Privacy

How we handle your data.

Plain-English summary first, then the SMS-specific commitments we make to every phone number given to us. We don’t sell data, we don’t share mobile information with advertisers, and we delete on request.

The short version

  • We collect the data you give us (account info, content) and the data you generate using Aaptly (bookings, messages, analytics).
  • We use it to run Aaptly for you and make it better — not to sell to advertisers.
  • You can export or delete your data at any time.
  • We meet GDPR, CCPA, SOC 2, and HIPAA (on eligible plans) standards.

What we collect

Account + billing information; content you create (services, clients, bookings, messages); technical data needed to operate the service (IP, device, usage logs); and analytics about how you use Aaptly to improve the product.

How we use it

To provide the service, bill you, contact you about the service, improve the product, comply with legal obligations, and (on your behalf, with consent) communicate with your clients.

SMS messaging & mobile information

When a client of an Aaptly-powered business gives their phone number on a booking form, opts in at an in-person check-in, or replies START / YES to a message, Aaptly stores that phone number and sends appointment confirmations, reminders, rescheduling updates, and AI-receptionist replies on behalf of that business. Standard message and data rates may apply. Message frequency varies with each client’s bookings.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Phone numbers, opt-in status, and the content of SMS messages are never sold, rented, shared with advertisers, or used for lookalike audiences, ad retargeting, or affiliate marketing. They are used solely to operate the messaging service the client opted into.

The only third parties that process SMS data are the sub-processors strictly required to deliver the service: Twilio (our licensed SMS carrier), AWS (our hosting provider), and the end business (the studio or salon operating the booking page), each bound by data-processing contracts. Information shared with these sub-processors is limited to what is required to deliver the requested SMS, and is not used for their own marketing.

HELP replies return program information. STOP replies immediately unsubscribe the phone number from all messages from that business and log the opt-out on our servers. A subsequent STARTreply, or a re-submission of the same phone number on the same business’s booking form, re-subscribes. Opt-out records are retained to honor the request even if the number is later reused.

For questions about SMS data specifically, email sms-privacy@aaptly.com. For the full SMS program terms (program name, frequency, rates, HELP/STOP) see our SMS consent page and our Terms of Service → SMS Program.

Who we share with

Sub-processors we use to run Aaptly (AWS for hosting, Stripe for payments, Twilio for SMS, Postmark for email) under strict contracts. Never with advertisers. Never sold. Mobile information (phone numbers and SMS opt-in data) is never shared with third parties or affiliates for marketing or promotional purposes.

Your rights

Export, correct, or delete your data at any time via your dashboard or by emailing privacy@aaptly.com. EU and California residents have specific rights (right to be forgotten, do-not-sell) we honor on request. Clients of an Aaptly-powered business can also revoke SMS consent at any time by replying STOP to any message, or by emailing sms-privacy@aaptly.com.

Contact

privacy@aaptly.com
SMS & mobile-data queries: sms-privacy@aaptly.com
Data Protection Officer: available on request (EU customers).

This summary is provided for clarity. The full legal policy is available on request and supersedes this summary where they conflict. Last updated April 2026.