1. Overview

Welcome to Scarlett AI (“Scarlett247”, “we”, “us”, or “our”), operated by Giguere Consulting INC DBA “Scarlett247”. We provide tools that help MedSpas recover missed revenue through intelligent call handling and appointment booking. This policy describes how we handle your information across our website, the Scarlett AI application, and related services.

By using our services you agree to this policy. If you do not agree, please do not use our services.

2. Information We Collect

Information you provide

Account details such as name, business name, and phone
Billing details handled by our payment processor
Support requests, survey responses, and content you upload

Information from use of services

Log data such as browser, device, IP address, and timestamps
Analytics events that help us measure performance and improve product experience
Cookies and similar technologies described below

Voice, calls, and messages

Call metadata such as caller ID, time, duration, and routing
Audio recordings and transcripts when call recording is enabled
SMS content that you send or receive through our platform

Information from partners

Calendar providers, CRM systems, analytics platforms, and communication carriers
Only the minimum data needed to provide and improve the service

3. How We Use Information

Provide, operate, and maintain Scarlett AI services
Answer calls, route messages, and book appointments
Personalize features and measure performance
Process payments and send invoices
Detect, prevent, and respond to security events and abuse
Comply with legal requests and enforce terms
Send service messages. You can change marketing preferences at any time

4. Legal Bases for EEA and UK

For individuals in the EEA or UK we rely on the following legal bases:

Contract to provide the services you request
Legitimate interests such as product improvement, security, and fraud prevention
Consent for optional cookies and marketing
Legal obligation when required by law

5. Calls, Voice AI, and SMS

Call recording and transcription may be enabled by account owners. Obtain consent where required by law.
Recordings and transcripts are used to deliver the service and resolve support issues.
For SMS you must obtain consent from recipients. Message and data rates may apply.
We support compliance for carrier rules including A2P registration.
We do not use your call content to build unrelated marketing profiles.

6. Cookies and Tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and measure traffic.

Types

Essential cookies for login and core features
Analytics cookies to understand usage trends
Preference cookies for language and layout
Advertising cookies only when you provide consent

Choices

Manage cookies in your browser settings
You can also adjust preferences using our cookie controls if available
Do Not Track signals are not acted on because a common standard is not available

7. Sharing and Disclosure

Service providers that host data, process payments, deliver voice and SMS, and provide analytics
Integration partners you connect such as calendars and CRMs
Legal and safety needs such as compliance with law or protecting rights
Business transfers such as a merger or acquisition—you will receive notice if ownership changes
We do not sell personal information.

8. Data Retention

We keep information for as long as needed to provide the service and to meet legal and accounting needs. You can request deletion through in-service request tools where available. Some records may be kept for fraud prevention and compliance.

9. Security

Encryption in transit and at rest for key systems
Access controls and employee training
Regular monitoring and vulnerability management
No method is perfect. If we learn of a security event that affects you, we will provide notice when required

10. Children’s Privacy

Our services are for business use. We do not knowingly collect personal information from children.

11. Your Rights

Your rights can include access, correction, deletion, portability, restriction, and objection where applicable.

How to exercise rights

Use the in-service request tools in your account settings, where available
We may ask for information to confirm your identity

Marketing choices

Adjust preferences using the controls provided in the service
Opt-out links are provided in marketing messages when applicable

12. International Transfers

We may transfer information to countries with different data protection laws. When we do so, we use lawful transfer tools such as standard contractual clauses.

13. Third Party Links

Our website may link to other sites. Their privacy practices are their own. Review their policies before providing information.

14. Changes to this Policy

We may update this policy to reflect changes in our services or the law. The “Last Updated” date shows the most recent change.

15. US State Disclosures

Residents of California, Virginia, Colorado, Connecticut, and Utah may have additional rights, such as access, correction, deletion, and limits on certain sharing.

Submit requests using the tools available in your account or as otherwise provided in the service
Authorized agents may submit requests after providing proof of authority
We will not discriminate against you for exercising privacy rights

Privacy Policy