Privacy Policy

This policy explains what data ReceptAI collects when you use our service, why we collect it, who we share it with, and what choices you have. We've written it in plain English so you can actually read it.

Who we are

ReceptAI ("we", "us", "our") is a WhatsApp-based AI receptionist service operated from Bengaluru, India. When you sign up, you become our "customer". Your salon's WhatsApp contacts ("end customers") interact with ReceptAI through your business WhatsApp number.

What data we collect

From you (the salon owner)

• Account info: your email, name, salon name, salon WhatsApp number, salon location, opening hours, services + prices, Google review link.
• WhatsApp Cloud API credentials you connect: phone number ID, WhatsApp Business Account ID, access token. These let us send and receive messages on behalf of your salon.
• Billing info handled by Razorpay: we never see or store your full card / UPI details. We only store Razorpay's subscription ID and your plan + payment status.

From your end customers (people who message your salon)

• WhatsApp phone number they messaged from.
• Display name they have set on WhatsApp (if any).
• Message content they send and the bot's replies — stored as conversation history so the bot has context for follow-up messages.
• Bookings they make — the time, service, and any name they give for the booking.

We do not collect WhatsApp profile pictures, status, contacts, location, or anything else WhatsApp could technically expose to a business.

Why we collect it

• To run the AI receptionist on your behalf: answering messages, booking appointments, sending reminders.
• To show you the dashboard view of your salon's activity.
• To bill you for the service and handle subscriptions.
• To investigate bugs or security incidents.

Who we share it with

We use a small number of trusted service providers to operate ReceptAI:

• Anthropic (US) — we send each customer message and recent conversation history to Anthropic's Claude API so it can generate the reply. Anthropic does not train its models on this data. Anthropic Privacy Policy.
• Meta WhatsApp Cloud API — this is the messaging channel itself. Messages go through Meta. WhatsApp Business Policy.
• Supabase (India region, Mumbai) — our database. Conversation history, bookings, and account data are stored here.
• Razorpay (India) — handles all card and UPI payments. We never see your card number.
• Vercel + Railway — host our dashboard and backend code.

We do not sell your data, your customers' data, or share it with advertisers, ever. We only share data with the providers above to the extent strictly needed to run the service.

Where your data lives

Most of your data is stored in our Supabase database, hosted in Mumbai, India. Some processing happens outside India — specifically, conversation content is sent to Anthropic in the US so Claude can generate replies. Standard cloud security controls apply to all transfers.

How long we keep it

• Conversation history: kept indefinitely while your account is active, so the bot can recall context. You can ask us to delete an end customer's history at any time.
• Bookings: kept indefinitely for your records.
• Account data: kept while your account is active. If you delete your account, we erase your salon's data within 30 days, except records we're legally required to keep (e.g. tax invoices).
• Backups: may persist up to 90 days after deletion.

Your rights (DPDP Act, 2023)

Under India's Digital Personal Data Protection Act, you can:

• Access the data we hold about you or your salon.
• Correct data that's wrong (most of which you can do yourself in Settings).
• Erase your account and salon data.
• Nominate someone to exercise these rights if you can't.
• Withdraw consent at any time — by cancelling your subscription.

End customers (people who message your salon) can also exercise these rights — please forward any such request to us at hello@receptai.in and we'll handle it on your behalf.

Children

ReceptAI is built for salons, not minors. We do not knowingly collect data from anyone under 18. If you become aware that a minor has messaged a salon using ReceptAI, contact us and we'll erase their data.

Security

We protect your data with industry-standard measures: TLS-encrypted transport, encrypted storage, row-level security in our database, isolated per-salon credentials, and limited access by our staff on a need-to-know basis. No system is perfectly secure — if we ever discover a breach affecting your data, we'll notify you within 72 hours and report it to the Indian Computer Emergency Response Team (CERT-In) as required by law.

Changes to this policy

We may update this policy as the product evolves. If we make material changes, we'll email you at least 14 days before they take effect. The "Last updated" date at the top of this page is authoritative.

Contact + grievance officer

Questions, complaints, or data subject requests? Email us at hello@receptai.in and we'll respond within 7 working days. Our grievance officer can be reached at the same address.