1. General position
Bokko is an appointment booking and business management platform. For the platform's core operation — managing bookings, sending notifications, calendar synchronization — no artificial intelligence-based automated processing is applied to the personal data of guests or end users.
Bokko does not apply machine learning, large language models (LLM), or other AI systems to build profiles from guest data, make automated decisions, or predict guest behavior.
2. Automated decision-making and profiling
Article 22 of the GDPR protects data subjects from decisions based solely on automated processing which produce legal or similarly significant effects concerning them.
Bokko does not engage in such decision-making. Specifically:
- Guests do not receive any automatically generated profile classification.
- Guests' booking options are not restricted by algorithmic decisions.
- The status of subscriber accounts (active, expired, suspended) is handled by rule-based logic — not by an AI model.
- The timing of notifications and reminders is based on parameters set by the provider, not on machine learning.
3. AI tools in the platform
At the operational and infrastructure level Bokko uses services that may include AI-based components in the background — in particular for network traffic filtering (Cloudflare DNS/WAF), error monitoring (Sentry), and abuse detection. These:
- Do not operate on the content of guest profiles.
- Do not influence decisions concerning data subjects based on their personal data.
- Serve solely platform and network security purposes.
Internal development and operational tools
Bokko may use AI-assisted tools in its internal development processes (code review, documentation, testing). These processes do not come into contact with guest data.
4. Future AI features
If in the future Bokko introduces an AI feature that operates on the personal data of guests or providers, then:
- The Privacy Policy and the sub-processor list will be updated in advance.
- Active subscribers will be informed about the change according to the notification procedure set out in the Service Agreement.
- Where required by the GDPR, we will carry out a data protection impact assessment (DPIA).
- Automated decision-making — if introduced — will be made subject to the data subject's consent, or another lawful GDPR basis will be provided for it.
5. Data subject rights
Under Article 22 of the GDPR, data subjects have the right not to be subject to decisions based solely on automated processing. Since Bokko does not apply such decision-making, this right is not relevant in enforcement terms on the current platform.
Regarding other data subject rights (access, erasure, rectification, portability), you can find detailed information on the Incident Response and Data Subject Requests page.
6. Contact
For questions related to AI data processing, please contact us at [email protected].