/ Privacy
Privacy policy.
What we collect when you visit myobos.com or sign up, why, and who it’s shared with.
Last updated 7 October 2026.
Who we are
Inferrex Ltd, company number 17011782, 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom, is the controller for the information described here. Contact us about anything in this policy at hello@myobos.com.
If you’re a client of a business that uses Myobos (you booked or bought something on its website), that business is responsible for your information and its own privacy policy applies. We process it on the business’s behalf.
What we collect
| When | What | Why (lawful basis) |
|---|---|---|
| You sign up | Your name and email, your business’s name and type, the web address and any domain you choose, whether you’d like product news, and when you agreed to our terms | To set up and run your site (contract). Product news only if you ticked the box (consent). |
| You subscribe to a plan | Your plan, billing contact and subscription status; Stripe handles your card | To bill you for the service (contract) |
| You buy a domain | The domain and registration length; Stripe handles your card | To register the domain (contract) |
| You sign in | Your email, name and a Microsoft account identifier | To let you into your admin (contract) |
| You use a form on myobos.com | Your IP address, used for rate limits and the Cloudflare Turnstile bot check | To protect the service from abuse (legitimate interests) |
| You email us | Your message and email address | To reply (legitimate interests) |
| You use a myobos account (myobos.com/account or the myobos app) | Your name and the email addresses you sign in with; a mobile number if you add one, after you confirm it with a text code; documents you upload, kept encrypted; which businesses you archive or remove; which documents you share, with whom, and when a business opens them; and, if you allow notifications, your phone’s notification address, linked to the email on your bookings with each business you book in the app (removed when you turn notifications off for that business) | To provide your account (contract) |
| You add your details to your myobos account (optional) | Any of: first and last name, preferred name, a main phone (one you confirmed), up to two addresses with notes, date of birth, access needs (wheelchair, assistance dog, other notes, which can say something about your health), and how you like to be contacted; and which businesses you keep up to date with them | To keep them for you (contract). To send them to a business only when you turn on “Keep them up to date” for it, and access needs only on that basis (your explicit consent, which you can withdraw at any time by turning it off) |
| A business on Myobos knows you | A scrambled, one-way code made from the email addresses and phone numbers of each business’s customers, team and admin users. We can’t turn the code back into an address. | To show signed-in account holders the businesses they use or work at (legitimate interests, on behalf of those businesses) |
We don’t sell personal information, and myobos.com has no advertising or analytics trackers.
Who we share it with
These companies process information for us, and for the businesses on Myobos, under contracts that require them to protect it:
| Provider | What for |
|---|---|
| Cloudflare | Hosting, databases, file storage, DNS, domain registration and bot checks |
| Microsoft | Sign-in (Microsoft Entra External ID), hosting of our mail server (Azure), and address search and route times for journey bookings (Azure Maps) |
| Stripe | Payments, and each business’s own payment account |
| Resend | Sending email, including sign-up and booking emails and newsletters |
| Twilio SendGrid | Relaying email sent from our mail server |
| AirLabs | Flight times for airport pickups (flight numbers only) |
| Microsoft (Azure Communication Services) | Sending text messages, such as the codes that confirm a mobile number on a myobos account |
| Infobip | Delivering our text messages, and notifications to phones with the myobos app (through Apple and Google) |
If you choose to sign in with Google, Apple or Facebook, that company confirms who you are to us under its own privacy policy. When you open your myobos account, we ask each business you use for your own bookings and newsletter choices, using your confirmed email addresses. When a business connects its Facebook Page, Instagram or LinkedIn page, we pass its posts and replies to those services, and receive the messages, comments on its posts and lead form answers people send it there, and figures for how its posts did, on the business’s behalf; Meta and LinkedIn handle them under their own privacy policies. If a business shows Facebook, Instagram or Threads posts on its website, they load from Meta only when a visitor chooses to show them. A business receives one of your documents only when you share it, and your details only while you keep it up to date with them; what it has received stays in its own records.
Some of these providers may process information outside the UK. Where they do, they rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
How long we keep it
- Sign-ups that are never confirmed are deleted after 30 days.
- Your account details are kept while your site is active, and deleted within 30 days of the service ending, unless we must keep a record by law (for example, of payments).
- Emails you send us are kept as long as needed to deal with them.
- Your myobos account is kept until you close it. Documents are kept until you delete them, and any sharing ends at once.
- Text message codes are deleted within two days.
- The scrambled codes businesses send us are replaced every day, and removed when a business leaves Myobos.
- Copies a business keeps of documents you shared are held for that business’s own retention period, then deleted automatically.
Cookies
myobos.com sets only cookies needed for sign-in: a short-lived one (15 minutes) while you sign in, and one (10 minutes) while you sign out. Each business’s site sets a session cookie for 30 days when someone signs in. When you sign in to your myobos account, myobos.com sets one cookie that keeps you signed in for up to 30 days. None are used for advertising or tracking. Cloudflare may set cookies needed for security and bot checks.
Your rights
You can ask to see, correct, delete or move your information, object to how we use it, or withdraw consent for product news at any time. On your myobos account page you can change or clear your details, stop keeping a business up to date with them, delete documents, remove emails and phone numbers, and close your account. To have a business delete what it holds about you, including copies of documents you shared, send it a request from your account page or contact it directly. Email hello@myobos.com. If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office at ico.org.uk.
Changes
We’ll update the date at the top when this policy changes, and email signed-up businesses about significant changes.