What we record, and whose it is.

Expenety is operated by BKPCELA d.o.o., Ostrogovićeva ulica 10, 10000 Zagreb, Croatia. OIB 53066589531. Reach us at [email protected]. This page says in plain words what this site records and why. Last updated 11 September 2026.

When you book a time

We store what you type: name, phone, email, the time you picked, and anything you add in the optional note.
We store the exact consent wording you agreed to, with the booking, word for word and dated. Not a ticked box: the sentence you actually read.
We contact you about that appointment and nothing else: a confirmation, a reminder before it, one question afterwards asking whether it happened, and if it did not, one offer to pick a new time. That is the whole list. Reply STOP to any text, or use the unsubscribe link, and it ends.
Your phone number is never shared for marketing. No mobile information is shared with third parties or affiliates for marketing or promotional purposes. It is used to reach you about the appointment you booked, and for nothing else. Your number is never sold, and it is never passed to another company to be marketed to.
We store which link brought you here (the ad or page), so the booking knows its source. That lives in one first-party cookie for 90 days.

One thing we look up, that you did not tell us

Before an estimator drives to your house, we check the phone number you gave against the phone network's own records. It tells us whether the number is real and reachable, what kind of line it is, and the name the carrier has registered to it. Nothing else, once per booking, and never from anywhere but the carrier.

Why: a visit set up on a number nobody answers costs somebody a trip across town. We would rather find that out before, and telling you we do it is part of doing it.

How long we keep it

Your booking stays while the business you booked with is a client of ours, so that both of you can look up what was agreed.
Ask us to delete it and we will, whenever you like. See below.
Backups are the one thing that lags. Our host keeps a rolling thirty-day window we cannot reach into, so a deletion reaches the live record straight away and the last copy of a backup within thirty days.

Counting, not tracking

Pages count their own views: page, day, source. No identifier, no profile.
We use the Meta pixel so the ads that pay for this page can be measured. If you book, Meta is told a booking happened, keyed so it is not double-counted. See Meta's own privacy policy for what Meta does with its cookie.

When a business connects its ad accounts

A business on the system connects its own Google Ads and Meta ad accounts. We sign in with Google for two things only: to read what the ads cost, and to send back whether a booked appointment actually happened.
What we take from Google is limited to spend, impressions, clicks and the ad's own name, by day and by ad. We do not read Gmail, Drive, contacts, or anything about a personal Google profile, and we never ask for permission to.
The sign-in credential is encrypted at rest and used only by this system. We do not sell it, pass it to anyone else, or use Google data to build advertising audiences or train models. No person at Expenety reads it except to support the business it belongs to, or where the law requires it.
A business can withdraw access at any time, from its own Google account or by asking us. When access ends we stop reading and delete the stored credential.
Expenety's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

When a business asks a question about its own numbers

A business on the system can ask a plain question and get a plain answer about its own bookings. Most answers are worked out here, from the record, with no outside company involved.
Where a question needs a language model, the request goes to xAI Corp. in the United States. Every name, phone number, email address and street address is swapped for a placeholder before the request leaves us, and swapped back in the answer on this side. The model is never sent one. A test in our build fails if a real name or number ever reaches the request.
Under our contract with xAI they keep nothing after answering: the request is not stored and is not used to train their models.
The full list is on who else touches the data.

Whose it is

For businesses on the system: everything the system records about your business is yours, and it leaves with you when the engagement ends.
We do not sell or share booking data with anyone who is not needed to deliver the appointment. Every company that touches it is named on one page: who else touches the data. If we add one, that page changes first.
Once your booking reaches the office of the business you booked with, it is theirs. Asking us to delete something cannot reach their inbox, so ask them too. We would rather say that than let you assume otherwise.

Do not sell or share my personal information

We do not sell anything. We do share one thing: if you book, the ad platform that paid for the page is told a booking happened, so the ad can be measured. Several US states count that as sharing and give you the right to switch it off. Two ways, both of which we honour:

If your browser sends the Global Privacy Control signal, we already stop. Nothing loads and nothing is sent. You do not have to do anything.
Otherwise, use this button. It stops the measurement on this browser.

It sets one flag in this browser, so it applies here and not on your other devices. It changes nothing about a visit you have booked: you still get the confirmation and the reminder.

Your say

Want your details corrected or deleted, or want to know exactly what we hold about you? One email: lovro@expenety.com. We answer from the record, not from a form letter.