Privacy Policy
Last updated: 28 October 2026
Contents
In short
- We only store what’s needed to book with a specialist.
- A client’s data is visible only to their specialist. Okoshki support sees it only when handling a request or a complaint.
- We don’t sell data, don’t show ads, and don’t message specialists’ clients on our own behalf.
- Data is stored on servers in Germany, with backups in Finland. Both countries are in the European Union.
- You can delete your data with the /delete_my_data command in the bot or through support: Telegram @shopclaude.
The details are below.
1. Who we are and what this document covers
Okoshki (okoshki.io) is an online booking service for beauty professionals. It includes specialists’ Telegram bots and their Mini Apps, booking pages okoshki.io/m/<specialist's page>, the specialist’s web dashboard and the platform bot @okoshki_nhatrang_bot. Together we call all of this “Okoshki” or “the service”.
The project is not a registered legal entity; it’s run by the project owner. When we say “we”, we mean the Okoshki project and its owner. For any questions about data, message us on Telegram: @shopclaude.
Who’s who:
- Specialist — someone who takes bookings for their services through Okoshki.
- Client — someone who books with a specialist.
Client data is collected for the specialist. The specialist decides what to ask for when you book (for example, whether a phone number is required) and uses this data to serve you. Okoshki stores and processes it on the specialist’s behalf and only to make booking work.
2. What data we store
Specialist
- Telegram data: ID, name, username, language.
- Profile: name shown to clients, page address, field of work, bio, city, address, map link, time zone, currency, avatar.
- Contacts you’ve provided: phone, Instagram, WhatsApp.
- Services: names, descriptions, duration, prices, photos.
- Schedule: working hours, breaks, days off and special days.
- Booking settings, reminder texts, payment methods: payment details and QR codes. Clients can see these.
- Your bot: its ID and username, and its access key (token) — encrypted.
- Subscription: trial and payment dates, amounts and payment method. If you shared payment details yourself when paying (for example, a wallet address), we store them.
- Conversations with support.
Client
- Telegram data, if you book in the bot: ID, name, username, language.
- Name and phone number. They’re required when booking on the website. In Telegram, we only ask for a phone number if the specialist requires it.
- Booking comment and reference photos, if you added them.
- Booking history: services, date and time, price, status (confirmed, cancelled, rescheduled, completed, no-show), and the cancellation reason if one was given.
- Waitlist: the date and time that suit you.
- Your ratings and reviews.
- The specialist’s notes about you. Only the specialist sees them. The specialist can also block you from booking online.
Technical data (everyone)
- IP address, browser, device and request times — in server logs, to protect against spam and find bugs.
- Bot message delivery log: to whom, when, delivered or not. Message texts aren’t included.
- Log of support actions and important account changes: who did what and when.
Specialists who don’t use Okoshki yet
We may store publicly available data about a specialist: name, field of work, city, profile links, approximate audience size. We sometimes use it to build a demo — showing how booking with this specialist would look: services, prices and photos from their public profile.
A demo opens only via a private link that we send to the specialist themselves. It isn’t published anywhere or indexed by search engines. If the specialist doesn’t claim the demo, we delete it after 30 days. If you’re a specialist and don’t want us to store your data or contact you, message @shopclaude: we’ll delete it and won’t bother you again.
What we don’t store
- Bot chat conversations. We only keep what’s needed for booking: button choices, comment, reference photos, review.
- Clients’ bank cards and payment details. Clients pay the specialist for the visit directly, not through us.
- Location and other photo metadata. We remove them on upload.
3. Why we need this data
- To make booking work: show free slots; create, confirm, reschedule and cancel bookings.
- To send booking messages: confirmation, reminders 24 and 2 hours before, “time for a touch-up” (if the specialist turned it on), waitlist offers, review requests.
- To show reviews and the “Verified specialist” badge.
- So that specialists can see their clients and visit history.
- To manage the specialist’s subscription: trial, payment, renewal reminders. We sometimes tell specialists about service news through the platform bot.
- To answer requests and handle complaints, including disputed reviews.
- To protect the service from spam, bots and hacking.
- To compile anonymised statistics (for example, the number of bookings and no-shows) and improve the service.
- To offer Okoshki to specialists — this applies to data from public sources.
We don’t sell data, don’t show ads, and don’t use client data for our own mailings. A specialist’s bot messages clients only about their own bookings, and only after they’ve tapped “Start” themselves.
Legal basis. Specialists’ and clients’ data is needed to do what you ask us to: book you in, remind you about your visit, manage the subscription. We process technical data and data from public sources based on our legitimate interests: to protect the service and tell specialists about it. You can object to this processing by messaging us.
4. Who sees the data
- The specialist sees their clients’ data in the bot, the Mini App and the web dashboard.
- Other specialists see nothing. If you book with several specialists, each one has their own client card with only their own bookings.
- Everyone can see the specialist’s page: name, services, prices, photos, address, free slots, payment methods and the contacts the specialist has provided. Published reviews are also visible to everyone — with the author’s name, but without their phone number or other contacts.
- Okoshki support (the project owner and their assistants, if any) looks at data only when handling your request, complaint or a disputed review, or when there’s no other way to fix a problem. This is done in “log in as specialist” mode. Every such login is recorded, and the specialist sees it in their dashboard under “Recent support actions”.
Third parties
- Telegram. Bot messages, Mini Apps and Telegram login go through Telegram’s servers and are subject to its rules: https://telegram.org/privacy. We don’t control what Telegram stores. Your chat with the bot stays in your Telegram until you delete it.
- Hetzner — the hosting provider whose servers Okoshki runs on.
- The “I’m not a robot” check on the booking page. If it’s provided by an external service, that service receives technical data about your browser and processes it under its own rules.
- Government authorities — only upon a request we’re legally required to comply with.
We don’t share data with external AI services. If automatic translation of services is added, only the specialist’s texts (service names and descriptions) will be translated, never client data.
5. Where and how data is stored
The main server is in Germany, and backups are in Finland. Both data centres belong to Hetzner. Data is stored there no matter which country you use Okoshki from.
How we protect it:
- connections to the website and the Mini App use HTTPS only;
- bot tokens are stored encrypted;
- only the project owner has access to the server;
- photos are shown only to those who have the right to see them;
- we remove location and other metadata from photos;
- we make a backup every night.
6. How long we keep data
- Specialist — while the account is active. After it’s deactivated (the trial or paid period ended, or you disconnected yourself), we keep the data for another 60 days so you can come back without losing anything. Then we delete the profile, services, schedule, clients and bookings.
- Client — while their specialist’s account is active, or until you ask us to delete it. After the specialist’s account is deactivated, the data is deleted after the same 60 days, together with the specialist’s data.
- Demo — 30 days. Specialists’ data from public sources — while we’re offering them the service, or until they ask us to delete it.
- Server logs and the message delivery log — up to 30 days.
- Support action log — as long as the specialist’s data.
- Subscription payment records (date, amount, specialist’s Telegram ID) — up to 1 year after the account is deleted, in case of a payment dispute.
- Backups are overwritten on a rolling basis. Deleted data disappears from them within 3 months at most. We only restore from backups after a failure.
7. How to view, correct or delete your data
Client
- Delete the data a specialist holds about you — use the /delete_my_data command in the specialist’s bot. We’ll delete your name, phone number, comments, photos, waitlist entries and reviews. Future bookings will be cancelled, and the specialist will be notified. Past bookings stay with the specialist without your name or contacts — for their schedule and statistics.
- Booked on the website, without Telegram — message @shopclaude with the specialist’s name and the phone number you booked with. We may ask you to confirm the number is yours.
- Correct your name or phone number — ask the specialist or message us.
We can’t delete what the specialist has saved outside Okoshki, for example in their phone contacts or chats. Please contact the specialist about that.
Specialist
- Delete your account — use the /delete_my_data command in the platform bot @okoshki_nhatrang_bot or message @shopclaude. We delete it right after confirmation, without waiting 60 days: profile, services, schedule, clients, bookings, reviews and bot token.
- The bot itself stays yours in Telegram — you can delete it in @BotFather.
- Export. Before deletion, we can export your clients and bookings as a file — just ask support.
Your rights
You can find out what data we hold about you, get a copy of it, correct it, delete it or object to its processing. Message @shopclaude. We reply within 30 days, usually sooner. To make sure we don’t hand your data to someone else, we may ask you to confirm it’s yours.
If you believe we’re violating your rights, you can complain to the data protection authority in your country. But please message us first — we’ll try to resolve it ourselves.
8. Cookies on the website
On okoshki.io we only use cookies the website can’t work without:
- login — so you stay logged in to your dashboard or your bookings and don’t have to log in again on every page;
- language — to remember the language you chose;
- spam protection — the “I’m not a robot” check may set its own technical cookies.
The “Log in with Telegram” button loads from Telegram’s website and works under its rules.
There are no advertising cookies or third-party analytics, and we don’t track you on other websites. You can delete cookies in your browser settings — you’ll then need to log in again.
9. Children
Okoshki is not intended for children under 16. If you’re under 16, book together with a parent or ask them to book for you. You can only sign up as a specialist if you’re 18 or older.
If we learn that a child under 16 has provided data without a parent’s consent, we’ll delete it. You can let us know on Telegram: @shopclaude.
10. Changes to this policy
We update this policy when the service or the law changes. The new version appears at okoshki.io/legal/privacy with the date at the top.
Specialists will learn about important changes in the platform bot at least 14 days in advance — for example, if we start collecting new data or sharing it with a new recipient. If you keep using Okoshki after the new version takes effect, it means you agree to it.
11. Contact
Questions about data, deletion requests and complaints — on Telegram: @shopclaude.