Last updated: March 2026
1. Information We Collect
When you use bokkeh, we collect information you provide directly:
- Account Information: Name, email address, and password when you create an account
- Studio Profile: Business name, phone number, location, and description
- Content: Photos, gallery images, and portfolio content you upload
- Booking Data: Client names, contact information, booking dates, and service details
- Payment Information: We do not store payment card details. Online payments are processed securely through CHIP (chip-in.asia), the only payment gateway currently supported by Bokkeh.
- Business Verification Documents (KYB): SSM Business Registration, MyKad (IC), and Bank Statement documents you upload for CHIP payment gateway activation. These are stored securely and are only accessible by bokkeh administrators.
- Payout Information: Bank account number, holder name, and bank code you register for CHIP Send payouts where platform-managed disbursements are enabled.
2. How We Use Your Information
We use your information to:
- Provide and maintain the bokkeh platform
- Process bookings and facilitate communication with clients
- Send transactional emails (booking confirmations, reminders)
- Improve our services and develop new features
- Protect against fraud and unauthorized access
- Verify your business identity (KYB) as required before activating CHIP payment collection
- Process automated bank disbursements (CHIP Send) to studios with approved KYB where platform-managed disbursements are enabled
- Display anonymized, aggregate platform statistics (e.g. total bookings completed, total revenue processed) for marketing purposes. No individual studio or client data is identifiable from these figures.
3. Third-Party Services
We integrate with the following services:
- Google OAuth: For secure sign-in authentication
- Convex: Our backend database and real-time infrastructure
- Resend: For sending transactional emails
- CHIP Collect (chip-in.asia): For processing subscription and booking payments securely. CHIP is licensed by Bank Negara Malaysia and is the only payment gateway currently supported by Bokkeh. Curlec, ToyyibPay, and other gateways are not used for Bokkeh online payments.
- CHIP Send (chip-in.asia): For disbursing payouts to studio bank accounts where platform-managed disbursements are enabled. Bank account details (account number, holder name, bank code) are shared with CHIP Send for this purpose.
Each service has its own privacy policy governing how they handle data.
4. Google User Data
To provide features such as Calendar synchronization and Google Drive integration, bokkeh requests access to your Google account. We adhere to theGoogle API Services User Data Policy.
Requested Permissions
- See, edit, create and delete only the specific Google Drive files you use with this app:Required to create client folders, save booking invoices, and facilitate manual uploads.We strictly only access files and folders created by Bokkeh. We do not have access to your other Drive files.
- View and edit events on all of your calendars:This permission is limited to a specific 'Bokkeh Schedule' calendar that we create in your account.We do NOT access your primary personal calendar. We only manage the specific calendar created for your studio bookings.
- See your personal info, including any publicly available info:Used to display your name and profile picture in your studio setting.
- See your primary Google Account email address:Used for account identification, communication, and to associate your studio with your Google account.
- Associate you with your personal info on Google:Used to maintain your session and ensure secure access to your connected services.
5. Data Storage & Security
Your data is stored securely using industry-standard encryption. We use Convex for our database infrastructure, which provides enterprise-grade security measures. All data is encrypted in transit (TLS) and at rest.
KYB documents (SSM, IC, bank statement) are stored in secure file storage accessible only to bokkeh administrators. When you resubmit a KYB application, all previously uploaded document files are permanently deleted before your new documents are stored.
Bokkeh's use and transfer to any other app of information received from Google APIs will adhere toGoogle API Services User Data Policy,, including the Limited Use requirements. We do not sell your data to third parties.
Uploaded images are stored securely and are only accessible via your studio's public page or through authenticated access.
6. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal purposes.
For expired subscriptions, all user data will be permanently deleted 7 days after the subscription expiry date if not renewed.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Object to certain processing activities
To exercise these rights, contact us at [email protected].
8. Cookies
We use essential cookies for authentication and session management. We do not use tracking cookies or share data with advertising networks.
9. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any material changes by email or through the platform.