Privacy Policy

1. Who we are

StyleSavvy ("we," "us," "our") provides booking software for service entrepreneurs — salons, barbershops, spas, trainers, and similar businesses — at stylesavvybooking.com. This policy explains what personal data we collect, why, and how it's handled, including when it's processed by AI systems on our behalf.

2. What data we collect

• From salon/business owners: name, email, phone number, business details, payment information (processed via Paystack, not stored by us directly)
• From clients booking an appointment: name, phone number, email (where provided), appointment details, and any message content sent through our WhatsApp booking assistant

3. How we use AI to process your data

This section matters, so we're stating it plainly.

StyleSavvy uses an AI-powered assistant (built on Anthropic's Claude) to help clients book appointments conversationally over WhatsApp. When you message this assistant:

• Your message content is sent to Anthropic (the company behind Claude) to generate a response and determine the booking action to take
• Anthropic processes this data on our behalf, as a data processor — StyleSavvy remains responsible for how your data is used
• This processing is governed by Anthropic's own Data Processing Addendum and Standard Contractual Clauses, which cover data transferred outside the UK/EU
• Anthropic does not use this data to train its models when accessed through StyleSavvy's business use of the API
• We do not use AI to make fully automated decisions that produce legal or similarly significant effects on you without the ability for human review — a real person at the salon can always review or override a booking

Why we process this data this way: to provide the booking service you've requested — this is a contractual necessity, not optional data collection. Where WhatsApp conversation content goes beyond what's strictly needed to complete a booking, we rely on your consent, given by choosing to message the assistant.

4. Other ways we use your data

• Sending booking confirmations and reminders via email (Resend) and WhatsApp (Twilio)
• Processing deposits and payments via Paystack
• Improving our service and fixing bugs (using aggregated, de-identified data where possible)

5. Who we share data with

We share data only with the service providers needed to run StyleSavvy:

We do not sell personal data.

6. International data transfers

Some of our providers, including Anthropic, process data on servers outside the UK/EU (primarily the United States). Where this happens, transfers are covered by Standard Contractual Clauses and, where applicable, the UK International Data Transfer Addendum — the standard legal safeguards required for this kind of transfer.

7. Your rights

If you're in the UK or EU, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to certain processing, including AI-assisted processing
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at support@stylesavvybooking.com. For data deletion specifically, you can also use our self-service request form.

8. Data retention

We retain personal data only as long as needed to provide the service or as required by law. [Insert specific retention periods once decided — e.g. booking records kept for X years for tax/business purposes, WhatsApp conversation logs retained for X days.]

9. Security

We use encryption in transit (HTTPS/TLS) and work with providers that maintain industry-standard security practices. [Insert any additional specifics once confirmed — e.g. encryption at rest via Supabase.]

10. Changes to this policy

We may update this policy as StyleSavvy grows, particularly as we expand into new markets. We'll post the updated version here with a new "last updated" date.

11. Contact us

Questions about this policy or your data: support@stylesavvybooking.com