Effective: June 2026
This Privacy Policy describes how 24Recept ("we", "our", or "us") collects, uses, stores, and protects information when you use our AI-powered appointment booking platform, website, and related services (collectively, the "Service"). By using 24Recept you agree to the practices described here.
We never store your card details. All payments are processed directly by Stripe or Razorpay. 24Recept does not see, handle, or save any card numbers, CVVs, or banking credentials at any point.
All sensitive keys and credentials are encrypted at rest using AES-256. API keys, WhatsApp tokens, payment gateway secrets, and integration credentials are never stored in plain text.
1. Information We Collect
We collect information in the following ways:
- Account information — name, email address, phone number, and business details provided during sign-up.
- Business configuration — services, staff, working hours, pricing rules, and booking settings you configure in the dashboard.
- Booking data — appointment records created by you or your customers, including customer name, contact details, selected service, date, and time.
- Conversation logs — WhatsApp and voice bot interaction logs used to fulfil bookings and improve AI accuracy. These are retained for a limited period per your plan.
- Usage data — pages visited, features used, browser type, IP address, and device information, collected automatically for analytics and security.
- Communications — messages you send to our support team.
2. What We Do Not Collect
- Credit card numbers, debit card numbers, CVV codes, or any raw payment instrument details — these are handled exclusively by Stripe or Razorpay.
- Passwords in plain text — passwords are hashed using bcrypt before storage.
- Government-issued IDs unless you explicitly upload them as booking documents.
3. How We Use Your Information
- To provide, operate, and improve the 24Recept platform.
- To send booking confirmations, reminders (SMS, WhatsApp, Email), and transactional notifications.
- To authenticate users and protect accounts from unauthorised access.
- To respond to support requests and troubleshoot issues.
- To generate anonymised analytics that help us improve the product.
- To comply with legal obligations where applicable.
We do not sell your personal data or your customers' data to any third party.
4. Data Security
We take security seriously and have implemented multiple layers of protection:
- Encryption at rest — all sensitive credentials (API keys, WhatsApp tokens, payment gateway secrets) are encrypted using AES-256 before being stored in the database.
- Encryption in transit — all data between your browser and our servers is transmitted over HTTPS/TLS. Security headers including HSTS, CSP, and X-Frame-Options are enforced on every request.
- Multi-tenant isolation — each business account is completely isolated at the database level. No cross-tenant data access is possible.
- Access controls — internal access to production systems is restricted and logged.
- No card storage — payment processing is fully delegated to PCI-DSS-compliant providers (Stripe / Razorpay). 24Recept never touches raw card data.
5. Third-Party Services
24Recept integrates with the following third-party services to deliver its features:
- Stripe / Razorpay — payment processing. Governed by their respective privacy policies.
- WhatsApp Business API — messaging for booking bots and reminders.
- ElevenLabs — AI voice agent for phone-based bookings.
- OpenAI (GPT-4o-mini) — natural language understanding for the WhatsApp bot.
- SMS providers (Twilio / local gateways) — SMS reminders and confirmations.
We share only the minimum data necessary for each integration to function. We do not authorise these providers to use your data for their own marketing purposes.
6. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you cancel your account:
- Your business data is retained for 30 days after cancellation to allow for recovery.
- After 30 days, all account data is permanently deleted from our systems.
- Booking records required for legal or tax compliance may be retained for up to 7 years in anonymised or aggregated form.
7. Cookies
We use strictly necessary cookies to keep you logged in and maintain your session. We do not use third-party advertising cookies. Analytics cookies, if used, are anonymised and you may opt out via your browser settings.
8. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Export your data in a portable format.
- Object to or restrict certain processing activities.
To exercise any of these rights, email us at info@24recept.com and we will respond within 30 days.
9. Children's Privacy
24Recept is a business tool and is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are material, notify you by email or in-app notice. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.
11. Pricing & Price Changes
We reserve the right to change our subscription pricing at any time. When we do:
- We will give you at least 30 days' advance notice of any price increase via email and/or an in-app notification.
- Price changes take effect on your next renewal date following the notice period — your current billing cycle will not be affected.
- If you do not agree with the new pricing, you may cancel your subscription before the new price takes effect. Cancellation instructions are available in your account under Subscription → Cancel Plan.
- Continued use of the Service after a price change has taken effect constitutes your acceptance of the updated pricing.
- Promotional or introductory prices are time-limited and may revert to standard pricing at the end of the promotional period, with notice given as above.
We commit to at least 30 days' notice before any subscription price increase, giving you full control over whether to stay, switch plans, or cancel before the new rate applies.
12. Refund Policy
Every paid plan on 24Recept starts with a free trial period (currently 30 days) during which you are not charged. This trial exists so you can fully evaluate the platform before making any financial commitment.
Because a free trial is provided before billing begins, all payments made after the trial period are non-refundable. Specifically:
- Subscription fees are non-refundable once charged, regardless of whether the full billing period was used.
- Partial-month usage, unused features, or early cancellation do not entitle you to a refund.
- Cancelling your plan stops future billing but does not generate a refund for the current paid period. You retain access until the end of the billing cycle.
- Voice-minute recharge packs and one-time add-ons are non-refundable once purchased and credited to your account.
Exceptions: If you were charged in error (e.g., a duplicate charge or a billing system error), contact us at info@24recept.com within 7 days of the charge and we will investigate and, where confirmed, issue a full correction.
This policy does not affect any statutory consumer rights you may have under applicable law in your jurisdiction.
Try before you pay. Every plan includes a 30-day free trial — no card required to start. We believe that is fair, and it is why we cannot offer refunds on payments that follow a full trial period.
13. Google User Data
24Recept integrates with Google Calendar to help businesses manage their appointments. When a customer makes a booking through 24Recept, we create a corresponding event on the connected Google Calendar of the business/client, so they can see and manage their schedule.
This is the only use of Google Calendar data:
- We create calendar events to reflect new bookings
- We do not read, scan, or analyze existing calendar events beyond what is needed to manage app-created appointments
- This data is not used for advertising or marketing purposes
- This data is not sold or shared with third parties
- This data is not used to train generalized AI/ML models
24Recept's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, our pricing, our refund policy, or our data practices, please reach out: