Privacy Policy

Eiwa ("Eiwa," "we," "us," or "our") provides a voice-first business assistant for independent beauty professionals, offered under the name Eiwa for Beauty Pros (the "Service"). The Service is available through a Telegram bot and an Android application, and it helps professionals manage appointments, client records, and reminders using voice commands.

This policy describes how we handle personal information when you use the Service or visit eiwa.tech. If you have questions, contact us at privacy@eiwa.tech.

We collect the following categories of information:

• Account information. Your name, phone number, and email address, which you provide when you sign up or manage your account.
• Client records you store. Information about your clients that you choose to save in the Service, such as client names, phone numbers, and appointment notes. You control this information, as described in Section 4.
• Voice recordings. When you speak to Eiwa, your voice recording is processed to transcribe it into text so the assistant can act on your request. Voice recordings are deleted after transcription and are not stored permanently.
• Usage analytics. Technical and usage data such as feature usage, error reports, device type, and approximate app performance metrics. Usage analytics do not include the content of your messages.

We use the information described above to:

• Provide the Service: schedule appointments, maintain your client records, and send appointment reminders you request.
• Transcribe your voice commands and generate the assistant's responses.
• Operate, secure, and troubleshoot the Service, including preventing fraud and abuse.
• Improve the Service, using aggregated usage analytics that do not include message content.
• Communicate with you about your account, such as service updates and support responses.
• Comply with legal obligations.

We do not sell your personal information, and we do not use your clients' contact information to send them marketing messages.

When you store information about your clients in the Service, you act as the controller of that information: you decide what to collect, and you are responsible for having an appropriate basis to store and use it. Eiwa processes your clients' information on your behalf, only to provide the Service to you.

Messages the Service sends to your clients are limited to transactional communications, such as appointment reminders and confirmations. The Service does not send marketing messages to your clients on your behalf without their consent.

• Account information and client records are kept while your account is active, so the Service can work for you.
• Voice recordings are kept only for the moment of processing: they are transcribed and then deleted, and they are not stored permanently.
• Usage analytics are kept in aggregated or de-identified form where possible.
• When you delete your account, we delete your personal information within 30 days, except for limited records we must keep to comply with law, resolve disputes, or enforce our agreements.

You can delete your account and data at any time:

• In the Telegram bot: send the /delete command.
• In the Android app: go to Settings > Delete my account.
• By email: write to privacy@eiwa.tech from the email address associated with your account.

Deletion requests are processed within 30 days. Before deleting your account, you can request an export of your data by contacting privacy@eiwa.tech. For details, see our Data Deletion page.

We use technical and organizational measures designed to protect your information, including:

• Encryption in transit: data exchanged between your device and our systems is encrypted using industry-standard protocols such as TLS.
• Access controls: access to personal information is limited to personnel and systems that need it to operate the Service.
• Vendor review: we work with established infrastructure providers, listed on our Subprocessors page.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting your personal information, we will notify you as required by applicable law.

We rely on a small number of service providers to operate the Service, for example for AI language processing, speech-to-text transcription, database hosting, and application hosting. These providers process information only on our instructions and for the purposes described in this policy.

The current list of providers, what they do for us, and where they are located is published on our Subprocessors page.

Subject to applicable law, you can exercise the following rights by using the in-product tools described above or by contacting privacy@eiwa.tech:

• Access: request a copy of the personal information we hold about you.
• Correction: ask us to correct inaccurate information.
• Deletion: ask us to delete your personal information.
• Portability: request your data in a commonly used, machine-readable format.
• Objection and restriction: object to or ask us to limit certain processing, where the law provides this right.

We will not discriminate against you for exercising any of these rights. If we deny a request, you may appeal by replying to our decision, and we will explain the outcome of the appeal.

Some US states, including California, Virginia, Colorado, Connecticut, and Utah, give their residents specific privacy rights. This section summarizes how those rights work with the Service. It is a general framework and will be refined with counsel for each applicable state law.

• California. California residents may have rights under the California Consumer Privacy Act, as amended (CCPA/CPRA), including the rights to know, delete, correct, and opt out of the sale or sharing of personal information. Eiwa does not sell personal information and does not share it for cross-context behavioral advertising.
• Virginia, Colorado, and similar states. Residents of states with comprehensive privacy laws, such as the Virginia Consumer Data Protection Act and the Colorado Privacy Act, may have rights of access, correction, deletion, portability, and the right to opt out of targeted advertising, sale, and certain profiling. Eiwa does not engage in targeted advertising, sale of personal data, or profiling with legal or similarly significant effects.
• How to exercise these rights. Use the deletion and export tools described in Section 6, or email privacy@eiwa.tech. We may need to verify your identity before acting on a request.

The Service is intended for business use by adults and is available only to users who are 18 years of age or older. The Service is not directed to children, and we do not knowingly collect personal information from children under 13. Because the Service is not directed to children under 13, the Children's Online Privacy Protection Act (COPPA) does not apply to it. If you believe a child has provided us personal information, contact us at privacy@eiwa.tech and we will delete it.

Eiwa is not a medical service and does not provide medical advice.

The Service uses artificial intelligence to transcribe voice commands and generate responses. AI-generated output can contain errors and should be reviewed where appropriate before you rely on it.

We may update this policy from time to time. If we make material changes, we will notify you through the Service or by other reasonable means before the changes take effect. The "Last updated" date at the top of this page shows when this policy was last revised.

For any privacy question or request, contact us at privacy@eiwa.tech.