Privacy Policy

1. Overview

This Privacy Policy explains how SculptFlow LLC ("SculptFlow," "we," "us") collects, uses and shares information through mysculptflow.com and the SculptFlow platform (together, the "Service"). It applies to clinics that use SculptFlow ("you") and, where relevant, to the leads and patients your clinic communicates with through the Service.

2. Information we collect

We collect information in a few ways:

• Account information you provide when signing up — such as clinic name, staff names, email addresses and billing details.
• Clinic data generated through use of the Service — conversations, lead records, appointment and campaign activity connected to the messaging channels you integrate.
• Website usage data from mysculptflow.com, such as pages visited and general device/browser information.
• Demo request information submitted through our contact form, such as name and email.

3. How we use information

We use information to:

• Provide, operate and maintain the Service, including the unified inbox, lead management, scheduling, campaigns and automation features;
• Respond to demo requests and support inquiries;
• Maintain the security and integrity of the Service;
• Improve the Service over time;
• Meet legal and contractual obligations.

We do not sell clinic or lead information to third parties.

4. Messaging channel data

When you connect WhatsApp, Instagram, Facebook Messenger or other channels to SculptFlow, message content and metadata from those conversations flow through the Service so they can appear in your unified inbox, lead records and conversation history. Your use of each channel is also subject to that channel's own terms and privacy practices, which you should review directly with that platform.

5. How information is shared

We share information only:

• With subprocessors and infrastructure providers who help us operate the Service under confidentiality obligations — currently, our database and backend infrastructure is provided by Supabase, which itself runs on Amazon Web Services (AWS);
• When required by law, regulation or valid legal process;
• In connection with a merger, acquisition or asset sale, with notice to affected clinics where required;
• With your consent.

6. Data retention

We retain Clinic Data for as long as your account remains open. If you close your account, we will delete your Clinic Data upon request, which you can make by contacting support@mysculptflow.com.

7. Security

Clinic Data is stored using Supabase, hosted on Amazon Web Services (AWS) infrastructure in the Asia Pacific (Tokyo, Japan) region. Data is encrypted in transit (TLS/SSL) and at rest. Supabase's own infrastructure holds SOC 2 Type II certification.

We do not currently represent the Service as GDPR- or HIPAA-compliant. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Your rights & choices

Depending on your location, you may have rights to access, correct, export or delete personal information we hold about you, or to object to certain processing. To exercise these rights, contact us at support@mysculptflow.com, and we will respond to your request within a reasonable time.

9. Information about your leads & patients

Your clinic is the party responsible for its relationship with its own leads and patients, including for having a lawful basis to communicate with them and to share their information through the Service. If a lead or patient wants to exercise a privacy right regarding data your clinic holds about them, that request should generally be directed to your clinic; we'll assist you as reasonably needed to respond.

10. Children's privacy

The Service is intended for use by clinic staff and is not directed to children. We don't knowingly collect personal information from children through the Service.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify account holders.

12. Contact

Questions about this Privacy Policy, or requests regarding your information, can be sent to support@mysculptflow.com.