasonable timeframe.

Revoke access

You can revoke Booking OS’s access to your Google account at any time from https://myaccount.google.com/permissions. Inside Booking OS, the same action is available from /admin/integrations.

Changes to this policy

We will notify users at least 30 days before any material change to this policy takes effect.

Contact

Questions, requests or complaints can be sent to automation@justgotwyrd.com.