Draft — under legal review. This document is a working draft prepared for review with counsel and is not yet final. Items in [brackets] are placeholders to be completed (legal entity name, address, and effective date).

Privacy Policy

Last updated: [DATE] · Effective: [DATE]

This Privacy Policy explains how [LEGAL ENTITY NAME], a New Jersey limited liability company (“WavebookAI,” “we,” “us,” or “our”), collects, uses, shares, and protects personal information when you use our websites, booking tools, and related services (the “Services”).

Who we are
Information we collect
How we use information
How we share information
Payments & card data
Texts, calls & email
Cookies & tracking
Your privacy rights
Retention & security
Children
Role for business clients
Changes & contact

1. Who we are

WavebookAI provides scheduling, point-of-sale, client-management, messaging, and related software to appointment-based businesses (“Shops”), and a consumer marketplace to discover and book those Shops. This Policy applies to visitors to our websites, consumers who book through us, and personnel of our Shop clients.

2. Information we collect

Information you provide

Account & business details — name, email, phone number, password, business name, role, and (for Shops) team and service information.
Booking information — the appointments you book or receive, services, staff, dates/times, and notes.
Payment information — handled by our payment processor; see Payments & card data.
Communications — messages you send us, and your interactions over text, phone, or email.

Information collected automatically

Device & usage data — IP address, browser/device type, pages viewed, and actions taken.
Cookies & similar technologies — see our Cookie Policy.

Information from others

From Shops — a Shop may add you as a client and provide your contact details and appointment history.
From service providers — e.g., our payment processor confirms transaction status.

3. How we use information

Provide, operate, and improve the Services, including booking, reminders, confirmations, and payments.
Communicate with you about appointments, your account, and support.
Prevent fraud and abuse, secure the Services, and enforce our Terms of Service.
Comply with legal obligations.

We do not sell personal information for money, and we do not use it for cross-context behavioral advertising.

With the Shop you book with — so it can schedule, prepare for, and deliver your appointment.
Service providers (processors) — hosting and database (e.g., our cloud infrastructure and database providers), payment processing ([Stripe]), and messaging ([Twilio]), each only as needed to perform services for us.
Legal & safety — when required by law or to protect rights, safety, and the integrity of the Services.
Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this Policy.

5. Payments & card data

Card payments and card-on-file holds are processed by our third-party payment processor ([Stripe]). WavebookAI does not store full card numbers; card data is tokenized and handled by the processor in accordance with the Payment Card Industry Data Security Standard (PCI DSS). Where a Shop collects payment, it uses its own connected processor account.

6. Texts, calls & email

With your consent, we send transactional text messages (such as appointment confirmations and reminders), may operate an automated phone line, and send email. Message and data rates may apply. You can opt out of texts at any time by replying STOP (or another reasonable method). See our SMS & Messaging Terms for details, and our Cookie Policy for web tracking.

7. Cookies & tracking

We use strictly necessary technologies to run the site, and may use limited analytics. Details — and how to control them — are in our Cookie Policy.

8. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, and obtain a portable copy of your personal data, and to opt out of its sale, targeted advertising, or certain profiling. Under the New Jersey Data Privacy Act, New Jersey residents have these rights, we honor recognized universal opt-out mechanisms, and you may appeal a decision on your request.

To exercise a right, contact us at [privacy@wavebookai.com]. We will verify your request and respond within the time required by law. You may also authorize an agent to act on your behalf. We will not discriminate against you for exercising your rights.

9. Retention & security

We keep personal information for as long as needed to provide the Services and for legitimate business or legal purposes, then delete or de-identify it. We use administrative, technical, and physical safeguards designed to protect personal information; however, no method of transmission or storage is completely secure.

10. Children

The Services are not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

11. Our role for business clients

When a Shop uses WavebookAI to manage its own clients’ information, the Shop is the controller of that information and WavebookAI acts as a service provider/processor on the Shop’s behalf, handling the data per our agreement with the Shop. Clients of a Shop should also review that Shop’s own privacy practices.

12. Changes & contact

We may update this Policy from time to time; we will post the new version with a revised “Last updated” date. Questions or requests: [privacy@wavebookai.com], [LEGAL ENTITY NAME], [Business Address, New Jersey].