Privacy

This website

• The site has no forms, accounts, advertising or tracking cookies.
• It counts visits with Vercel Web Analytics, which uses no cookies and doesn't identify you.
• My host, Vercel, keeps standard server logs (such as IP addresses and the pages requested) to keep the site running and secure.

When you message me on WhatsApp

• Your messages, your name and number as WhatsApp shows them, and any photos or voice notes you send reach my private booking system, so I can keep track of your enquiry and your booking.
• An AI assistant reads new messages and prepares a draft booking (date, time, venue, services). I check every draft myself. Nothing is booked, and no message is sent, without me.
• Voice notes are turned into text so they can be read the same way.
• Phone numbers are removed before any message is read by the AI.

My Google Calendar

My booking system connects to one calendar in my own Google account, so my bookings and my calendar stay the same.

• It reads that calendar's events (title, time, place and my notes) to bring my existing bookings into the system, and to notice changes I make there.
• It adds, changes and removes events on that calendar when a booking is confirmed, changed or cancelled.
• To understand short event titles like "2 pax bride rina", the title, time and place of an event are read by the same AI assistant. Nothing else from my Google account is used.
• It never reads my other calendars, email, contacts or files.
• I can disconnect at any time, in the booking system or at myaccount.google.com/connections. Disconnecting deletes the stored access straight away.

Google API data (Limited Use)

• Hairverdose CRM's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
• Data from Google Calendar is used only to keep my bookings and my calendar in step. It isn't sold, isn't used for advertising, isn't used to train AI models, and isn't read by anyone other than me and the developer who maintains the system, when that's needed to fix a problem.

Who handles the data for me

• Supabase stores the booking system's data.
• Vercel hosts this website and the booking system.
• Groq runs the AI assistant and the voice-note transcription. It is set to keep no data, and doesn't train on it.
• Resend sends my own notification emails, with names, dates and services only.
• Google holds my calendar.
• A private server runs the WhatsApp connection.

None of them may use the data for their own purposes.

How long it's kept

• Booking records are kept while they're useful for my work and my accounts.
• Photos and voice notes from chats are deleted automatically after 90 days, except payment receipts, which stay with the booking.
• You can ask me to delete your information at any time.

Your choices

To see, correct or delete what I hold about you, message me on WhatsApp.