1. Introduction
At BNC, your privacy is a priority. Sophy, our AI voice assistant, is designed to support medspas and wellness clinics by answering calls, booking appointments, and providing information to clients. We are committed to protecting the personal information we collect and process through our AI platform.
2. Information We Collect
We may collect and process the following types of information through Sophy:
-
Caller name and contact details (phone number, email)
-
Appointment details (date, time, service type)
-
Patient-reported information such as preferred services or symptoms
-
Call recordings or transcriptions (if enabled by the clinic)
-
Technical metadata (device type, call timestamp, call outcome)
3. How We Use Your Information
The information collected is used to:
-
Book, reschedule, or cancel appointments
-
Provide responses to common client questions
-
Ensure call accuracy and improve service quality
-
Notify the clinic about appointment activity and messages
-
Maintain call logs for business performance tracking
4. Legal Basis for Processing
Our lawful basis for processing personal data includes:
-
Legitimate Interest: Operating as a call management solution for clinics
-
Contractual Obligation: Delivering AI voice assistant services to medspa clients
-
Consent: When users provide data voluntarily through interactions
5. Data Sharing and Storage
We do not sell or share your personal data with third parties for marketing. Information is shared only with the medspa or clinic where the call originated. All data is:
-
Stored securely with encryption
-
Access-controlled to authorized personnel only
-
Retained only as long as necessary for operational purposes
6. HIPAA Compliance
Sophy is designed to comply with HIPAA guidelines when used by covered entities. All health-related interactions are handled with safeguards in place to protect Protected Health Information (PHI).
7. Your Rights
Depending on your jurisdiction, you may have rights to:
-
Access your data
-
Correct inaccurate information
-
Request data deletion
-
Object to certain uses of your data
To exercise these rights, please contact us at privacy@bnc.ai.
8. Security Measures
We take data protection seriously. Our systems are secured with:
-
AES-256 encryption
-
Secure servers and firewalls
-
Role-based access controls
-
Continuous monitoring and logging
9. Third-Party Services
Some features may be integrated with third-party platforms (e.g., GoHighLevel, Calendly, Stripe). Each of these services has its own privacy policy and data handling practices.
10. Changes to This Policy
We may update this Privacy Policy periodically. When we do, we will revise the “Effective Date” at the top and notify you if the changes are significant.
11. Contact Us
For any privacy-related questions, please contact:
BNC Privacy Office
Email: admin@buildncode.com
Phone: +19292439432
Mobile: +918847065974
Mail: #28 Mohali, 140301 India