Privacy Policy

WispSide is operated by [COMPANY LEGAL NAME] (“we”, “us”). WispSide is software that businesses use to take appointments and orders, collect payments, send reminders and manage their staff and tasks.

We handle personal information in two different roles:

• For businesses and their staff who sign up and use WispSide, we decide how that account information is used. This policy applies to it in full.
• For the customers of those businesses — people who book an appointment or place an order through a business’s booking page — the business decides what it collects and why. We process that information on the business’s behalf and only to provide our service to it. If you are a customer, the business’s own privacy notice also applies, and it is usually the right first contact for questions about your booking.

Account information. When a business owner signs up or a staff member accepts an invitation: name, email address, phone number, sign-in details (including sign-in through providers such as Google, where offered), role in the business and account status.

Business information. Business name, address, country, currency, timezone, logo, working hours, holidays, services and prices, booking and notification settings, and tasks and notes created in the app.

Customer booking and order information. When someone books or orders through a business’s page: name, mobile number, email address, postal or delivery address, the services or items chosen, the date and time, any notes, the timezone of their device, and the status and amount of the booking or order. Businesses and their staff can also enter or update this information themselves.

Payment information. Payments are processed by Stripe. We receive payment status, amount, currency and references from Stripe, but we never receive or store full card numbers. For a business’s own WispSide subscription we keep the plan, billing cycle, status and Stripe customer and subscription references.

Messages. Records of the booking confirmations, reminders and other emails and text messages sent through WispSide, including the recipient and delivery status.

Technical information. IP address, approximate country (used to show prices in your local currency), browser and device type, timezone, and server logs used to keep the service secure and working.

AI assistant connections. If a business connects an AI assistant (for example Claude) to WispSide, we record the connection and the actions the assistant takes, such as booking or rescheduling an appointment or updating an order.

• To provide the service: show availability, create and manage bookings and orders, and let staff do their work.
• To send booking confirmations, reminders, payment links and updates by email or text message, as set up by the business.
• To process payments for businesses and to bill businesses for their WispSide subscription.
• To sign people in, keep accounts secure, and prevent fraud, abuse and misuse.
• To provide support, and to send businesses service and account messages (such as trial or billing notices).
• To maintain and improve WispSide, using aggregated or de-identified information where possible.
• To meet legal, tax and accounting obligations and to enforce our Terms of Service.

We do not sell personal information and we do not use customers’ booking or order information for our own marketing. Where the law requires a legal basis, we rely on performing our contract with the business, our legitimate interest in running a secure and reliable service, compliance with legal obligations, and consent where it is required.

The business. Information a customer gives on a booking or order page is shared with that business and the staff it authorises.

Service providers that help us run WispSide, under contracts that limit their use of the information:

• Clerk — sign-in and account management
• Supabase — database hosting
• Vercel — website and application hosting
• Stripe — payment processing and subscription billing
• Email delivery providers — sending confirmations, reminders and account emails
• SMS providers (such as Twilio and Fast2SMS) — sending text-message reminders and updates
• ipapi.co — estimating your country from your IP address to show local prices

AI assistants a business connects. A connected assistant can read and change that business’s information within the permissions of the person who connected it. The assistant provider’s own terms and privacy policy apply to what it does with that information.

Legal and safety reasons. When required by law, or to protect the rights, property or safety of our users, the public or us.

Business transfers. If we are involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal, subject to this policy.

We use cookies and similar technologies that are needed for the service to work — mainly to keep you signed in and secure — and to remember basic preferences. We do not use advertising cookies. Our payment provider may set its own cookies on payment pages to prevent fraud.

Our service providers may store and process information in countries other than the one you live in, including the United States. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses.

We keep account and business information for as long as the business has an account with us. Booking, order and message records are kept for as long as the business keeps them in WispSide, so it can run its business and meet its own record-keeping obligations.

When an account is closed we delete or de-identify its information within a reasonable period, except where we must keep it longer for legal, tax, accounting or dispute-resolution reasons.

Each business’s information is kept separate from every other business’s at the database level. Connections are encrypted, sensitive credentials (such as payment and messaging keys) are encrypted at rest, and card details are handled directly by Stripe. No system is completely secure, so we cannot guarantee absolute security, but we work to protect information and to fix problems promptly.

Depending on where you live, you may have the right to access, correct or delete your personal information, to receive a copy of it, to object to or restrict some uses of it, and to withdraw consent you have given.

• Businesses and staff can update most of their information in WispSide and can contact us at [CONTACT EMAIL] for anything else.
• Customers should contact the business they booked with, which controls their information. If you contact us instead, we will pass your request to that business and help it respond.
• You can stop text-message reminders by asking the business, or by replying STOP where that option is offered.

You also have the right to complain to your local data protection authority.

WispSide is meant for businesses and is not directed at children. Business accounts may only be created by adults. A business may hold information about a child it serves (for example, a booking made by a parent); the business is responsible for having the right to collect it.

We may update this policy from time to time. We will change the effective date above and, for significant changes, notify businesses by email or in the app before the change takes effect.

Questions or requests about privacy: [CONTACT EMAIL], or write to [COMPANY LEGAL NAME], [REGISTERED ADDRESS]. See also our Terms of Service.