Legal

Privacy Policy

Effective Date: May 31, 2026
Last Updated: May 31, 2026

Summary

We collect only what we need to run your outreach campaigns. We never sell your data. We never store patient health information. You can delete your account and all data at any time.

1. Introduction

Stone Call LLC dba Bookr ("Bookr," "we," "us," or "our") operates the website get-bookr.com and the Bookr platform (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use the Service.

This Privacy Policy applies to:

— Med spa owners and operators who create Bookr accounts ("Clients")

— Visitors to get-bookr.com

— Individuals who receive outreach emails sent through the Bookr platform on behalf of our Clients ("Prospects")

2. Information We Collect

2.1 Information You Provide Directly

When you create a Bookr account, we collect:

— Full name and email address

— Business name, phone number, and address

— Business domain name

— Services offered by your med spa

— Payment information (processed by Stripe — we do not store full card numbers)

— Profile information you provide during onboarding

When you contact us, we collect:

— Your name and email address

— The content of your message

— Any attachments you send

2.2 Information We Collect Automatically

When you use the Service, we automatically collect:

— IP address and approximate location

— Browser type and version

— Operating system

— Pages visited and time spent on each page

— Referring website or source

— Device type and screen resolution

— Actions taken within the platform (clicks, features used, etc.)

We collect this information using cookies, web beacons, and similar tracking technologies. See Section 7 for more information about cookies.

2.3 Information About Your Prospects

As part of providing the Service, you may upload contact lists containing:

— Prospect names

— Prospect email addresses

— Any additional fields you choose to include

We use this information solely to send outreach campaigns on your behalf. We do not use prospect contact information for our own marketing purposes.

IMPORTANT:

Do not upload Protected Health Information (PHI) or any sensitive medical information about patients. The Service is not designed or authorized to handle PHI under HIPAA.

2.4 Information From Third Parties

We may receive information about you from:

— Stripe, when you complete a payment

— Analytics providers, including aggregated usage data

— Email delivery providers, including delivery and engagement data

3. How We Use Your Information

3.1 To Provide the Service

— Create and manage your account

— Process payments and subscriptions

— Set up and configure your outreach infrastructure

— Generate AI-powered email sequences for your campaigns

— Send outreach emails to your prospects on your behalf

— Provide campaign analytics and reporting

— Respond to your support requests

3.2 To Improve the Service

— Analyze usage patterns to improve features and performance

— Debug technical issues

— Develop new features based on usage data

— Train and improve our AI models using aggregated, anonymized data only

3.3 To Communicate With You

— Send transactional emails (receipts, account notifications, onboarding)

— Send campaign status updates and reports

— Notify you of changes to the Service or these policies

— Respond to your inquiries and support tickets

3.4 For Legal and Safety Purposes

— Comply with applicable laws and regulations

— Enforce our Terms of Service

— Detect and prevent fraud or abuse

— Protect the rights and safety of Bookr, our clients, and third parties

3.5 Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, we process your personal data based on:

— Performance of a contract (providing the Service you subscribed to)

— Legitimate interests (improving our Service, preventing fraud)

— Legal obligation (compliance with applicable law)

— Consent (where explicitly obtained)

4. How We Share Your Information

4.1 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Ever.

4.2 Service Providers

We share information with third-party vendors who help us provide the Service:

Stripe, Inc. — Payment processing

Supabase, Inc. — Database and authentication

Resend, Inc. — Transactional email delivery

Instantly.ai — Email outreach infrastructure

OpenAI, L.L.C. — AI sequence generation

Vercel, Inc. — Website hosting

These providers are contractually obligated to use your data only to provide services to us and in accordance with this Privacy Policy.

4.3 Legal Requirements

We may disclose your information if required to do so by law or in response to:

— A valid subpoena, court order, or government request

— To protect the rights, property, or safety of Bookr, our clients, or others

— To detect, prevent, or address fraud, security, or technical issues

4.4 Business Transfers

If Bookr is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred as a business asset. We will provide notice before your information becomes subject to a different privacy policy.

4.5 Aggregated Data

We may share aggregated, anonymized data that cannot reasonably be used to identify you (for example, "our average client sees X appointments per month") for marketing and research purposes.

5. Data Retention

5.1 Account Data

We retain your account information for as long as your account is active. If you cancel your subscription, we retain your data for 30 days before permanent deletion, during which time you may request an export.

5.2 Campaign Data

Campaign records, email sequences, and performance data are retained for the duration of your subscription plus 30 days after account termination.

5.3 Prospect Contact Data

Contact lists you upload are retained for the duration of your subscription. They are deleted 30 days after account termination.

5.4 Financial Records

Payment and billing records are retained for 7 years as required by applicable tax and accounting laws.

5.5 Logs and Analytics

Server logs and anonymous analytics data may be retained for up to 2 years for security and performance analysis.

6. Your Rights and Choices

6.1 Access and Portability

You have the right to:

— Access the personal data we hold about you

— Receive a copy of your data in a portable format

— Request correction of inaccurate data

To exercise these rights, contact hello@get-bookr.com. We will respond within 30 days.

6.2 Deletion

You may request deletion of your account and associated data at any time by:

— Using the account deletion option in your Settings page

— Contacting hello@get-bookr.com

We will delete your data within 30 days of your request, except where we are required to retain it by law (such as financial records).

6.3 Opt-Out of Communications

— Transactional emails: You cannot opt out of emails necessary to provide the Service (receipts, security alerts, critical service updates)

— Marketing emails: You may unsubscribe using the link in any marketing email

6.4 California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

— Know what personal information we collect, use, share, or sell

— Request deletion of your personal information

— Opt out of the sale of your personal information (we do not sell personal information)

— Non-discrimination for exercising your rights

To exercise your California privacy rights, contact hello@get-bookr.com with the subject line "CCPA Request."

6.5 European Privacy Rights (GDPR)

If you are located in the European Economic Area, you have additional rights including:

— The right to object to processing

— The right to restrict processing

— The right to withdraw consent at any time

— The right to lodge a complaint with your local supervisory authority

To exercise these rights, contact hello@get-bookr.com with the subject line "GDPR Request."

7. Cookies and Tracking

7.1 What Are Cookies

Cookies are small text files stored on your device when you visit a website. We use cookies and similar tracking technologies to operate and improve the Service.

7.2 Types of Cookies We Use

Essential Cookies:

— Required for the Service to function

— Include authentication tokens and session management

— Cannot be disabled without breaking core functionality

Analytics Cookies:

— Help us understand how visitors use the Service

— Collect anonymous, aggregated data

— May be disabled without affecting core functionality

7.3 Managing Cookies

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Service. Most browsers allow you to:

— View cookies stored on your device

— Delete cookies individually or in bulk

— Block cookies from specific websites

— Block all third-party cookies

7.4 Do Not Track

We honor Do Not Track signals from browsers where applicable. When Do Not Track is enabled, we disable analytics tracking for your session.

8. Data Security

8.1 Security Measures

We implement industry-standard security measures to protect your information:

— All data is encrypted in transit using TLS 1.2 or higher

— Database data is encrypted at rest

— Access to production systems is restricted to authorized personnel only

— We conduct regular security reviews

— Payment data is handled by Stripe, which maintains PCI DSS Level 1 compliance

8.2 Limitations

No method of transmission over the internet or method of electronic storage is 100% secure. While we implement commercially reasonable security measures, we cannot guarantee absolute security.

8.3 Security Breach Notification

In the event of a data breach that affects your personal information, we will notify you by email within 72 hours of discovering the breach, to the extent required by applicable law.

9. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact hello@get-bookr.com and we will take steps to delete such information.

10. Third-Party Links

The Service may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to review the privacy policies of any third-party sites you visit. We are not responsible for the privacy practices of third parties.

11. Prospect Privacy

This section applies to individuals ("Prospects") who receive outreach emails sent through our platform on behalf of our Clients.

11.1 How We Received Your Information

Your contact information was provided to Bookr by one of our Clients (a med spa or aesthetic clinic). The Client is responsible for ensuring they had a lawful basis for collecting and using your contact information.

11.2 How Your Information Is Used

Your information is used solely to send outreach emails on behalf of the Client who provided your contact information. We do not use your information for our own marketing.

11.3 Unsubscribing

Every outreach email sent through Bookr includes an unsubscribe link. Clicking that link will remove you from all future communications from that specific Client sent through our platform.

11.4 Data Deletion Requests

If you are a Prospect and wish to have your information deleted from our systems, please contact hello@get-bookr.com with your email address and we will process your request within 30 days.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

— Posting the updated policy at get-bookr.com/privacy with an updated "Last Updated" date

— Sending an email to your registered email address for significant changes

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy, your personal data, or our privacy practices, please contact us:

Stone Call LLC dba Bookr
Email: hello@get-bookr.com
Website: https://get-bookr.com

For privacy-specific requests, please include "Privacy Request" in the subject line of your email to ensure prompt handling.