Privacy Policy

BookOne.Party, operated by 1001474668 ONTARIO INC. ("we," "us," or "the Platform"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our private venue booking platform.

By using BookOne.Party, you consent to the practices described in this policy.

From Consumers (event planners):

• Phone number (used for SMS/voice communication)
• Name (if provided during intake)
• Event details: date, guest count, event type, food and drink preferences, dietary restrictions, budget, and other event-related information
• Voice recordings of phone calls (processed for intake purposes)
• SMS message content

From Venue Owners:

• Name and phone number
• Email address
• Venue name, address, and details
• Space information (capacity, amenities)
• Proposal details (pricing, availability)

Payment Information:

Payment processing is handled entirely by Stripe. We do not store, process, or have access to your credit card numbers or full payment details. We only receive transaction confirmation data (amount, status) from Stripe.

We use the information we collect to:

• Process and match your event requirements with suitable venues
• Facilitate communication between consumers and venues
• Send booking notifications, proposals, and status updates via SMS
• Authenticate venue owner accounts
• Process booking fee payments
• Improve our AI-powered intake and matching systems
• Provide customer support
• Comply with legal obligations

We use the following third-party services to operate our platform. Each has its own privacy policy governing how they handle your data:

• Twilio — SMS messaging and voice call handling. Your phone number and message content are processed by Twilio.
• ElevenLabs — Conversational AI voice agent for phone-based intake. Voice call audio is processed by ElevenLabs to conduct the intake conversation.
• Google (Gemini) — AI processing for transcript analysis. Event details extracted from conversations may be processed by Google's Gemini AI service.
• Stripe — Payment processing. When you make a payment, your payment information is handled directly by Stripe. We never see or store your full card details.
• Supabase — Database hosting. Your data is stored in a PostgreSQL database hosted by Supabase with encryption at rest.
• Vercel — Web application hosting.
• Google Cloud Platform — API server hosting (Cloud Run).

Mobile data protection: Mobile opt-in data, phone numbers, and consent information collected for SMS communications will not be shared with or sold to third parties for marketing or promotional purposes. Your mobile information is used solely to deliver the BookOne.Party service as described in this policy.

BookOne.Party uses SMS messaging to deliver the booking service. This section describes what SMS messages we send, how we obtain your consent, and how you can stop receiving them. This section is provided to satisfy mobile messaging disclosure requirements under the CTIA Messaging Principles and Best Practices and the A2P 10DLC registration framework.

How we obtain your consent:

• Consumers (event planners): By calling or texting any BookOne.Party phone number published on bookone.party, you consent to receive SMS messages from BookOne.Party related to your event inquiry. Our first SMS reply includes the HELP/STOP opt-out instructions and a link to these terms.
• Venue owners: By signing up your venue on BookOne.Party, you consent to receive SMS notifications about incoming booking requests, event updates, and account verification codes. You may opt out at any time as described below.

Types of SMS messages we send:

• Consumer intake replies — conversational replies from our AI intake assistant collecting event details (date, guest count, preferences).
• Match confirmations — a single message confirming we've contacted venues on your behalf, with a link to your booking page.
• Venue proposal notifications — a message for each proposal submitted by a matched venue, with space, capacity, minimum spend, booking fee, and a link to review.
• Booking status updates — occasional updates about your booking lifecycle and any changes from the venue.
• Venue booking request alerts — sent to venue owners when a new consumer request matches their venue, with a secure dashboard link.
• One-time login codes (OTP) — numeric verification codes sent to venue owners during login.

Message frequency: Message frequency varies based on your booking activity. Most consumers receive fewer than 10 messages per event inquiry. Venue owners receive messages only when there is a new booking request, a booking update, or an account login event.

Message and data rates: Message and data rates may apply depending on your mobile carrier and plan. BookOne.Party does not charge a separate fee for SMS.

How to opt out: You can opt out of SMS messages at any time by replying STOP to any message you receive from BookOne.Party. After opting out you will not receive further SMS from BookOne.Party unless you initiate a new inquiry.

How to get help: Reply HELP to any BookOne.Party message for support, or email us at support@bookone.party. Our published phone numbers are listed on the home page of bookone.party.

Messaging provider: BookOne.Party uses Twilio as its SMS and voice processor. Your phone number and the content of SMS messages exchanged with BookOne.Party are processed by Twilio in accordance with Twilio's privacy policy.

Mobile data is not shared or sold: Mobile opt-in data, phone numbers, and SMS consent information collected by BookOne.Party will not be shared with or sold to third parties, affiliates, or lead generators for marketing or promotional purposes, and are not used for any purpose other than delivering the BookOne.Party service as described in this Privacy Policy.

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

• Booking requests and event data: Retained for the duration of the booking lifecycle and for a reasonable period afterward for record-keeping and dispute resolution.
• Venue account data: Retained as long as the venue account remains active. Venue owners may request deletion by contacting us.
• Authentication tokens: OTP codes expire after 5 minutes. Magic link tokens expire after 15 minutes. Both are deleted after use or expiry.
• Voice recordings and transcripts: Processed for intake purposes and retained as part of the booking request record.

BookOne.Party uses minimal browser storage:

• JWT tokens in localStorage: Used for venue owner authentication. These tokens are stored locally in your browser and are required for the venue dashboard to function.
• Authentication cookie: A simple flag cookie (bookone_authenticated) is used to help the application detect authenticated sessions. It does not contain personal information.

We do not use tracking cookies, advertising pixels, or analytics cookies.

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal information, subject to legal retention requirements.
• Portability: Request a copy of your data in a commonly used format.
• Withdrawal of consent: Withdraw your consent to data processing at any time.

To exercise any of these rights, please contact us at support@bookone.party. We will respond to your request within 30 days.

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (HTTPS/TLS) for all communications
• Encryption at rest for stored data
• Secure authentication with time-limited tokens
• Access controls limiting who can access your data

While we take reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure.

BookOne.Party is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@bookone.party

Platform: bookone.party