Privacy Policy

Last updated October 5, 2026

Owner-review draft. Confirm the legal operator, public support contact, production data handling, retention schedule and security controls before public checkout launch. This draft does not claim attorney approval.

This Privacy Policy explains what information MedaBooking.ai collects, how we use it and the choices you have. It covers our website, the MedaBooking.ai service and the MedaBooking.ai Colony extension.

1. Who this covers

• Agents who subscribe to MedaBooking.ai ("customers").
• Leads and clients of those agents, whose information flows through MedaBooking.ai when an agent connects their accounts. For this information, the agent is in charge of it and MedaBooking.ai processes it on the agent's behalf.
• Visitors to our website.

2. Information we collect

• Account information: name, email, phone number, business name, package and billing status. Card details are handled by Stripe and are never stored by MedaBooking.ai.
• Connected-account access: keys or permissions for the services you choose to connect, used for the configured integration. Storage and access controls must be verified for each installed component; this draft does not promise encryption at rest for every key. Do not place secrets in public website files or send them in ordinary messages.
• Lead and client information: names, phone numbers, text messages, tags, appointment details and the facts leads share in texts, such as birthday, zip code and family size. For Platinum, client policy and payment notices from carrier emails you choose to connect.
• Usage information: operational logs, errors and license or billing status where the installed component records them. Hosting and connected providers may maintain their own access logs. The current reviewed static website has no dedicated visitor-analytics or advertising-tracking script.

3. How we use it

• To read and answer texts, book appointments, protect your number and show your pipeline, following your settings.
• To bill you, send account emails and alerts, and provide support.
• To keep MedaBooking.ai secure, fix problems and improve how it answers. We do not use one agent's leads to contact anyone for another agent.

4. What we never do

• We do not sell personal information.
• We do not let one agent see another agent's leads or clients.
• We do not text your leads for our own marketing.

5. Who we share it with

Configured providers may receive the information needed for their role: Stripe for billing, hosting and storage providers for deployed components, and the texting, calendar or email accounts you connect. Provider availability depends on the installed integration, not on a logo or option shown on the website. AI fallback must remain off or in reviewed draft mode until its provider, data-sharing scope and retention or training settings are verified. This draft makes no blanket no-training claim. We may also disclose information where required by law.

6. Security

The reviewed website uses HTTPS and sends payment-method entry to Stripe rather than collecting card numbers itself. Production credential storage, tenant isolation, administrator authentication and access controls still require verification before customer activation. This draft does not certify universal encryption, multi-factor authentication or isolation. No system is perfectly secure; applicable breach-notification obligations must be followed.

7. How long we keep it

A production retention schedule must be documented before customer activation. There is no verified blanket 30-day deletion automation. Cancellation or nonpayment is not authorization to delete your contacts, conversations or booking history in your connected accounts. Licensed MedaBooking.ai workflows, templates, filter presets and supplied configuration may be disabled or removed through a verified offboarding process; your own data and opt-out protections must be preserved. Billing and audit records may be retained where required.

8. Your choices

Agents can update account details, disconnect accounts, export data or ask us to delete their account at any time. Leads and clients who want their information changed or deleted should contact the agent who texted them. We will help that agent respond.

9. Cookies and analytics

The reviewed static website saves your display-theme preference in browser storage. No dedicated visitor-analytics or advertising-tracking script is installed in that reviewed release. Stripe and other connected providers apply their own cookie and privacy policies on their services. Any future analytics integration requires an updated notice and consent where applicable.

10. Children

MedaBooking.ai is for businesses and is not directed to children under 13.

11. Changes

We will post changes here and update the date above. Material changes will be sent to customers by email.

12. Contact

Customer-support contact details must be finalized before public launch. This document remains a draft; purchasing is not a requirement for privacy questions or requests.