Privacy Policy

Bookaam POS ("Bookaam", "we", "our", or "us") is committed to protecting the privacy of bus transport agencies, their staff, and the passengers who use our platform. This Privacy Policy explains what data we collect, how we use it, and the rights you have over your information when you use the Bookaam POS hardware, the Web Control Dashboard, the online booking platform, or any related Bookaam service (collectively, the "Services").

1. Who We Are

Bookaam POS is an offline-first bus ticketing platform operated for bus transport agencies in Cameroon. Our address and contact details are provided at the end of this Policy. If you have any questions about this document or how your data is handled, please contact us directly.

2. Information We Collect

We collect the minimum information necessary to provide and improve the Services. This falls into the following categories:

2.1 Agency Account Information

• Agency name, legal name, and registration details
• Business address and main city of operation
• Owner and administrator contact details (name, phone, email, WhatsApp number)
• Branch locations and counter identifiers
• Routes, schedules, pricing, and bus configuration

2.2 Staff and Transaction Information

• Staff names and the PINs used to authenticate on Bookaam POS devices
• Transaction logs (ticket issuance, seat allocation, cash totals)
• Device identifiers associated with each branch

Staff PINs are stored securely on-device and are never shared in plain text. Only the agency owner and designated administrators can view aggregated staff performance data.

2.3 Passenger Booking Information

When a passenger books a ticket online through the Bookaam platform or through an agency counter, we collect:

• Passenger name and contact number
• Route, departure date and time, seat number
• Payment confirmation details (Mobile Money reference, amount, currency)
• Booking timestamp

Passenger data is shared only with the agency that operates the departure being booked. It is never shared with third-party agencies.

2.4 Technical and Usage Data

• POS device identifiers, firmware version, and connectivity status
• Web Dashboard login timestamps and IP addresses
• Browser type and version for web-based access
• Error logs and diagnostic reports used to maintain Service quality

3. How We Use Your Information

We use the information we collect to:

• Operate, maintain, and secure the Bookaam POS hardware and Web Dashboard
• Process ticket sales, seat allocations, and thermal ticket printing
• Enable online booking and deliver confirmation receipts to passengers
• Pay agencies their share of online booking fees
• Provide technical support and resolve incidents
• Detect, prevent, and respond to fraud, impersonation, or abuse of the platform
• Improve the Services through aggregated, anonymized usage analysis
• Comply with legal obligations and lawful requests from authorities

4. How We Share Information

We do not sell your data. We share information only in the limited circumstances described below:

4.1 Payment Providers

When a passenger pays for an online booking, we share the minimum information required with our Mobile Money and payment processing partners to complete the transaction. These providers are bound by their own data protection obligations.

4.2 Service Providers

We work with infrastructure partners who host the Web Dashboard, store encrypted backups, and deliver messages. These partners process data on our behalf under strict confidentiality obligations and only for the purposes we authorize.

4.3 Legal Requirements

We may disclose information if required by Cameroonian law, a court order, or a lawful request from a competent authority. Where legally permitted, we will notify the affected agency before disclosure.

4.4 Business Transfers

If Bookaam is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to continued protection under this Policy or a successor policy with equivalent protections.

5. Data Storage and Security

We take the security of your data seriously. Our safeguards include:

• Offline-first architecture. Transaction data is stored locally on the POS device and only syncs to our servers over encrypted connections.
• Encrypted transmission. All data synced to the Web Dashboard is transmitted over HTTPS with modern TLS encryption.
• PIN-based authentication. Every staff action is tied to a unique PIN, providing an audit trail and limiting unauthorized access.
• Access controls. Only authorized Bookaam engineers can access production infrastructure, and all access is logged.
• Incident response. We maintain procedures to detect, respond to, and notify affected agencies of any security incidents that may impact their data.

No system is perfectly secure. While we work hard to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain agency, transaction, and passenger data for as long as your agency maintains an active Bookaam account, and for a limited period afterward to comply with legal obligations (such as tax and accounting regulations in Cameroon). When the retention period ends, we either securely delete the data or anonymize it so it can no longer be linked to any individual or agency.

7. Your Rights

Agencies and individuals whose data is processed by Bookaam have the following rights, subject to applicable law:

• Access — Request a copy of the personal data we hold about you.
• Correction — Ask us to correct data that is inaccurate or incomplete.
• Deletion — Request deletion of your data, subject to legal retention requirements.
• Portability — Request a copy of your data in a structured, machine-readable format.
• Objection — Object to specific uses of your data, including any processing we conduct on the basis of legitimate interest.
• Withdraw consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us using the details at the end of this Policy. We will respond within a reasonable time frame, typically within thirty (30) days.

8. Cookies and Tracking

The Bookaam Web Dashboard uses a minimal set of cookies and local storage entries strictly necessary to keep you logged in, remember your theme preference, and maintain session security. We do not use third-party advertising cookies, and we do not track passengers across the web.

9. Children's Privacy

The Services are intended for use by businesses and adults. We do not knowingly collect personal information from children under the age of 18. If you believe we have inadvertently collected information from a minor, please contact us and we will delete it.

10. International Data Transfers

Bookaam primarily processes and stores data within infrastructure serving Central Africa. If we transfer data outside of Cameroon for technical or operational reasons, we will ensure appropriate safeguards are in place to protect your information.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or operational practices. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify active agencies through the Web Dashboard or by direct contact.

12. Contact Us

If you have questions about this Privacy Policy, want to exercise any of your rights, or wish to report a concern, please contact us at: