Privacy Policy

• Your account details — name, email, phone number, salon name, city, and a hashed password.
• Your service catalog — service names, prices, and durations that you add in the dashboard.
• Customer chat messages — WhatsApp messages exchanged between your customers and the AI receptionist, including phone number and message text. If a customer sends a voice note, the AI transcribes it to text.
• Booking records — appointment time, service booked, customer name.
• Payment receipts — the transaction reference and screenshot you upload when paying a subscription invoice. We do not collect card numbers or bank passwords.
• Basic page-view analytics — counts of which pages are visited, with no personal data attached.

We use the data above to:

• Run the AI receptionist on your behalf.
• Book, reschedule, and cancel appointments your customers request.
• Send service messages to your customers.
• Send you operational emails (receipts, account alerts, trial-expiry warnings).
• Improve the AI's replies.

We do not sell, rent, or trade your data or your customers' data with third parties for marketing.

Chat messages and customer phone numbers are never used to train any third-party AI model. When the AI generates a reply, it sends only the current message and the recent conversation history to the model. The reply is generated and returned, and the provider retains it according to its own short retention policy.

We share the minimum needed with the following service providers:

• Supabase — database hosting for salon, customer, booking, and message data.
• Meta (WhatsApp) — delivers chat messages to and from your customers.
• Our LLM provider — processes the current message to generate the AI reply.
• Our voice-transcription provider — converts voice notes into text. Audio is deleted after transcription.
• Plausible Analytics — counts page views in a privacy-friendly way. No cookies, no personal data.

We keep your data while your account is active. When you cancel or close your account, we permanently delete your salon's chat transcripts, booking records, customer contact details, and uploaded payment screenshots within 90 days. Aggregated, non-identifying analytics (for example, "this salon received 200 messages last month") may be retained for product research.

You and your customers can:

• Ask for a copy of the data we hold.
• Ask us to correct inaccurate data.
• Ask us to delete your data, subject to the retention window above.
• Withdraw consent for any optional processing.

To exercise any of these, email hello@recepta.pk. We respond within 30 days.

We use TLS in transit, encrypted database storage, and role-based access control. No method of transmission over the internet is 100% secure, but we follow standard practices.

Recepta is for adult business owners. We do not knowingly collect data from children under 18. If you believe a child has used the service, email us and we will delete the relevant data.

We may update this page from time to time. When we do, we will revise the date at the top. If the change is significant, we will email active salon owners before it takes effect.