Privacy Policy

1. Who We Are

Bimbly ("we", "us", "our") is an AI receptionist service for barbershops and salons, operated by Bimbly Inc. (company details to be updated). We are based in Toronto, Canada. For privacy inquiries, contact us at hello@bimblyai.com.

2. What Information We Collect

We collect the following categories of information:

• Full name, email address, phone number
• Business name, address, and hours
• Payment information (processed securely by Stripe — we never store your card details)

• Customer name and phone number
• Requested service and appointment date/time
• Special requests and preferred barber
• Call recordings and transcripts (processed by Vapi AI)

• How you use our dashboard and services
• Browser type, device, and IP address (collected via Google Analytics)

3. How We Use Your Information

We use the information we collect to:

• Provide and operate the Bimbly Receptionist service
• Book appointments and send SMS confirmations to your customers
• Send you email notifications about new bookings
• Sync appointments to your Google Calendar
• Process your subscription payments
• Improve our service and fix issues
• Comply with legal obligations

4. Call Recording Disclosure

Calls handled by Bimbly Receptionist may be recorded and transcribed for the purpose of accurately capturing booking information. Callers are notified of this at the start of each call. Transcripts are retained for 90 days and then permanently deleted. Call recordings are processed by Vapi AI in accordance with their privacy policy.

5. Who We Share Your Information With

We share information only with the following trusted service providers, solely to operate our service:

• Vapi AI — voice call processing and transcription
• Twilio — SMS delivery
• SendGrid — email delivery
• Google — calendar integration and analytics
• Supabase — secure database hosting
• Stripe — payment processing

We do not sell your data. We do not share your data with advertisers.

6. Google Analytics

We use Google Analytics to understand how visitors use our website. Google Analytics collects information such as how often users visit the site, what pages they visit, and what other sites they used prior to coming to our site. We use this information only to improve our website. Google Analytics collects the IP address assigned to you on the date you visit, but not your name or other identifying information. We do not combine the information collected through the use of Google Analytics with personally identifiable information. You can opt out of Google Analytics by installing the Google Analytics opt-out browser add-on available at tools.google.com/dlpage/gaoptout.

7. Data Retention

• Business account data: retained for the duration of your subscription plus 12 months after cancellation
• Customer booking data: retained for 12 months
• Call transcripts: retained for 90 days
• Payment records: retained for 7 years as required by law

8. Your Rights Under PIPEDA

As a Canadian business, we comply with the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Withdraw consent for data processing (note: this may affect your ability to use the service)

To exercise any of these rights, contact us at hello@bimblyai.com. We will respond within 30 days.

9. CASL Compliance

SMS messages sent by Bimbly Receptionist to your customers are transactional in nature — they are sent only as a direct result of a booking that the customer initiated by calling your business. These messages are not marketing messages and comply with Canada's Anti-Spam Legislation (CASL).

10. California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information. We do not sell personal information. To exercise your CCPA rights, contact hello@bimblyai.com.

11. Security

We take data security seriously. All data is encrypted in transit using TLS. Our database is hosted on Supabase with industry-standard security practices. Payment information is handled entirely by Stripe and never touches our servers. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email at least 30 days before they take effect. Your continued use of the service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or requests:

Email: hello@bimblyai.com
Response time: within 30 days