1. Who we are
HeySarah is an appointment scheduling service run by Rogue AI Labs ("we", "us"). Salons use HeySarah to take appointment requests from their clients. Each salon is its own business. When you book with a salon, we handle your information on that salon's behalf.
2. Information we collect
- Appointment requests on a salon's booking page: your name, phone number, email address if you give it, and the service, stylist and time you ask for.
- Client profiles, if you choose to create one: your name, email address, phone number and password (stored in scrambled, hashed form), plus anything optional you add, such as address, date of birth, style inspiration links, preferences and a profile photo.
- Calls to a salon's AI phone line: one pilot salon currently has its phone answered by an AI assistant. For those calls we receive your phone number (caller ID), a recording and written transcript of the call, and any appointment details you give. The assistant uses your phone number to find your existing appointments with that salon.
- Salon owners and staff: the name and email address on the Google account used to sign in, any two-step verification settings, and the salon details you enter (services, stylists, hours).
- The Ask Sarah chat and early access form on heysarah.io: what you type and the contact details you choose to send. Today the chat answers with pre-written replies, and what you type in it is not sent to an AI model.
- Technical information: basic request logs such as IP address and browser type, used for security and to limit abuse. Your browser stores sign-in information locally so you stay signed in. We do not use advertising or analytics cookies.
3. How we use it
- To send your appointment request to the salon and show it in the salon's dashboard so they can approve or decline it.
- To answer calls on the salon's AI phone line: to request new appointments (the salon approves them) and to change or cancel your existing appointments with that salon (it is designed to ask you to confirm first).
- To send account emails, such as sign-in invitations and verification codes.
- To reply to early access requests from salons.
- To keep the service secure and prevent spam and abuse.
We do not send appointment text messages today. We do not sell your information and we do not use it for advertising.
4. Who can see it
- The salon you book with or call sees your request, contact details and, for AI phone calls, the call details. Other salons do not.
- Service providers that run parts of HeySarah for us: Vercel (website hosting), Railway (servers and data storage), Retell AI (the AI phone line, including call recordings and transcripts; it uses AI language model providers such as OpenAI to understand and respond to callers), Resend (email delivery, including early access requests sent to our team) and Google (sign-in for salon owners). They process information only to provide their service to us.
- AI model providers for the Ask Sarah chat: today the chat uses pre-written replies and does not send your messages to an AI model. HeySarah is set up to use OpenAI (directly, or through Vercel's AI Gateway) for AI chat replies. If we turn that on, what you type in the chat would be sent to OpenAI to write a reply, and we will update this policy first.
- Legal reasons: we may share information if the law requires it, or to protect people or the service.
5. How long we keep it
We keep appointment requests and client profiles for as long as the salon uses HeySarah, or until you or the salon ask us to delete them, unless we must keep something longer by law. Call recordings and transcripts are kept by our phone provider until we delete them. You can ask us to delete yours at any time.
6. Your choices
You can ask the salon, or us, to see, correct or delete information about you. Contact us through the Ask Sarah chat on heysarah.io. We may need to confirm it is you before acting on a request.
7. Security
We use encrypted connections, two-step verification that is available for salon owners, and access controls that keep each salon's information separate. No online service can be perfectly secure.
8. Children
HeySarah is not meant for children under 13, and we do not knowingly collect their information.
9. Changes
If we change this policy, we will update the date at the top of this page.
10. Contact
Questions about this policy can be sent to Rogue AI Labs through the Ask Sarah chat on heysarah.io.