Privacy Policy

1. Who we are

BookedByBeauty ("we", "us", "our") provides an AI-powered booking assistant for beauty businesses, connecting to platforms such as Instagram and WhatsApp on behalf of our business customers ("you", "your business").

2. Information we collect

• Business account information — your name, email address, business profile details, and services you provide, collected during signup and onboarding.
• Client conversation data — messages exchanged between your clients and your connected Instagram or WhatsApp accounts, processed by our AI assistant in order to respond to and capture bookings and leads.
• Channel access tokens — OAuth access tokens for Instagram and WhatsApp, obtained when you connect a channel. These are encrypted at rest and used only to send and receive messages on your behalf.
• Billing information — subscription and payment details, processed and stored by our payment provider, Stripe. We do not store card numbers ourselves.
• Account and session data — login credentials (stored as salted hashes, never in plain text) and session cookies used to keep you signed in.

3. How we use this information

We use this data to operate your booking assistant: replying to client messages, guiding bookings, populating your dashboard, processing billing, and providing customer support. We do not sell your data or your clients' data to third parties.

4. Data retention

We retain business account and conversation data for as long as your account is active, so your dashboard and conversation history remain available to you. If you close your account, we delete or anonymise your data within a reasonable period, except where we're required to retain it for legal or accounting purposes (for example, billing records).

5. Third-party services

We rely on a small number of third-party services to operate BookedByBeauty, including Meta (Instagram and WhatsApp messaging), Stripe (billing), and Anthropic (the AI model that powers conversation replies). Each processes data only as necessary to provide their service to us.

6. Cookies and sessions

We use a session cookie to keep you signed in to your dashboard. We don't use third-party advertising or tracking cookies.

7. Your rights

You can request access to, correction of, or deletion of your business's data at any time by contacting us. Your clients can also contact you (as the business they messaged) or us directly with questions about how their messages were handled.

8. Contact us

Questions about this policy can be sent via our contact page.