Legal Document

Terms of Service

These terms apply to the use of Bokko's business-facing interfaces (dashboard, Public API, webhooks) and Bokko's websites. Effective as of: November 1, 2026 (v1-r5-en). Previous versions are available at the bottom of the Legal Documents page.

Explanation of terms

Short, plain-language explanations of the technical terms used in this document. The explanations are for readability only and do not change the provisions of the document.

Dashboard: Bokko's sign-in management interface (bokko.app), where a provider manages bookings, services, staff and settings.
Booking page: A provider's public web page on Bokko (booking.bokko.app), where guests can request appointments.
Public API: Programmatic access that lets a provider's own or contracted IT system manage its data in Bokko directly, without opening the dashboard.
Webhook, endpoint: An automatic message that Bokko sends after an event (for example a new booking) to an internet address (endpoint) set by the provider; the receiving and further processing system belongs to the provider.
HTTP, 2xx response: The standard way of sending data over the internet; a “2xx” response code means the receiving system accepted the message successfully.
Token, secret: A long, unguessable string that grants access to a link or programmatic access; whoever holds it can use it, so it must be kept confidential and regenerated (rotated) when needed.
Cookie, browser storage: Small data files and storage areas in the user's browser in which a website keeps settings or data needed to work; localStorage, sessionStorage and IndexedDB are such browser storage mechanisms.
Rate limit, scraping: A rate limit sets how many requests someone may send within a period; scraping is the automated, mass downloading of website content.
Hosting provider, cloud service (Firebase, Google Cloud): The external provider and infrastructure on which Bokko's software runs and its data is stored; Bokko runs on Google's cloud services (Firebase, Google Cloud).
Deposit, card guarantee, no-show fee: Payment options a provider may request: a deposit is a partial amount paid when booking; with a card guarantee the guest's card is only saved, and with the guest's prior consent the provider may charge a fee without the guest being present (off-session) if the guest does not show up (no-show).
GDPR, controller, processor, sub-processor: The GDPR is the European Union's General Data Protection Regulation. The controller decides why and how personal data is processed; the processor processes data on the controller's behalf and instructions; a sub-processor is a further company the processor engages for this.
DPA (Data Processing Agreement): The contract between the provider (controller) and Bokko (processor) that sets out the terms for processing guest data.
Export, import (CSV, JSON): Downloading data from Bokko (export) or uploading data into Bokko (import) in general file formats that other programs can also open (CSV, JSON).
Log, audit log: Entries automatically recorded by the system about actions (who did what and when), used for troubleshooting, security and later verification of actions.
Personal data breach: A security event leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.
Two-factor authentication (TOTP, MFA): Sign-in that requires a second factor besides the password, typically a short-lived code generated by an authenticator app on a phone.
Image moderation, quarantine: Automatic checking of uploaded images (Google Cloud Vision SafeSearch) for likely explicit or violent content; a flagged image is moved to non-public storage (quarantine) and is not shown.
Ptk., Ektv., Fgytv., NAIH, DSA, P2B: Ptk. is the Hungarian Civil Code; Ektv. is the Hungarian Act on electronic commerce services; Fgytv. is the Hungarian Consumer Protection Act; NAIH is the Hungarian data protection authority; the DSA is the EU Digital Services Act; P2B is the EU regulation on fairness for business users of online intermediation services.
Force majeure, best effort: Force majeure is an event beyond the parties' control (for example a natural disaster) that prevents performance; best effort means that Bokko makes reasonable efforts but does not guarantee a specific result or availability.
White-label: Reselling or passing on software under another brand name, so that the original provider's name is not visible.

Governing Language. This English translation is provided for convenience only. In the event of any discrepancy or dispute, the Hungarian version of these terms shall be the sole authoritative text.

Note: These terms reflect the publicly available base version of the Bokko service. Individual B2B agreements may take precedence. Guests requesting appointments on the booking pages are governed by the Guest Terms of Use.

1. Scope and acceptance

Bokko is an online booking management platform through which guests can request appointments and businesses can accept, modify or decline those requests.

These terms apply to business registration, the use of the dashboard, the Public API and webhooks, and visits to Bokko's websites (in particular getbokko.com, help.bokko.io, docs.bokko.io, status.bokko.io). Browsing the websites does not in itself conclude a contract; use of the websites is governed by the prohibitions in Section 6 and the intellectual property provisions in Section 9. The provider relationship is formed by express acceptance of the legal documents (Section 3 of the Service Agreement). If a separate agreement is concluded between Bokko and a business, that agreement may take precedence in the given matter.

Businesses and guests: Provider accounts may be created by subscribers as defined in Section 1 of the Service Agreement — natural persons, legal persons and organisations without legal personality — that use the Bokko provider features in connection with their trade, business, craft or profession; being a company or a registered sole trader is not required, but the provider features may not be used for private, consumer purposes. The primary contractual framework for subscribers is the Service Agreement. Guests requesting appointments on the booking pages are governed by the Guest Terms of Use.

Operator. The Bokko platform is operated by Bokko Technologies Kft. (limited liability company). Its details under Section 4 of Act CVIII of 2001 (Ektv.):
Company name: Bokko Technologies Kft.
Registered seat: Fürdőház utca 1, 7100 Szekszárd, Hungary
Company registration number: [AFTER REGISTRATION] (registry court: Company Registry Court of the Szekszárd Regional Court (Szekszárdi Törvényszék Cégbírósága))
Tax number: [AFTER REGISTRATION]
Representative: Dávid Mácsik, managing director
Electronic contact: support@bokko.app
Hosting provider details are on the Imprint & Contact page.

2. Service description

Among other things, the platform provides the following functions:

a public booking page for requesting services and appointments,
a business dashboard for managing requests,
automatic email notifications on status changes,
reschedule proposals and a guest response flow,
email and optional SMS reminders before confirmed appointments.

Bokko is a platform provider. The actual service is provided not by Bokko but by the selected business.

3. Guests

The rights and obligations of guests requesting appointments on the booking pages — the request flow, fees, deposits and card guarantees, cancellation, restriction of online requests, complaints and consumer rights — are set out in the Guest Terms of Use. The business is responsible for ensuring that the service, cancellation and payment terms shown on its booking page are accurate and lawful.

4. Rules for businesses

Use of the dashboard requires login.
The business is responsible for the accuracy of its services, prices, durations, opening hours and contact details.
The business is responsible for its service commitments to guests, the quality of performance, and compliance with applicable consumer protection and data protection obligations.
Safeguarding account credentials is the business's responsibility. Bokko may treat every operation performed through the account as legitimate use, unless the business credibly reports unauthorised access.
When logging in from a public or shared device, avoid browser "Remember me" / "Save password" options, log out of the dashboard after use, and enable two-factor authentication (TOTP/MFA).

5. Notifications and communication

As part of the service, Bokko may send transactional email notifications, for example about new booking requests, confirmations, rescheduling, declines or cancellations. Before confirmed appointments, email and — where enabled by the business — SMS reminders may also be sent. Businesses may receive email and in-dashboard notifications about their subscription, payments, changes to legal documents and changes to sub-processors.

These messages relate to the operation of the service and do not constitute separate marketing communication. Users are responsible for keeping their contact details correct and usable.

6. Prohibited use

In particular, it is prohibited to:

provide false data or data belonging to another person,
load the system with automated requests, scraping or abusive requests,
circumvent security, access or rate limit mechanisms,
record unlawful, offensive or misleading content as a note, service description, image or other public content,
advertise or broker activities that, in Bokko's reasonable judgement, are incompatible with the platform's brand or audience (in particular explicit sexual services, escort or other adult services, legally grey-zone activities or activities that endanger Bokko's reputation) — Bokko reserves the right to refuse registration of such profiles and to restrict access,
send bulk, unsolicited or spam-like electronic communications through Bokko (in particular non-consent-based newsletters, ignoring confirmed unsubscribes, or bypassing the Bokko newsletter function) — Bokko reserves the right to suspend the newsletter function or the entire account in case of a high spam-complaint rate or abuse reported by the delivery provider (Mailjet, BulkGate),
resell or white-label the service without Bokko's prior permission.

7. Availability and changes

Bokko strives for continuous availability but does not guarantee uninterrupted operation. Maintenance, development, third-party outages or force majeure may cause temporary interruptions.

Bokko may modify the functions, technical environment or appearance of the service, provided this does not breach mandatory legal requirements or existing contractual obligations.

8. Liability

Bokko is not a personal service provider but a technical platform provider. Bokko is not liable for the content, quality, non-performance or defective performance of the actual service relationship between the guest and the business.

In a provider relationship, Bokko's liability is governed by Section 8 of the Service Agreement; otherwise Bokko is liable in accordance with the law. No limitation of liability applies in any case to damage caused intentionally or by gross negligence, to a breach of contract harming human life, physical integrity or health, or to any other case where the law excludes such a limitation.

9. Intellectual property

All components of the Bokko application — including its name, logo, interface, design, texts, source code and other content — are the exclusive intellectual property of Bokko Technologies Kft., and are protected by applicable copyright, trademark and intellectual property laws.

Users may only use the service for its intended purpose. Copying, reverse engineering, modifying or redistributing the service's source code or operation without authorisation is not permitted, except where mandatory law expressly allows it.

10. Suspension and termination

Bokko may temporarily restrict or suspend access or certain functions if the user seriously or repeatedly breaches these terms, engages in unlawful activity, or endangers the platform's security. Bokko informs the affected business about the restriction and its reasons in accordance with Section 16 and Section 10 of the Service Agreement. Termination of the provider agreement — including the rules on prior notice and statement of reasons — is governed by Section 10 of the Service Agreement.

Termination of a business account, data export and account deletion are governed by Section 10 of the Service Agreement and Section 14 of the Data Processing Agreement.

11. Complaints

Complaints about the operation of the Bokko platform can be submitted to support@bokko.app. Complaints about the performance, quality or non-performance of the actual personal service are handled by the business concerned; complaints by guests are governed by Section 10 of the Guest Terms of Use.

12. Miscellaneous

These terms are governed by Hungarian law, without prejudice to mandatory legal provisions. The parties seek to settle disputes amicably first. Disputes arising from the relationship between Bokko and a business are governed by Section 11 of the Service Agreement.

Bokko may amend these terms. In the case of a material change, Bokko sends an email notification to registered businesses at least 30 days before it takes effect; the publication date of the updated version always appears on this page. A business accepts the amended terms by express acceptance in the dashboard; continued use of the platform does not in itself constitute acceptance. Acceptance given before the effective date is an advance acceptance of the amended terms: Bokko records the accepted version, the time of acceptance and the effective date of that version, and the previous terms continue to apply until the effective date. After the effective date Bokko may make the use of certain provider functions conditional on acceptance. A business that does not wish to accept the amendment may terminate the agreement free of charge before the effective date. Previous versions are available at the bottom of the Legal Documents page.

13. Data protection and cookies

Personal data may be processed when using the Bokko platform. Details are in the Privacy Policy. The platform uses cookies and browser storage; these are fully described in the Cookie Policy.

14. Use of the Public API

Where Bokko provides Public API access (api.bokko.io/v1) under a given plan or individual agreement, it may be used by the Subscriber's own systems and by integration providers engaged by the Subscriber, solely within the scope of the Subscriber's API key and at the Subscriber's responsibility.

(a) API key security. The Subscriber is responsible for keeping the API key confidential. If the API key is compromised, the Subscriber must rotate it immediately via the dashboard. The Subscriber is responsible for operations performed with the API key.

(b) Abuse and overload. Bokko may restrict, suspend or terminate API access if it detects abuse, unauthorised data retrieval, or repeated breaches of usage limits.

(c) Service level. Bokko provides API availability on a best-effort basis.

(d) Data processing. Data retrieved or modified via the API is subject to the terms of the Art. 28 DPA relationship; the Subscriber is responsible for ensuring its downstream systems process the data lawfully (see "Webhooks and downstream systems"). For bookings created via the API, obligations regarding delegated consent are set out in the Data Processing Agreement. The automatic no-show restriction enabled by the business also applies to bookings created via the API.

15. Webhooks and downstream systems

Where the webhook function is available and the Subscriber configures its own endpoint, Bokko may optionally send webhook events to that endpoint.

(a) Choice of destination. The Subscriber chooses and is responsible for the webhook destination and its technical configuration.

(b) Downstream processing. The Subscriber is responsible for the downstream system processing the data lawfully.

(c) Best-effort delivery. Bokko provides best-effort delivery. In case of a faulty destination, network outage or non-2xx response, a limited retry mechanism applies; after several failed attempts the event is deemed permanently failed.

(d) Webhook secret. The Subscriber holds a webhook secret for authenticating webhooks and is responsible for rotating it and keeping it confidential.

16. Content moderation and reporting

(a) Points of contact. The single point of contact for Member States' authorities, the European Commission and the European Board for Digital Services under Article 11 of Regulation (EU) 2022/2065 (Digital Services Act), and the single point of contact for recipients of the service (businesses, guests and other users) under Article 12, are both support@bokko.app. Communication is in Hungarian or English; contact does not rely solely on automated tools, and messages are read by a person.

(b) Content concerned. Moderation applies to content published by businesses on the platform: business and staff profiles (name, description, image), services and prices, texts and images of the booking page, and policies provided by the business. Content that is unlawful or that falls under the prohibited uses listed in Section 6 may be removed or disabled.

(c) Reporting. Anyone can report content with the "Report a problem" button on the business page (stating the reason, an optional comment and an optional email address) or at support@bokko.app. A report can be handled on the merits if it identifies the location of the content (the page address) and explains why the content is unlawful or prohibited. Bokko reviews reports individually, by human decision, in order of receipt and without undue delay.

(d) Automated means. Images uploaded as a booking page header image or gallery image are checked on upload by automated image recognition (Google Cloud Vision SafeSearch); if an image is likely to depict explicit nudity or violence, the system does not display it, moves it to non-public quarantine, notifies the business on the dashboard and logs the measure. Reports are not decided by automated means.

(e) Measures. Against unlawful or prohibited content Bokko may apply, proportionately, the following measures: removing or disabling access to the content, restricting the public availability of the booking page, suspending certain functions of the business account or access to it, and in serious or repeated cases terminating the contract under Section 10 of the Service Agreement.

(f) Notification and statement of reasons. If Bokko removes or disables a business's content or restricts its account, it informs the business by email, at the latest when the measure takes effect, of the measure, the factual reasons, whether it acted on grounds of illegality or of these terms (identifying the provision concerned), whether automated means were used, and the available redress options. For automated image moderation (point (d)), the statement of reasons is delivered on the dashboard instead of by email, in the business's language: it identifies the type and location of the image, states that the measure was taken by automated means, cites the contractual ground (Section 6 and Section 16(b) of these terms), and explains how and by when a review under point (g) can be requested. If the reporter provided an email address, Bokko confirms receipt of the report by email and, when the report is closed, informs the reporter by email of the decision, its reasons and the possibility of a review under point (g).

(g) Redress. The affected business and the reporter may request a review of the decision at support@bokko.app within six months of the notification of the decision; Bokko carries out the review by human decision and sends a reasoned notification of the outcome. For automated image moderation, a review can be requested at support@bokko.app within 30 days of the dashboard notification, because the quarantined image can be retained and restored only until then. The review does not affect the right to turn to a court or other competent body.

(h) Abusive reporting. After a warning, Bokko may suspend for a specified period the processing of reports submitted frequently and manifestly unfounded by the same person.