Privacy policy

1. Who is responsible for your data

Each business using rezervaya owns the relationship with its clients and its booking data; rezervaya processes that data on the business's behalf to provide the service.

For business accounts (owners and administrators), rezervaya (operated by 3-102-947237 Sociedad de Responsabilidad Limitada) is the data controller. You can reach us at hola@rezervaya.com.

2. What data we process

If you book an appointment: your name, your WhatsApp number, the service, the date and time, and any notes you choose to add. You may also share your email address; it is optional. If you leave a review, we process your rating and your comment.

If you run a business: your email address, your business details (name, address, hours, services and prices) and your plan's billing data. Payments are processed by ONVO; rezervaya does not store card numbers.

3. What we use the data for

To create and manage bookings, send confirmations and reminders (by email and, where enabled, WhatsApp), let you view, cancel or move your appointments, bill business plans, and keep the platform secure.

If you share your email when booking, it is also used, with your consent, to follow up on your visit, invite you to leave a review, and send you an occasional update or offer from the business; you can opt out at any time. Reviews the business approves may be displayed publicly on its page, showing your first name only.

We do not sell personal data or use it for third-party advertising.

4. Combined visits

If you book a combined visit across two partnered businesses, two independent bookings are created (one at each business) and each business receives its own record with your name and number. Partnered businesses cannot see each other's calendars, prices or client lists; they only share time-slot availability while the partnership is active.

5. Service providers

We use providers that process data on our behalf: Supabase (database and authentication), Vercel (hosting and cookieless usage measurement), Resend (transactional email), ONVO (payments), Meta/WhatsApp (messaging, where the business has it enabled), Sentry (error monitoring) and Anthropic, through Vercel's AI Gateway (the help assistant: your questions are processed to generate an answer and are not used to train models). Each provider processes data under its own contractual data-protection commitments.

6. Retention

Bookings and client records are kept for as long as the business keeps its account, because they form its appointment history.

If a business deletes its account, the account is archived: its public page goes offline and billing stops, but the data is retained so support can restore the account if the business returns. If you want your data fully removed, write to hola@rezervaya.com and we will process the request.

7. Your rights

Under Costa Rica's Law 8968 (Protection of the Person in the Processing of their Personal Data), you may request access to, correction of, or deletion of your data.

If you are a business's client, the most direct route is the business itself (its page lists its contact details). You can also write to hola@rezervaya.com and we will route the request.

8. Cookies

We use essential cookies only: those needed to keep administrators signed in and basic preferences such as language. We do not use advertising or third-party tracking cookies.

9. Changes to this policy

If we change this policy we will update this page and the “last updated” date. Significant changes will be communicated to businesses by email.