ServiceSprig

Draft — to be reviewed by a lawyer. This is a placeholder, not a final agreement.

Privacy policy

Version 2026-10-draft

This explains what information ServiceSprig holds, why, who helps us process it, and how long we keep it. It covers business owners and their teams, and the clients who book with them.

1. Two kinds of data

For your own account, we decide how your data is used. For your clients’ details, you (the business) decide, and we process them on your behalf to run your bookings and website. [Controller/processor wording and a data processing agreement to be confirmed.]

2. What we hold about owners and team members

  • Login details: email address, a securely hashed password, sign-in times.
  • Profile: your name, role, and the businesses you belong to, plus when you accepted these terms.
  • Business details: name, address or service area, hours, services, prices, photos and website content.

3. What we hold about clients

  • Name, email, phone number and any notes the business adds.
  • Appointment history: services, times, prices and status changes.
  • Marketing consent, if the client gave it.

4. How we use it

  • To take and manage bookings and send booking emails (confirmations, reminders, changes).
  • To show your public website and availability.
  • To keep the service secure, fix problems and prevent abuse.

5. Who helps us (processors)

  • Supabase: database, file storage and sign-in.
  • Resend: sending booking and account emails.
  • Anthropic: optional AI website suggestions. Only business details you choose to send are shared; client details are not.
  • Our hosting provider [to be named, e.g. Vercel]: serving the app and websites.
  • [Stripe and Twilio to be added when payments and text messages launch.]

6. How long we keep it

We keep data while your account is active. When an owner deletes a business, its clients, appointments, services, team records, website and photos are deleted straight away. Backups roll off within [period to be confirmed]. [Retention for billing records to be confirmed.]

7. Your choices and rights

Owners can export or delete their business data from the Account page. Clients should contact the business they booked with; we’ll help the business respond. [State-specific rights, e.g. California, to be reviewed.]

8. Contact

Privacy questions: [privacy contact email and postal address to be added].