Skip to content

Legal

Privacy Policy

Last updated: 19 June 2026

1. Who we are

Evysse, Inc. ("Evysse," "we," "us," or "our") operates the Evysse platform, a booking, deposit, and client communication tool built for beauty professionals. This Privacy Policy explains how we collect, use, store, and protect information when you use our website, dashboard, automated agent, and related services (collectively, the "Service").

2. Information we collect

From beauty professionals (our customers)

  • Account information: name, email address, business name, phone number
  • Business data: services offered, pricing, availability, cancellation policies
  • Payment information: Stripe account connection details (we never store your card numbers; Stripe handles all payment data)
  • Platform connections: Instagram, WhatsApp, Google Calendar, and Apple Calendar integration tokens
  • Usage data: AI action counts, feature usage, login activity

From end clients (your customers)

  • Contact information: name, phone number, email (provided during booking)
  • Booking data: appointment details, service selected, deposit payments
  • Communication data: messages exchanged with the AI agent via Instagram DM or WhatsApp
  • Intake form responses: preferences, allergies, or consent data collected before appointments

Collected automatically

  • Device and browser information
  • IP address and approximate location
  • Pages visited and interactions with the Service
  • Cookies and similar tracking technologies

3. How we use your information

  • Provide, maintain, and improve the Service
  • Process bookings, deposits, and payments via Stripe
  • Operate the AI agent to reply to client enquiries, book appointments, send reminders, and enforce cancellation policies on your behalf
  • Send transactional communications (booking confirmations, reminders, deposit receipts)
  • Monitor usage to enforce plan limits (AI actions per month)
  • Detect and prevent fraud, abuse, or security threats
  • Comply with legal obligations

4. AI and message processing

When the AI agent replies to a client on your behalf, via Instagram DM, WhatsApp, or any connected channel, Evysse processes the content of those messages to generate appropriate responses. Messages are processed in real time and are not used to train AI models. The AI operates strictly within the tone, services, and policies you configure. Conversations are stored in your workspace for your review and are subject to the same data protection standards as all other data in the Service.

5. How we share your information

We do not sell your personal information. We share data only in the following circumstances:

  • Stripe: to process deposits and payments. Stripe's privacy policy governs payment data.
  • Meta (Instagram) and WhatsApp: to send and receive messages on your behalf via their APIs. Their respective privacy policies apply to data on their platforms.
  • Google and Apple: to sync calendar data when you connect your calendar.
  • Clerk: for authentication. Clerk's privacy policy governs login data.
  • Infrastructure providers: hosting, database, and CDN services that process data on our behalf under strict data processing agreements.
  • Legal compliance: if required by law, court order, or regulatory authority.

6. Data ownership and portability

You own your data. Your client lists, booking records, service catalogues, and conversation histories belong to you. You can export your data at any time from your dashboard. If you close your account, we will delete your data within 30 days of your request, except where we are legally required to retain it.

7. Data retention

  • Account and business data: retained for the duration of your account, plus 30 days after deletion request.
  • Client booking and communication data: retained for the duration of your account. Deleted within 30 days of account closure.
  • Payment records: retained as required by financial regulations (typically 7 years for tax and audit purposes). These records are held by Stripe.
  • Usage logs and analytics: retained for up to 12 months for service improvement, then anonymised or deleted.

8. Security

We use industry-standard security measures to protect your data, including encryption in transit (TLS) and at rest, secure authentication via Clerk, and strict access controls. Workspaces are fully isolated: data from one workspace is never accessible to another. While no system is completely immune to risk, we take reasonable precautions to safeguard your information.

9. Your rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Delete your data (right to erasure)
  • Export your data in a portable format
  • Restrict or object to certain processing
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@evysse.com. We will respond within 30 days.

10. Cookies

We use essential cookies to keep you logged in and maintain session state. We use analytics cookies to understand how the Service is used. You can manage cookie preferences in your browser settings. We do not use advertising or tracking cookies.

11. Children's privacy

Evysse is not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, contact us and we will delete it promptly.

12. International data transfers

Evysse operates globally. Your data may be processed in countries outside your own, including the United States. Where we transfer data internationally, we use appropriate safeguards such as standard contractual clauses to ensure your data is protected.

13. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at: privacy@evysse.com Evysse, Inc.