Privacy Policy

PaBook (“PaBook”, “we”, “us”) provides booking management software for court businesses — courts, studios, and event spaces — including an owner dashboard at pabook.co and public booking portals operated by our business customers (for example, yourvenue.pabook.co). This policy explains how we collect, use, and protect personal data under the Philippine Data Privacy Act of 2012 (RA 10173) and other applicable laws.

When you book at a venue through a PaBook booking portal, the venue is the primary controller of your booking information and PaBook processes it on the venue's behalf.

• Account data — name, email address, and password hash when you create a PaBook account, whether as a business owner or as a customer of a venue. If you sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider. We never receive your social account password.
• Booking data — the court, date, time, add-ons, amount, and the contact details you provide when booking (name, email, mobile number).
• Payment data — payments are processed by our payment provider (PayMongo). We store payment references, amounts, and statuses. We never store your card number, CVC, or e-wallet credentials.
• Business data — workspace details, courts, pricing, and customer records that business owners add to run their operations.
• Technical data — session cookies required to keep you signed in, and standard server logs (IP address, browser type, timestamps) used for security and reliability.

• Provide and operate the booking and dashboard services.
• Process payments and prevent double-bookings.
• Send transactional emails — booking confirmations, receipts, cancellations, and password resets. These are part of the service, not marketing.
• Prefill your details on repeat bookings for convenience.
• Secure the platform, debug issues, and prevent abuse.
• Comply with legal obligations.

We do not sell personal data. We do not use it for advertising.

We share data only with:

• The venue you book with — your booking and contact details, so they can honor your reservation.
• Service providers — payment processing (PayMongo), email delivery, and cloud hosting. Each provider receives only what it needs to perform its function.
• Authorities — when required by law or to protect our rights and users.

You may sign in with Google or Facebook. We request only basic profile information (name, email, profile picture) to create and identify your account. You can revoke PaBook's access at any time from your Google or Facebook account settings; you may also ask us to delete the account entirely (see Section 8).

We use strictly necessary cookies for authentication sessions and small amounts of local storage for interface preferences (for example, which notifications you've read). We do not use third-party advertising or tracking cookies.

We keep personal data while your account is active or while the venue you booked with needs it to operate, and afterwards only as long as required for legal, accounting, or dispute purposes. Data is encrypted in transit, access is restricted, and payment credentials never touch our servers.

Under the Data Privacy Act you may access, correct, or request deletion of your personal data, object to processing, and lodge a complaint with the National Privacy Commission. To exercise these rights, contact us at the address below. If your data was collected by a venue through their booking portal, we may refer your request to that venue as the data controller.

PaBook is not directed at children under 16, and we do not knowingly collect their personal data. Bookings for minors should be made by a parent or guardian.

We may update this policy as the product evolves. Material changes will be announced on this page with a new “last updated” date.

Questions or privacy requests: privacy@pabook.co