Legal

Privacy Policy

Last updated: May 30, 2026

1. Who We Are

Mulabee is an online booking Software-as-a-Service (SaaS) platform that allows service businesses (barbershops, beauty salons, spas, studios, etc.) to create their own booking page and manage appointments digitally. We operate under the domain mulabee.com.

For any questions regarding your privacy, you can contact us at: leonardorincon0092@gmail.com

2. Information We Collect

Business Owner Data (registered users):

  • Full name and business name
  • Email address (used for authentication and notifications)
  • Password (stored securely in an encrypted format using bcrypt — never in plain text)
  • Phone number and business address
  • Branding images (logo and cover image) stored on Cloudinary
  • Country, timezone, and preferred language

Customer Booking Data:

  • Full name
  • Phone number
  • Email address
  • Requested service, date, and time of the appointment

Automatically Collected Technical Data:

  • IP address and device/browser type (for security and fraud detection)
  • Session cookies (to keep your session active — see the cookies section)
  • Access and system activity logs (for audit and security purposes)

Social Sign-in (OAuth):

If you register or log in using Google, Apple, or Facebook, we receive your name, email address, and public profile picture. We do not receive or store any passwords from these platforms.

3. How We Use Your Information

  • To create and manage your business account on Mulabee
  • To process and confirm customer bookings
  • To send confirmation emails and appointment reminders
  • To synchronize bookings with Google Calendar (only if you choose to enable this feature)
  • To improve our services and troubleshoot technical issues
  • To comply with applicable legal obligations
  • To detect and prevent fraud or unauthorized access

❌ We do not sell, rent, or share your personal information with third parties for advertising purposes.

4. Payments and Financial Processing

Mulabee does not directly store credit card details or bank account information. Subscriptions and transactions processed through the platform are handled by Stripe, a certified PCI-DSS Level 1 payment processor.

Stripe's privacy policy is available at stripe.com/privacy.

Alternative payment methods (PayPal, Venmo, Bizum, Nequi, etc.) configured by business owners are external links. Mulabee does not intervene in or process these direct payments.

5. Third-Party Services

We use the following external providers to operate our services:

ProviderPurposePolicy
Neon (PostgreSQL)Database hostingView Policy
CloudinaryImage cloud storageView Policy
StripePayment processingView Policy
Google OAuth/CalendarAuthentication and calendar syncView Policy
Apple Sign InAuthenticationView Policy
Meta (Facebook Login)AuthenticationView Policy

6. Cookies and Tracking Technologies

We use the following cookies:

  • Session Cookie — Essential to keep you logged in to your dashboard. It is deleted when you log out or when it expires (30 days). It cannot be disabled as it is required to access your account.
  • Campaign Cookie — Temporarily stores the advertising source if you registered through a marketing campaign. It is automatically deleted after registration.

We do not use third-party tracking or advertising cookies to monitor your browsing behavior.

7. Data Retention and Deletion

We retain your data as long as your account remains active. If you request the deletion of your account:

  • We will delete your profile, business details, services, and appointment history within 30 days.
  • Security and activity logs may be kept for up to an additional 90 days to meet legal requirements.
  • Branding images hosted on Cloudinary are removed immediately.

For detailed step-by-step instructions or to request immediate account deletion, please visit our Data Deletion Instructions page, or contact us directly at leonardorincon0092@gmail.com.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a full copy of all your personal data.
  • Rectification: Correct any inaccurate or incomplete information.
  • Erasure: Request the complete deletion of your account and data.
  • Portability: Receive your data in a structured, machine-readable format.
  • Objection: Object to specific processing activities of your data.

To exercise any of these rights, please email us at leonardorincon0092@gmail.com.

9. International Data Transfers

Some of our third-party infrastructure providers (Cloudinary, Stripe, Neon) may host and process data on servers located in the United States or other jurisdictions. These providers adhere to rigorous safety standards equivalent to the European General Data Protection Regulation (GDPR) and local security frameworks.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you via email if any material changes are made. Continuing to use Mulabee after receiving notice constitutes your acceptance of the revised policy.

Have questions about your privacy? leonardorincon0092@gmail.com