1. Introduction

At BNC, your privacy is a priority. Sophy, our AI voice assistant, is designed to support medspas and wellness clinics by answering calls, booking appointments, and providing information to clients. We are committed to protecting the personal information we collect and process through our AI platform.


2. Information We Collect

We may collect and process the following types of information through Sophy:

  • Caller name and contact details (phone number, email)

  • Appointment details (date, time, service type)

  • Patient-reported information such as preferred services or symptoms

  • Call recordings or transcriptions (if enabled by the clinic)

  • Technical metadata (device type, call timestamp, call outcome)


3. How We Use Your Information

The information collected is used to:

  • Book, reschedule, or cancel appointments

  • Provide responses to common client questions

  • Ensure call accuracy and improve service quality

  • Notify the clinic about appointment activity and messages

  • Maintain call logs for business performance tracking


4. Legal Basis for Processing

Our lawful basis for processing personal data includes:

  • Legitimate Interest: Operating as a call management solution for clinics

  • Contractual Obligation: Delivering AI voice assistant services to medspa clients

  • Consent: When users provide data voluntarily through interactions


5. Data Sharing and Storage

We do not sell or share your personal data with third parties for marketing. Information is shared only with the medspa or clinic where the call originated. All data is:

  • Stored securely with encryption

  • Access-controlled to authorized personnel only

  • Retained only as long as necessary for operational purposes


6. HIPAA Compliance

Sophy is designed to comply with HIPAA guidelines when used by covered entities. All health-related interactions are handled with safeguards in place to protect Protected Health Information (PHI).


7. Your Rights

Depending on your jurisdiction, you may have rights to:

  • Access your data

  • Correct inaccurate information

  • Request data deletion

  • Object to certain uses of your data

To exercise these rights, please contact us at privacy@bnc.ai.


8. Security Measures

We take data protection seriously. Our systems are secured with:

  • AES-256 encryption

  • Secure servers and firewalls

  • Role-based access controls

  • Continuous monitoring and logging


9. Third-Party Services

Some features may be integrated with third-party platforms (e.g., GoHighLevel, Calendly, Stripe). Each of these services has its own privacy policy and data handling practices.


10. Changes to This Policy

We may update this Privacy Policy periodically. When we do, we will revise the “Effective Date” at the top and notify you if the changes are significant.


11. Contact Us

For any privacy-related questions, please contact:

BNC Privacy Office
Email: admin@buildncode.com
Phone: +19292439432

Mobile: +918847065974
Mail: #28 Mohali, 140301 India