BookAI Studio

Legal

Privacy Policy

Effective date: August 22, 2026

1. Who We Are

This Privacy Policy explains how BookAI Studio, a DBA of BrightSpan Holdings LLC ("we," "us," "our"), collects, uses, stores, shares, and deletes information when you visit our website, request our services, use our client systems, or contact us. We provide managed websites and business systems (client portals, CRM records, booking, forms, payments, automation) to small businesses.

2. Information We Collect

  • Contact and lead information: name, business name, phone, email, and message details you submit through our forms (Request System, Contact, packages).
  • Account and billing information: email, payment method (processed by Stripe — we do not store full card numbers), billing history.
  • Client content: content you provide for your website and systems (business info, photos, text, menus, prices, customer lists).
  • Usage data: pages visited, time on site, browser type, device, and approximate location via analytics (Google Analytics, Meta Pixel).
  • Communication data: emails, texts, and call records you exchange with us.

3. How We Use Information

  • To respond to inquiries, quotes, and support requests.
  • To build, host, manage, and update your website and business systems.
  • To process payments and invoices.
  • To send service updates, reports, and (with consent) marketing.
  • To improve our services, prevent fraud, and comply with legal obligations.
  • To power AI features you request (chatbots, auto-replies, voice assistants) — data is processed to fulfill your request, never sold.

4. Legal Bases (GDPR)

If you are in the European Economic Area, the UK, or Switzerland, we rely on the following legal bases: (a) Contract — processing needed to provide the services you requested; (b) Legitimate interest — improving the service, security, and fraud prevention; (c) Consent — for marketing communications and optional cookies; (d) Legal obligation — for tax, accounting, and compliance records.

5. Sharing and Sub-Processors

We do not sell your personal data. We share data only with the trusted sub-processors needed to run the service, including: Stripe (payments), PayPal, Mailcow (email), Mautic (CRM), Google Analytics, Meta Pixel, hosting providers, and AI model providers (e.g., Ollama) for the features you request. Each processor is bound by its own privacy policy and our data-processing safeguards.

6. Cookies and Analytics

We use cookies and similar technologies to keep the site working, remember preferences, and measure performance. Google Analytics and Meta Pixel help us understand visitors and (where enabled) measure ads. You can block cookies in your browser, and we honor Global Privacy Control (GPC) signals where supported. We do not use cookies to sell data.

7. Data Retention

We keep lead data for up to 24 months after the last contact, billing records for tax purposes (as required by law, typically 7 years), and client content for as long as the subscription is active plus 30 days after cancellation, unless you request earlier deletion. You can ask us to delete data at any time (see Section 9).

8. Your Rights (GDPR / CCPA / CPRA)

  • Access and portability: request a copy of your personal data in a common format.
  • Correction: update or fix inaccurate data.
  • Deletion: request deletion of your data, subject to legal retention.
  • Object / restrict: object to certain processing or request restriction.
  • Opt-out of marketing: unsubscribe anytime; we honor "Do Not Sell My Personal Information" and GPC signals.
  • Appeal / complaint: you may lodge a complaint with your local supervisory authority (EEA/UK) or the state Attorney General (US).

To exercise any right, email admin@bookaistudio.com and we will respond within 30 days.

9. Data Deletion

You can request deletion of your personal data at any time by visiting our Data Deletion page or emailing admin@bookaistudio.com with subject "Data Deletion Request". We will delete or anonymize the data within 30 days unless we are legally required to keep limited records.

10. Security

We use reasonable technical and organizational safeguards (encrypted connections, restricted access, secure storage) to protect your data. No online system is 100% secure; please keep your credentials safe and contact us if you suspect unauthorized access.

11. Children

Our services are intended for business owners aged 18 and older. We do not knowingly collect data from children under 13 (or under the applicable age of consent). If you believe a child provided us data, contact us and we will delete it.

12. International Transfers

We operate primarily in the United States. If you are outside the US and data is transferred to the US, we rely on appropriate safeguards including Standard Contractual Clauses (SCCs) or similar mechanisms where required.

13. Changes to This Policy

We may update this policy from time to time. The latest version always appears on this page with its effective date. Material changes will be highlighted for at least 30 days.

14. Contact

Questions or requests? Contact us:

  • Email: admin@bookaistudio.com
  • Phone/Text: (470) 336-2902
  • Company: BookAI Studio, a DBA of BrightSpan Holdings LLC