Privacy Policy

This Privacy Policy explains how Awesome Software, Inc. ("RebookWell", "we", "us") collects, uses and protects information through the RebookWell website and service, including the text messages we send on behalf of lash studios.

RebookWell is used by lash and beauty studios ("Studios") to keep in touch with their clients. If you're a Studio's client, the Studio decides what information it adds to RebookWell, and we process that information on the Studio's behalf.

Information we collect

• Studio accounts: name, email address, password (stored only in hashed form), studio name, booking link, pricing and time zone, and, if a user adds one, a mobile number for notifications.
• Studio clients: name and mobile number, appointment details (such as service, date and lash notes), photos of lashes that the client or Studio uploads, ratings and notes from the Studio, and the text messages sent to and received from the client.
• Consent records: whether a client agreed to receive texts, when and how they agreed or opted out (for example by replying YES or STOP, or a Studio recording their agreement at an appointment), and the wording they agreed to.
• Technical information: IP address, browser type and similar details sent by your device, used to keep the service secure and working.
• Messages you send us: if you use the contact form on our website, your name, email address, studio name (if you give it) and message, which reach us by email so we can reply.
• Early access sign-ups: the name, email and studio details you give us on our website.

How we use information

• To provide the service: scheduling and sending check-in texts, collecting and showing photos, and sending a Studio's replies and booking link.
• To record consent and honor opt-outs.
• To send account and service emails to Studio users, and updates to people who signed up for early access.
• To secure, maintain and improve the service, and to comply with the law.

We do not sell personal information, and we don't use clients' photos or details for advertising.

Text messaging (SMS)

We send text messages only to people who have agreed to receive them, and only for the purpose they agreed to. You can opt out at any time by replying STOP, and get help by replying HELP. See the SMS section of our Terms of Service for details.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties. Information may be shared with the service providers that deliver our messages, as described below, only to provide the service.

How we share information

We share information only:

• With the Studio that the information belongs to, and the people it gives access to its account.
• With service providers that run the service for us, under agreements to protect it: hosting and databases (Railway), photo storage (Cloudflare), text messaging (Twilio), email (Loops), website analytics (Umami) and product analytics (HeyCatch).
• With Meta and Reddit, to measure our ads: visits to our public website pages, and when someone creates a Studio account, as described under "Cookies, analytics and advertising" below.
• If required by law, or to protect the rights and safety of our users or others.
• As part of a merger, acquisition or sale of our business, in which case this policy continues to apply to the information.

Cookies, analytics and advertising

We use Umami, a privacy-focused analytics service, to count visits to our website (pages viewed, the site that referred you, and your browser, device type and approximate location) without cookies or keeping your IP address. HeyCatch, a product analytics service, records pages viewed, buttons clicked (but not the text on them) and device details on our website and in the app for Studio users, links that activity to a signed-in user's account (name, email address and role), and uses cookies or similar browser storage to recognize returning visitors. The Meta Pixel, from Meta Platforms, Inc., measures how well our Facebook and Instagram ads work: Meta may receive your IP address, browser details, pages visited and cookie identifiers, and when a Studio account is created we also send Meta a hashed (scrambled) copy of its email address and user ID. Meta uses this information under its own Privacy Policy, including to show you ads. The Reddit Pixel, from Reddit, Inc., does the same for our Reddit ads: Reddit may receive your IP address, browser details, pages visited and cookie identifiers, and when a Studio account is created we also send Reddit a hashed copy of its email address and user ID. Reddit uses this information under its own Privacy Policy.

None of these services is used on pages for Studio clients or on the links we text to clients and invited team members, and we never send Meta, Reddit or HeyCatch information about clients, their photos or their text messages. You can control the ads you see in your Facebook or Instagram ad preferences and your Reddit privacy settings, and block or delete cookies in your browser settings.

Retention

We keep information for as long as the Studio's account is active or as needed to provide the service. Consent and opt-out records are kept longer where the law requires us to show that messages were sent with consent. When a Studio closes its account, we delete or anonymize its data within a reasonable time, except where we need to keep it by law.

Security

We use reasonable safeguards to protect information, including encrypted connections, hashed passwords and photos that can only be viewed through signed, time-limited links. No system is completely secure, though, and we can't guarantee absolute security.

Your choices and rights

• Clients can stop texts at any time by replying STOP, and opt back in by replying START.
• Clients who want to see, correct or delete their information can ask their Studio, or contact us and we'll work with the Studio.
• Studio users can update their account details in settings, or contact us to close their account.
• Depending on where you live, you may have other rights under local privacy laws. Contact us to use them.

Changes to this policy

We may update this policy from time to time. We'll change the "Last updated" date above, and for significant changes we'll let Studios know.

Contact us

[email protected]