Legal

Privacy Policy

Last updated: August 15, 2026

BookedSpas ("BookedSpas," "we," "us," or "our") provides AI-powered virtual receptionist services to medical spa and wellness businesses ("Clients"). This Privacy Policy explains how we collect, use, and protect information in connection with our services and this website.

1. Information We Collect

Client business information. When a business engages BookedSpas, we collect business contact details, staff phone numbers, and service configuration information (such as business hours, service menus, and pricing) needed to operate the AI receptionist on the Client's behalf.

Caller information. When our AI receptionist handles a phone call on behalf of a Client, we may collect the caller's name, phone number, and the substance of the call (such as the service requested, appointment details, or questions asked) in order to generate a call summary for the Client's staff.

Website information. If you visit bookedspas.com, we may collect standard technical information such as IP address, browser type, and pages visited, typically through analytics tools.

2. How We Use Information

Operate the AI receptionist service and route calls appropriately for each Client
Send internal call-summary notifications (via SMS and/or email) to a Client's own staff — never to the caller or general public
Maintain and improve the quality and accuracy of our AI receptionist service
Communicate with Clients about their account and our services
Comply with legal obligations and carrier/telecom compliance requirements (including SMS 10DLC registration requirements)

3. How We Share Information

We do not sell caller or Client information. We may share information with:

The Client whose business handled the call — call summaries are sent only to that Client's own designated staff numbers/emails
Service providers who help us operate our platform (e.g., telephony, AI, and messaging infrastructure providers), under confidentiality obligations
Legal authorities, if required by law, subpoena, or to protect the rights and safety of BookedSpas, our Clients, or others

4. SMS Communications

BookedSpas sends SMS messages only to a Client's own internal staff numbers, summarizing calls that our AI receptionist handled on the Client's behalf. These are operational, not promotional, messages. We do not send SMS marketing to callers or the general public through this system.

5. Data Retention

We retain call and business information for as long as reasonably necessary to provide our services, support the Client relationship, and meet legal and compliance obligations, after which it is deleted or anonymized.

6. Data Security

We use commercially reasonable technical and organizational measures designed to protect information from unauthorized access, disclosure, or loss.

7. Your Choices

Clients may request access to, correction of, or deletion of their business information by contacting us at the email below. Callers with questions about how their information was handled during a call to one of our Clients should contact that Client directly, or reach out to us and we will assist.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above.

9. Contact Us

Questions about this Privacy Policy can be directed to:
BookedSpas · cj@bookedspas.com

This document is a general-purpose privacy policy and has not been reviewed by an attorney. We recommend legal review, particularly given its use in telecom compliance (A2P 10DLC) registration.