Privacy Policy

Last updated: August 21, 2026 · Effective immediately

BookAIStudio ("we", "our", "us") operates this website and the AI 10-Hour Blueprint assessment service. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and the rights you have over your information. By using this site, the client portal, or any of our assessment services, you agree to the practices described below.

1. Information We Collect

Identity and contact details: name, business name, email address, phone number, location, service area, and website or social links.
Business profile data: industry, company size, number of employees, annual revenue range, years in business, operating hours, tools currently used, and onboarding answers provided during interviews, chat, or forms.
Assessment and report data: interview transcripts, notes, documents you upload, recommended tools, action plans, and the assessment report we prepare for you.
Technical and usage data: IP address, browser type, device information, pages visited, referral source, and interaction with the chat widget (collected via standard analytics, e.g., Google Analytics).
Payment data: payment status and confirmation records via our payment processor (Stripe). We do not store full credit-card numbers; card details are handled entirely by our payment processor.
Call recordings and transcripts: when you call the AI assistant, calls are recorded and transcribed (with your consent) so we can prepare and deliver your assessment. Recordings are kept only for assessment preparation, quality, and support.

2. How We Use Your Information

To create, prepare, and deliver your private assessment report and recommendations.
To review your business needs and recommend practical tools, workflows, and step-by-step implementation instructions.
To communicate with you about your report, onboarding, support, follow-up services, and payment status.
To verify payment status and provide portal access (temporary passcodes, password resets).
To protect the app, detect and prevent unauthorized access, fraud, and abuse.
To maintain internal business records and satisfy legal, tax, and accounting obligations.
To improve our services, site, and agent performance.

3. Legal Bases for Processing (GDPR / similar laws)

Contract performance: processing needed to deliver the service you purchased.
Legitimate interests: improving our services, securing our systems, and managing our business.
Consent: call recording, marketing communications, and cookies where required.
Legal obligation: compliance with applicable laws, tax, and accounting rules.

4. How Your Information Is Protected

Client reports are protected by private links, email verification, temporary passcodes, and required first-login password changes. Provider API keys, payment keys, and owner credentials stay in a private VPS backend environment file, never in the public app. Communications are served over HTTPS. Access to your personal data is limited to the people and systems that need it to provide your service.

5. Cookies and Analytics

We use Google Analytics and similar tools to understand how visitors use the site. These tools may set cookies or use similar technologies. You can disable cookies in your browser settings; the site remains usable, though some analytics may be incomplete. We do not sell or rent personal information to third parties for their own marketing.

6. Sharing and Third-Party Processors

We do not sell client data. Information may be shared only with service providers needed to operate the service, including: hosting and VPS providers, Stripe (payment processing), Google Analytics (usage measurement), email/automation providers (Mautic), and AI model providers used to draft reports. Each provider is bound by its own privacy terms and receives only the data required for that function. We may also disclose information when required by law, subpoena, court order, or to protect our legal rights.

7. Data Retention

We keep client records, transcripts, documents, and reports as long as needed to deliver the service, comply with legal and tax obligations, and resolve disputes. After that, data is anonymized or deleted in a structured manner. You may request deletion as described below.

8. Your Rights

Depending on your jurisdiction (for example, GDPR in the EU/UK or CCPA/CPRA in California), you may have rights to: access your personal data, correct inaccurate data, request deletion, object to or restrict certain processing, request portability of data you provided, and withdraw consent where processing is based on consent. To exercise any right, email support@bookaistudio.com with the subject line "Privacy Request". We will verify your identity and respond within the timeframe required by law (typically 30 days). We may ask for reasonable verification information and will never sell your data.

9. California Residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect, to request deletion, to opt out of the "sale" or "sharing" of personal information, and to not be discriminated against for exercising those rights. We do not sell personal information. Requests can be sent to support@bookaistudio.com.

10. International Transfers

Your information may be processed by us or our processors in countries other than your own. We rely on appropriate safeguards (for example, Standard Contractual Clauses or equivalent) to protect information transferred internationally.

11. Children's Privacy

This service is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it.

12. Security Incidents

We will notify affected users and the relevant authorities as required by law in the event of a data breach affecting personal data.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with a revised "Last updated" date. Continued use of the service after changes constitutes acceptance of the updated policy.

14. Contact

For privacy questions or requests, contact support@bookaistudio.com.