Privacy Policy

Sammy Booking ("Sammy", "we", "us") provides online booking and front-desk software for local salons. This policy explains what information we collect when you use sammybooking.com, a salon's booking site hosted by us, or the Sammy dashboard — and what we do with it.

If you are a salon client booking an appointment, the salon is the controller of your booking details and Sammy processes them on the salon's behalf. If you are a salon owner or staff member with a Sammy account, we are the controller of your account information.

• Account information. When a salon signs up: owner and staff names, email addresses, phone numbers, business name, address and time zone.
• Booking information. When a client books: name, phone number, email address, the services and staff requested, appointment times, and any notes the client or salon adds.
• Billing information. Subscription payments are processed by Stripe. We never see or store full card numbers — Stripe sends us a customer reference and the subscription status.
• Usage and device data. Standard server logs (IP address, browser, pages visited) and privacy-friendly, cookie-less analytics that tell us which pages get traffic.
• Communications. If you email us for support, or enable the optional AI receptionist, we keep the messages and call recordings/transcripts needed to provide that service.

• Provide the booking service: show availability, confirm appointments, reschedule and cancel.
• Send appointment reminders and confirmations by SMS and email on the salon's behalf, including the salon's review requests after a visit.
• Bill the salon's subscription and prevent fraud or abuse.
• Answer support requests and keep the service secure and reliable.
• Improve the product using aggregated, non-identifying usage patterns.

We do not sell personal information, and we do not use salon client lists for our own marketing. Clients only hear from us about appointments they actually made.

We share information only with the processors needed to run the service:

• Stripe — subscription payments.
• Twilio — SMS reminders and the optional AI receptionist.
• Resend — transactional email (confirmations, reminders, receipts).
• AI providers — drafting suggested replies to Google reviews, and the optional AI receptionist. Only the data needed to produce that reply or handle that call is sent; see “Google Business Profile connection” below.
• Hosting and database providers — the infrastructure the app runs on.

Each processor is bound by its own data-processing terms and may only handle the data needed to provide its service to us. We also disclose information if the law requires it, or to protect the rights and safety of our users.

A salon can optionally connect its Google Business Profile to Sammy to manage its reviews and publish a Book Online link on its profile. The connection is started by the salon, and the salon can disconnect it at any time.

When connected, we request Google's business.manage scope and access the following through Google's Business Profile APIs:

• Profile and location details — the business name, address, Google location identifier and Place ID of the profiles on the connected account.
• Reviews — the reviewer's display name and profile photo, the star rating, the review text, any photos or videos the reviewer attached, and the review timestamps. This is information already shown publicly on the salon's Google profile.
• Connection credentials — the connected Google account's identifier and email, and an OAuth refresh token. The refresh token is stored encrypted (AES-256-GCM). Access tokens are requested as needed and never stored.

We use this information only to:

• show the salon its Google reviews inside the Sammy dashboard;
• draft suggested replies to those reviews, and post a reply back to Google when the salon approves it — or automatically, if the salon has turned auto-reply on;
• publish the salon's Book Online link on its Google Business Profile.

To draft a suggested reply, the review text, star rating and the reviewer's display name are sent to our AI provider, for the sole purpose of generating that reply. We do not use Google user data for advertising, we do not sell it, and we do not use it to train our own models.

A salon can disconnect its profile at any time from the Sammy dashboard, and can revoke Sammy's access directly from its Google account permissions. Disconnecting deletes the stored credentials and stops any further syncing or posting. Reviews already synced remain in the salon's dashboard and are covered by “Data retention” below; a salon can ask us to delete them sooner by emailing us.

Sammy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We keep account and booking data for as long as the salon's account is active. When a salon cancels, we delete or anonymize its data within 90 days unless the law requires us to keep it longer (for example, payment records for tax purposes). Backups rotate out on the same schedule.

Passwords are hashed, sessions are signed, traffic is encrypted in transit with TLS, and access to production data is limited to the people who operate the service. No system is perfectly secure, but we work to protect your information and will notify affected users and regulators of a breach where the law requires it.

You can ask to access, correct, export or delete your personal information at any time by emailing us. Salon clients can also ask their salon directly, since the salon controls the booking record.

If you are in the EEA, UK or California, you have the additional rights those laws grant — including objecting to processing and lodging a complaint with your supervisory authority. We do not discriminate against anyone for exercising these rights.

Sammy is software for businesses and is not directed at children under 16. We do not knowingly collect children's information except where a parent or guardian books an appointment for their child.

If we make material changes, we will update the date above and, for significant changes, notify salon account holders by email before the change takes effect.

Questions about this policy or your data: email privacy@sammybooking.com.