Draft — not yet in effect. This page must be reviewed by a qualified lawyer and the bracketed details filled in before Ottobook launches publicly.
Privacy
Last updated [DATE]
Who we are
Ottobook ([LEGAL ENTITY NAME], [ADDRESS]) provides booking software to independent service professionals (“artists”). Contact: [PRIVACY CONTACT EMAIL].
What we handle, and why
- Artists' account data: name, email, business details, services, availability and settings, to run the service.
- Clients' booking data: name, email or phone number, the messages they send, appointment details, and the signature and payment status we receive from providers. We use it only to handle that artist's booking.
- Calendar data: busy times from the calendars an artist selects, used to offer free times. We only create or change calendar events Ottobook made.
- Gmail: Ottobook doesn't access artists' mailboxes. It only receives the messages an artist chooses to forward to their Ottobook booking address.
Service providers
To deliver the service we share the minimum necessary data with providers acting on our behalf: email delivery, text messaging, e-signature, payments (payments are processed by Stripe; we never see or store card numbers), calendar access the artist authorises, cloud hosting, and an AI model provider that helps draft replies. [LIST PROVIDERS AND LINK THEIR POLICIES.]
AI-assisted replies
A booking assistant reads client messages to suggest replies and extract booking details. It can't change prices, contracts or payments, and artists can review every reply. [STATE THE MODEL PROVIDER'S DATA-RETENTION TERMS.]
Text messages
Clients who text an artist's Ottobook number can reply STOP at any time to stop messages; we honour opt-outs immediately.
Retention and deletion
[RETENTION PERIODS FOR MESSAGES, BOOKINGS, SIGNED AGREEMENTS AND PAYMENT RECORDS.] To request access or deletion, contact [PRIVACY CONTACT EMAIL].
Your rights
[DESCRIBE RIGHTS UNDER APPLICABLE US STATE LAWS, E.G. CCPA/CPRA, AND HOW TO EXERCISE THEM.]
Selling data
[CONFIRM POLICY — e.g. “We do not sell personal information.” Only publish once this is a binding company commitment.]