Privacy Policy

Effective Date: May 10, 2026 · Last Updated: May 10, 2026

TextBooker AI ("we", "us", "our") operates the TextBooker AI service — a web dashboard, iOS application, and AI-powered SMS appointment booking system — provided by Home Sports Turf Inc. (hereafter "HST Inc."), a Canadian corporation. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We are committed to protecting your privacy and complying with applicable laws including Canada's PIPEDA, the EU GDPR (where applicable), and Apple's App Store privacy guidelines.

1. Who We Are

TextBooker AI is a software-as-a-service product that helps small service businesses (barbershops, salons, gyms, massage therapists, tutors, etc.) manage customer appointments via SMS using an AI receptionist. We serve two types of users:

• Business Owners (Operators): Service businesses that subscribe to TextBooker AI
• Customers (End Users): Individuals who text the business's phone number to book appointments

2. Information We Collect

2.1 From Business Owners

• Account information: Email address, business name, business address, time zone
• Authentication: Password (stored as a bcrypt hash; never in plain text), session tokens
• Business configuration: Services offered, hours of operation, pricing, staff names
• Payment information: Processed by Stripe; we do not store your full credit card number
• Device information: When using the iOS app, we store an Expo push notification token to deliver alerts

2.2 From End Customers (people who text the business)

• Phone number: Captured when a customer texts the business's TextBooker AI number
• Message content: The text messages exchanged with the AI receptionist (stored to maintain conversation history)
• Optional profile data: Name (if the customer provides it), appointment history, preferences (such as preferred service, staff member, language)
• Operator-added notes: The business owner may add notes about the customer for service-quality reasons

2.3 Automatically Collected

• IP address (for fraud prevention and rate limiting)
• Timestamps of messages and account activity
• Approximate country (derived from IP, used to default the website language)

What we do NOT collect: We do not collect precise location data, microphone audio, camera images, contacts, or any data unrelated to appointment booking.

3. How We Use Your Information

• To provide the service: Process appointment bookings, send confirmations, deliver reminders, route SMS messages
• AI processing: Message content is sent to AI providers (Anthropic Claude, xAI Grok, Google Gemini) to generate intelligent responses. These providers process the data on our behalf and do not use it to train their models when used through our paid API tiers.
• Customer service: Helping business owners take over conversations, flagging risky interactions for human review
• Account management: Authentication, billing, support communications
• Service improvement: Aggregated, de-identified analytics to understand how the service is used and where to improve it
• Legal compliance: Responding to lawful requests from authorities, preventing fraud and abuse

4. SMS Messaging and Carrier Compliance

SMS messages are sent and received via Twilio. By texting a TextBooker AI business phone number, the end customer consents to receive automated SMS replies about their appointment. Standard message and data rates may apply.

• End customers can opt out at any time by replying STOP, UNSUBSCRIBE, or CANCEL (Twilio handles opt-out automatically)
• End customers can request help by replying HELP
• Business owners are responsible for obtaining proper consent from their customers per local SMS marketing laws (TCPA in the US, CASL in Canada)

5. Data Sharing

We share information only with the following categories of recipients:

• Service providers who help us operate the service: Twilio (SMS), Stripe (payments), Resend (email), Anthropic / xAI / Google (AI processing), Expo (push notifications), Hostinger (hosting)
• The business owner whose number was texted: End customers' messages, phone numbers, and appointment history are visible to that specific business owner only. We strictly enforce tenant isolation — one business cannot see another business's data.
• Legal authorities when required by law (court orders, subpoenas)
• Successors in interest in the event of a merger, acquisition, or asset sale (you will be notified)

We do not sell your data. We do not share data with advertisers or data brokers.

6. Data Retention

• Active accounts: We retain account and conversation data for as long as the account is active
• Closed accounts: Data is deleted within 90 days of account closure, except where retention is required by law (e.g., tax records for 7 years)
• Backups: Encrypted backups are retained for up to 30 days
• End customers: If the business owner deletes a customer's record, it is removed from our active system within 30 days

7. Data Security

We use industry-standard practices to protect your data:

• TLS/HTTPS encryption for all data in transit
• Passwords stored as bcrypt hashes (never plain text)
• Multi-tenant database isolation at the application and database layer
• Session cookies with secure flags and httpOnly attributes
• Daily encrypted backups
• External uptime and integrity monitoring

No system is 100% secure. If we discover a security breach affecting your data, we will notify you within 72 hours where required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Withdraw consent at any time (for processing based on consent)
• Object to certain types of processing
• File a complaint with your local privacy regulator (e.g., the Office of the Privacy Commissioner of Canada)

To exercise any of these rights, contact us at the address below. We will respond within 30 days.

9. Children's Privacy

TextBooker AI is intended for use by adults (18+) operating businesses. We do not knowingly collect personal information from children under 13. If a parent or guardian believes their child has provided us with personal information, please contact us and we will delete it.

10. International Data Transfers

Our servers are located in Canada. If you access TextBooker AI from outside Canada, your data may be transferred to and processed in Canada and other countries where our service providers operate (primarily Canada, the United States, and the European Union). We use appropriate safeguards including standard contractual clauses for cross-border transfers.

11. Push Notifications (iOS App)

The TextBooker AI iOS app uses push notifications to alert business owners about urgent customer conversations, new appointments, and AI flags. Push tokens are stored only on our servers and used only to deliver service-related notifications. You can disable push notifications at any time via iOS Settings → Notifications → TextBooker AI.

12. Cookies and Tracking

We use only essential cookies necessary to operate the service (session authentication, language preference). We do not use third-party advertising cookies or tracking pixels.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email (to business owners) or via an in-app notice. The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Continued use of the service after changes constitutes acceptance.

14. Contact Us