Privacy Policy

Last updated: [insert date]

Template placeholder — have this reviewed by a qualified attorney familiar with HIPAA and your jurisdiction before publishing. This is not legal advice.

1. Information We Collect

We collect information you provide directly (such as name, email, and phone number when booking a call or submitting a form), and information collected automatically through your use of our website and platform (such as usage data and device information).

2. Protected Health Information (PHI)

As a platform supporting HIPAA-compliant med spa operations, we may process Protected Health Information on behalf of our clients under a signed Business Associate Agreement (BAA). PHI is handled in accordance with HIPAA requirements and is never used for purposes outside the scope of that agreement.

3. How We Use Information

To provide, operate, and improve our platform
To communicate with you about your account or inquiries
To comply with legal and regulatory obligations

4. Data Security

We use encryption and access controls to protect stored data. No system is completely secure, but we maintain safeguards consistent with HIPAA requirements for any PHI processed on our platform.

5. Third-Party Services

We may use third-party service providers (such as scheduling, communication, or hosting providers) who are contractually bound to protect your data consistent with this policy and applicable law.

6. Your Rights

Depending on your location, you may have rights to access, correct, or delete your personal information. Contact us at [email protected] to make a request.

7. Contact Us

Questions about this policy can be directed to [email protected].