Lahora

Privacy policy

Last updated: 22 September 2026

This policy explains what personal data Lahora keeps, why, who else sees it, and what your rights are.

1. Who we are

Lahora (lahora.app) is a booking tool for online specialists. It is run by Viacheslav Alekseev, who is responsible for your data (the "data controller" under the GDPR).

Contact for anything about your data: [email protected].

2. What data we keep

If you are a specialist

  • Account: first and last name, email, password (we keep only a secure hash, never the password itself), timezone, language, and when you accepted our terms.
  • Profile: display name, speciality and your booking link.
  • Your work in Lahora: services, availability, bookings and the history of changes to each booking.
  • Logins: for each device where you are logged in, the IP address and the browser name, so you stay logged in and we can spot misuse.

If you book a session (client)

  • Booking details: your first and last name, email, the note you write (optional), the service, the time, and the history of changes to the booking.
  • Your timezone and language, taken from your browser, so emails show the right time in your language.
  • You do not need an account to book. We still keep a record linked to your email, so all your bookings stay together. You cannot log in with it for now.

Everyone

  • Technical logs: our servers and our network provider record technical data such as IP addresses and the pages requested. We use them only for security and to fix problems, and they are deleted after a short time.
  • Error reports: when something breaks, a report goes to our error tracking service. We remove personal data from these reports; for a logged-in specialist, only the internal user number is included.

We do not use analytics, advertising or tracking of any kind, and we do not sell or share data for marketing.

3. Why we use your data

  • To provide the service you asked for (GDPR Art. 6(1)(b), a contract): accounts, the booking page, bookings, and the emails about them.
  • To keep Lahora safe and working (GDPR Art. 6(1)(f), our legitimate interest): logins, technical logs, error reports and backups.
  • To follow the law (GDPR Art. 6(1)(c)), if a law requires us to keep or share data.

4. Who sees your data

  • The specialist you book with sees your name, email, note and the booking details, and gets emails about your booking. The specialist uses this data to hold the session and is responsible for how they use it outside Lahora.
  • The client sees the specialist's public profile and the booking details.
  • Anyone can see a specialist's public booking page: display name, speciality, services and free times. It never shows who booked.
  • Service providers that run parts of Lahora for us, only as far as needed:
    • Hetzner Online GmbH (Germany): our servers in Falkenstein, Germany, and our encrypted backups.
    • Cloudflare, Inc. (USA): delivers the website and protects it from attacks.
    • Postmark (ActiveCampaign, LLC, USA): sends our emails.
    • Sentry (Functional Software, Inc., USA): receives error reports.
  • Authorities, only when the law requires it.

Some of these providers are in the USA. The transfer is protected by the EU–US Data Privacy Framework or by the Standard Contractual Clauses of the European Commission.

5. Cookies

Lahora uses only cookies that it needs to work: one keeps you logged in, one protects forms from misuse and carries short messages between pages, and one remembers the language you chose. Cloudflare may set a security cookie to tell people from bots. We use no analytics or advertising cookies, so we do not ask for cookie consent.

6. How long we keep data

  • Accounts and bookings: as long as the specialist's account exists, or until you ask us to delete them.
  • Logins: until you log out on that device.
  • Backups: 7 days. After you delete data, it can stay in a backup for up to 7 more days.
  • Technical logs, emails at our email provider and error reports: for a short time set by each provider, then they are deleted.

7. Your rights

Under the GDPR you can ask us to:

  • show you the data we keep about you, and give you a copy;
  • correct it;
  • delete it;
  • limit how we use it, or object to how we use it.

Specialists can change most of their data themselves on the Profile and Settings pages. For anything else, including deleting an account or a client's data, write to [email protected]. We answer within one month.

If you think we handle your data wrongly, you can complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).

8. Security

Connections to Lahora are encrypted (HTTPS). Passwords are stored only as secure hashes. Backups are encrypted before they leave our servers, and the key to open them is kept offline.

9. Age

Lahora is not meant for people under 16. Do not create an account or book a session if you are younger.

10. Changes to this policy

When we change this policy, we update the date at the top of the page. If a change is important, we tell specialists by email before it applies.