Privacy Policy

Effective Date: August 30, 2026 Version: 6.8

This Privacy Policy describes how Tara Trade International LLC, a Wyoming limited liability company, doing business as The Booking Agency ("we", "us", "our"), collects, uses, discloses, and protects personal data when you use bookingagency.io (the "Platform").

1. Data Controller

Tara Trade International LLC is the data controller for personal data processed through the Platform.

Contact: [email protected]

2. Data We Collect

Data you provide:

• Account data: name, email, password hash, profile photo
• Profile data: skills, city, country, bio, portfolio items, languages, availability
• Communications: messages sent to us or to other users via the Platform
• Payment data: billing address and last four digits of payment method (full card data is handled by Stripe Inc., not by us)

Data collected automatically:

• Usage data: pages viewed, searches performed, timestamps, referrers
• Device data: IP address, browser type, operating system, device identifiers
• Cookies and similar technologies (see our Cookie Policy)

Data from third parties:

• OAuth data (name, email, profile photo) if you sign in with Google
• Stripe subscription and billing metadata
• Publicly available profile data when Talent join the Platform via external links

2a. Job and Gig Listings from External Sources

What we ingest. The Platform aggregates publicly posted job and gig listings from third-party sources (employer career sites, public job boards, and similar feeds) so that Talent can discover opportunities in one place. These listings sometimes include contact details, such as a recruiter's or hiring contact's name and email address, that the source made public as part of the original posting.

Lawful basis. We process this data under legitimate interests (Article 6(1)(f) GDPR): the source published the contact details for the purpose of receiving applications, and republishing them on the Platform serves that same purpose.

Accuracy and removal at source. When a listing is no longer available at its original source, we remove our copy on a recurring schedule rather than leaving a stale listing live.

Your right to object or request removal. If you are named in a listing on the Platform and want your contact details removed, email [email protected] with the subject line "Listing Data Removal" and a link to or description of the listing. We will remove the contact details and ensure the removal is not undone by a future re-ingestion of the same source listing.

3. How We Use Data

We use personal data to: (a) operate and secure the Platform; (b) provide the services you request; (c) process subscription payments via Stripe; (d) personalize your experience; (e) communicate with you about your account, transactional notices, and (with consent) marketing; (f) detect, prevent, and address fraud or security issues; (g) comply with legal obligations; (h) analyze usage to improve the Platform.

4. Legal Bases (GDPR)

For users in the European Economic Area, United Kingdom, and Switzerland, we process personal data under the following legal bases: (a) performance of a contract (to provide services you request); (b) legitimate interests (to operate, secure, and improve the Platform); (c) consent (for marketing emails and non-essential cookies); (d) legal obligation (to comply with laws).

5. Sharing

We share personal data with:

• Service providers acting on our behalf. Our current sub-processors are: Supabase (database and authentication hosting), Vercel (web hosting), Cloudflare (DNS, CDN and security), Stripe Inc. (payment processing and payouts), and Resend (transactional email). We rely on each provider's standard data protection terms; formal data processing agreements with each sub-processor are in progress and will be referenced here once executed. We will update this list before adding a new sub-processor.
• Other Platform users as necessary to enable the service (for example, your public profile is visible to anyone; your messages are visible to the recipient)
• Authorities or third parties when required by law, to enforce our Terms, or to protect rights, safety, or property
• Acquirers in the event of a merger, sale, or reorganization of Tara Trade International LLC

We do not sell personal data. We do not share personal data for cross-context behavioral advertising under the California Consumer Privacy Act (CCPA).

5a. Affiliate Programs

Some outbound links on the Platform are referral links to business tools we use ourselves. If you follow one and sign up, we may earn a commission at no additional cost to you. We only feature products and services we believe add value, and editorial decisions are made independently of affiliate revenue.

We are not currently a member of any travel affiliate network. Programmes previously named here, including Travelpayouts and Awin, are no longer in use and their links have been removed from the Platform.

5b. Third-party affiliate networks

No affiliate-tracking network is currently in use. Our referral links point directly to the partner. Following one tells that partner which site referred you, in the same way any outbound link does; we do not pass your name, email or account identity to them, and we do not operate a shared click-tracking network.

If we join an affiliate network in future we will update this policy and name the network before any click data is shared with it.

You may object to processing based on our legitimate interests under UK GDPR Article 21 / EU GDPR Article 21 by emailing [email protected]. Setting your browser to reject third-party cookies, or using a tracker-blocking extension, also prevents a partner from recording the referral.

6. International Transfers

We operate globally. Personal data may be transferred to and processed in the United States and other countries whose data protection laws differ from yours. Where required, we rely on Standard Contractual Clauses or other legally recognized transfer mechanisms.

7. Your Rights

Depending on where you reside, you may have rights to: access, correct, delete, or restrict the processing of your personal data; object to processing based on legitimate interests; withdraw consent at any time (without affecting prior processing); port your data to another service; lodge a complaint with your data protection authority.

To exercise any of these rights, email [email protected]. We will respond within 30 days. For California residents, these rights include the CCPA rights to know, delete, correct, and opt out of sale or sharing.

8. Data Retention

We retain personal data as long as your account is active, plus a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. Inactive accounts are deleted after 24 months of inactivity unless a legal obligation requires retention. You can request earlier deletion at [email protected].

9. Security

We implement technical and organizational measures to protect personal data, including encryption in transit, encrypted database storage, access controls, and security monitoring. No system is perfectly secure; you use the Platform at your own risk.

10. Children

The Platform is not directed at children under 18. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us personal data, contact [email protected] and we will delete it.

11. Automated Decision-Making and Algorithmic Ranking

What determines where a profile appears. Search results and profile listings are ordered by system rules.

Profiles are first placed into one of three groups, and ordered within their group. The group depends on whether the talent can currently accept a booking, whether payouts are available in their country, and whether their account is subject to a restriction such as recorded cancellations against it. A profile in a lower group appears after every profile in a higher one, regardless of anything below.

Within a group, the main parameters are:

• Whether we have reviewed the profile. Reviewed profiles surface ahead of those we have not reviewed. This is decided by The Booking Agency and cannot be requested or bought.
• Whether the profile has a photograph. A profile with a photo gives a client something to judge.
• How complete the profile is. A headline, a bio, skills and portfolio items all count.
• How much interest the profile has attracted. Profiles viewed by more people surface more readily.
• Subscription tier. Paid subscribers receive a visibility boost. Paid placement therefore influences ranking.

Relevance to what you typed or filtered for is applied separately, on top of this ordering.

We do not publish the relative weighting of these parameters. Doing so would let profiles be arranged to game the order rather than to be useful to clients.

Legal effects. This ranking does not produce legal effects or similarly significantly affect individuals within the meaning of Article 22 of the UK GDPR or EU GDPR. It affects search visibility on the Platform but does not make hiring, employment, or payment decisions.

Your rights (UK and EEA users). Under the UK GDPR and EU GDPR you have the right to: (a) request meaningful information about how the ranking logic applies to your profile; (b) object to processing of your personal data for this purpose under Article 21 UK GDPR; (c) request human review of any algorithmic outcome you believe has materially affected you. To exercise any of these rights, email [email protected] with the subject line "ADM Request." We will respond within 30 days.

Improving your position. You can improve where you appear by completing your profile, adding a photograph, writing a headline and short bio, and linking portfolio items. Those are within your control.

12. Changes

We may update this Privacy Policy from time to time. Material changes will be communicated at least 30 days in advance by email and by notice on the Platform.

13. Contact

Tara Trade International LLC d/b/a The Booking Agency 1021 E Lincolnway Cheyenne, Wyoming 82001 United States Email: [email protected]

For EU/UK users, our representative for GDPR purposes can be reached at [email protected].

Data Controller

Tara Trade International LLC, a Wyoming limited liability company, is the data controller for personal data processed via the Service.