Privacy Policy

Sammy Booking ("Sammy", "we", "us") provides online booking and front-desk software for local salons. This policy explains what information we collect when you use sammybooking.com, a salon's booking site hosted by us, or the Sammy dashboard — and what we do with it.

If you are a salon client booking an appointment, the salon is the controller of your booking details and Sammy processes them on the salon's behalf. If you are a salon owner or staff member with a Sammy account, we are the controller of your account information.

• Account information. When a salon signs up: owner and staff names, email addresses, phone numbers, business name, address and time zone.
• Booking information. When a client books: name, phone number, email address, the services and staff requested, appointment times, and any notes the client or salon adds.
• Billing information. Subscription payments are processed by Stripe. We never see or store full card numbers — Stripe sends us a customer reference and the subscription status.
• Usage and device data. Standard server logs (IP address, browser, pages visited) and privacy-friendly, cookie-less analytics that tell us which pages get traffic. Separately, when a salon runs ad campaigns through Sammy, the booking pages may set standard advertising cookies (such as the Meta Pixel) so those platforms can recognize visitors to the booking pages, whether or not they arrived from an ad, for the salon's ad measurement and advertising audiences — see “Advertising measurement” below.
• Communications. If you email us for support, or enable the optional AI receptionist, we keep the messages and call recordings/transcripts needed to provide that service.

• Provide the booking service: show availability, confirm appointments, reschedule and cancel.
• Send appointment reminders and confirmations by SMS and email on the salon's behalf, including the salon's review requests after a visit.
• Bill the salon's subscription and prevent fraud or abuse.
• Measure how the salon's own advertising performs — which ads lead to completed appointments — when the salon has connected ad tracking. See “Advertising measurement” below.
• Answer support requests and keep the service secure and reliable.
• Improve the product using aggregated, non-identifying usage patterns.

We do not sell personal information, and we do not use salon client lists for our own marketing. Clients only hear from us about appointments they actually made.

We share information only with the processors needed to run the service:

• Stripe — subscription payments.
• Twilio — SMS reminders and the optional AI receptionist.
• Resend — transactional email (confirmations, reminders, receipts).
• AI providers — drafting suggested replies to Google reviews, and the optional AI receptionist. Only the data needed to produce that reply or handle that call is sent; see “Google Business Profile connection” below.
• Advertising measurement (Google Ads and Meta) — when a salon connects ad tracking, completed-booking conversion events described in “Advertising measurement” below.
• Hosting and database providers — the infrastructure the app runs on.

Each processor is bound by its own data-processing terms and may only handle the data needed to provide its service to us. We also disclose information if the law requires it, or to protect the rights and safety of our users.

When you book an appointment or sign in with your mobile number, the salon texts you about that appointment: confirmations, reminders, changes and cancellations, and a request to review your visit afterwards. You also get a one-time sign-in code each time you ask for one. Promotional texts go only to clients the salon has recorded as agreeing to them, and each one says how to opt out.

• Message frequency varies with your bookings. Message and data rates may apply.
• Reply STOP to any text to stop receiving them, or HELP for help. You can also contact the salon directly.
• Your mobile number is never shared with third parties or affiliates for their own marketing or promotional purposes. Text-message opt-in data and consent are not shared with any third party, other than Twilio, which delivers the messages.

A salon can optionally connect its Google Business Profile to Sammy to manage its reviews and publish a Book Online link on its profile. The connection is started by the salon, and the salon can disconnect it at any time.

When connected, we request Google's business.manage scope and access the following through Google's Business Profile APIs:

• Profile and location details — the business name, address, Google location identifier and Place ID of the profiles on the connected account.
• Reviews — the reviewer's display name and profile photo, the star rating, the review text, any photos or videos the reviewer attached, and the review timestamps. This is information already shown publicly on the salon's Google profile.
• Connection credentials — the connected Google account's identifier and email, and an OAuth refresh token. The refresh token is stored encrypted (AES-256-GCM). Access tokens are requested as needed and never stored.

We use this information only to:

• show the salon its Google reviews inside the Sammy dashboard;
• draft suggested replies to those reviews, and post a reply back to Google when the salon approves it — or automatically, if the salon has turned auto-reply on;
• publish the salon's Book Online link on its Google Business Profile.

To draft a suggested reply, the review text, star rating and the reviewer's display name are sent to our AI provider, for the sole purpose of generating that reply. We do not use Google user data for advertising, we do not sell it, and we do not use it to train our own models.

A salon can disconnect its profile at any time from the Sammy dashboard, and can revoke Sammy's access directly from its Google account permissions. Disconnecting deletes the stored credentials and stops any further syncing or posting. Reviews already synced remain in the salon's dashboard and are covered by “Data retention” below; a salon can ask us to delete them sooner by emailing us.

Sammy's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

A salon can optionally run advertising campaigns through Sammy with Google Ads and Meta (Facebook/Instagram). When it does, three things happen:

• Ad click identifiers. When a client arrives from one of the salon's ads, the advertising click identifier in the link is stored with that booking. When Meta tracking is connected, Meta's tag may also set its standard advertising browser cookie for visitors to the booking pages.
• Booking events. When Meta tracking is connected, Meta's tag on the booking page also reports, in the browser, that a booking was made and its value at the moment the booking succeeds, whether or not the visit began with an ad click — this is what lets Meta measure and optimize the salon's campaigns.
• Conversion reporting. When an online booking made through the salon's booking page is completed at the salon — or, for Google Ads, when a booking taken by phone or in person is matched to a call placed to the salon's ad-tracking phone number — we tell the advertising platforms that a completed appointment happened, so the salon can see which ads produce visits. The report contains the booking value, the ad click identifier where the booking carries one, Meta's browser cookie identifier where the booking carries one, and a SHA-256-hashed (irreversible) form of the client's email or phone number where the booking has one; for a matched ad call, the hashed number is the one that placed the call. These identify the visit as coming from someone who saw or clicked the salon's ad. We never send names, raw contact details, or the services that were booked.

This information is used only to measure the salon's advertising on its behalf. We do not use it for our own marketing, we do not sell it, and it is not used to build profiles about salon clients by us.

A salon can turn ad tracking off at any time; after that, no further conversion reports are sent for its bookings. Reports already sent are held by the advertising platforms under their own terms.

We keep account and booking data for as long as the salon's account is active. When a salon cancels, we delete or anonymize its data within 90 days unless the law requires us to keep it longer (for example, payment records for tax purposes). Backups rotate out on the same schedule.

Passwords are hashed, sessions are signed, traffic is encrypted in transit with TLS, and access to production data is limited to the people who operate the service. No system is perfectly secure, but we work to protect your information and will notify affected users and regulators of a breach where the law requires it.

You can ask to access, correct, export or delete your personal information at any time by emailing us. Salon clients can also ask their salon directly, since the salon controls the booking record.

If you are in the EEA, UK or California, you have the additional rights those laws grant — including objecting to processing and lodging a complaint with your supervisory authority. We do not discriminate against anyone for exercising these rights.

Sammy is software for businesses and is not directed at children under 16. We do not knowingly collect children's information except where a parent or guardian books an appointment for their child.

If we make material changes, we will update the date above and, for significant changes, notify salon account holders by email before the change takes effect.

Questions about this policy or your data: email [email protected].