One Beauty
space · admin
Legal

Privacy Policy

Last updated: July 9, 2026

This Privacy Policy explains how ONEBEAUTY SPACE INC. ("OneBeauty," "we," "us," or "our") collects, uses, processes, shares, and protects information in connection with the OneBeauty Concierge application and related services (collectively, the "Service"), available at manager.one-beauty.org.

The Service is a messaging and appointment-booking assistant that beauty and wellness businesses use to communicate with their customers across channels such as WhatsApp, Instagram, Messenger, and web chat. This Policy covers the Service (the application), not only our website.

By using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

1. Who this Policy applies to

The Service is used by two types of people:

  • Business Clients — beauty and wellness businesses (for example, salons and medspas) that use the Service to communicate with their own customers.
  • End Customers — individuals who message a Business Client and whose messages are handled through the Service.

This Policy applies to both. Business Clients are responsible for maintaining their own privacy notices to their End Customers and for obtaining any consent required by applicable law before using the Service to communicate with them.

2. Information we collect

We collect the following categories of information, along with examples of each:

Business account information. Business name, contact name, email address, phone number, business address, time zone, and the identifiers of the messaging accounts you connect (for example, WhatsApp Business Account ID, Instagram Business Account ID, Facebook Page ID, and phone number IDs).

Message content and metadata. The content of messages exchanged between a Business Client and its End Customers through the Service, including text, media, timestamps, sender and recipient identifiers, and delivery/read status.

End Customer information contained in conversations. Information that End Customers provide within a conversation, such as name, phone number, email address, appointment preferences, and booking details.

Booking and scheduling information. Requested and confirmed appointments, services selected, and related notes.

Technical and usage information. Device or connection information such as IP address, browser type, log data, and identifiers used to operate and secure the Service.

We do not intentionally collect special categories of sensitive personal data. Business Clients should not send, and should discourage End Customers from sending, sensitive health information through messaging channels.

3. How we use information

We use the information described above to:

  • Provide, operate, and maintain the Service, including delivering, receiving, and routing messages;
  • Generate assistant responses and help schedule appointments (see Section 4 on automated processing);
  • Provide customer support and respond to inquiries;
  • Secure the Service, prevent fraud and abuse, and ensure reliability;
  • Comply with legal obligations and enforce our Terms of Service;
  • Improve and troubleshoot the Service, using aggregated or de-identified data where possible.

We use data only to run, support, and maintain the Service and to provide or improve the experience, consistent with Meta's Developer Data Use Policy and applicable law.

4. Automated and AI processing

The Service uses automated processing, including third-party artificial intelligence models, to understand incoming messages and generate suggested or automatic responses for appointment booking and customer-support purposes. Message content may be transmitted to our AI subprocessor (Anthropic) to generate these responses. The Service is a task-specific assistant limited to the business communication and booking use cases described here; it is not a general-purpose AI assistant.

5. How we share information

We do not sell personal information. We share information only as follows:

Service providers (subprocessors). We use trusted third parties to operate the Service. Each is bound by contract to protect the data, use it only to provide services to us, and delete it when our relationship ends. They include:

  • Meta Platforms, Inc. — WhatsApp Business Platform, Instagram, and Messenger message delivery;
  • Anthropic — AI processing of message content to generate responses;
  • Supabase — database hosting and storage;
  • Vercel — application hosting.

At the direction of Business Clients. We process and share End Customer data as directed by the Business Client that controls the conversation.

Legal and safety. We may disclose information where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of OneBeauty, our users, or others.

Business transfers. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

6. Data retention

We retain information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, or upon a valid deletion request, we delete or de-identify it without undue delay, subject to legal retention requirements.

7. Your rights and how to request deletion

Depending on your location, you may have rights to access, correct, delete, or restrict the processing of your personal information, and to object to processing or request portability.

To request deletion of your data, follow the process on our Data Deletion page at https://manager.one-beauty.org/data-deletion, or email us at team@one-beauty.org with the subject line "Data Deletion Request." We will verify and process valid requests without undue delay, and in any event as required by applicable law.

End Customers who wish to have their data deleted may contact the relevant Business Client or contact us directly using the details above.

8. Security

We maintain administrative, physical, and technical safeguards designed to meet or exceed industry standards appropriate to the sensitivity of the data, to protect information against unauthorized access, loss, alteration, or disclosure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International users

We are based in the United States and process data in the United States. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States and other countries where our subprocessors operate.

10. Children

The Service is intended for businesses and their adult customers. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us so we can delete it.

11. Changes to this Policy

We may update this Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be communicated through the Service or by other reasonable means. This Policy remains in effect for as long as we use the Meta platform.

12. Contact us

ONEBEAUTY SPACE INC. 2131 Ocean Ave, Unit 3C Brooklyn, NY 11229, USA Email: team@one-beauty.org