Privacy Policy

Effective September 25, 2026

Touch By Rain respects your privacy. This policy explains what information our website and booking assistant collect, why we use it, how Google Calendar data is handled, and the choices available to you.

1. Information we collect

Depending on how you use the website, we may collect information you provide, including your name, email address, telephone number, appointment preferences, selected services or products, messages to the virtual assistant, and skin concerns, allergies, or other screening information you choose to share.

We may also receive basic technical information needed to operate and secure the website, such as browser type, device information, approximate request time, and server logs. Session storage may remember your selections and whether you have already watched the introduction during your current browser session.

2. How we use information

We use information to answer inquiries, provide general skincare and service guidance, manage selections, schedule and administer appointments, process payments or purchase requests, communicate about a booking, maintain business records, improve website reliability, and prevent misuse.

3. Google Calendar and Google API data

Touch By Rain connects the business owner's Google Calendar to the website. The application may read calendar availability and create, update, or cancel appointment events in that connected business calendar. A client's name and email address may be added to an appointment event so Google can send a calendar invitation and updates.

Clients do not need to authorize Touch By Rain to access their own Google accounts. If a client accepts an invitation, Google and the client's calendar provider process that response under their own policies.

Google user data is used only to provide and maintain the appointment-calendar functionality requested by Touch By Rain. We do not sell Google user data, use it for advertising, or transfer it for unrelated purposes. Google Workspace API data is not used to develop, improve, or train generalized or non-personalized artificial intelligence or machine-learning models.

4. Virtual assistant information

Messages sent to Rain's Virtual Assistant and relevant approved business context may be processed by an artificial-intelligence service to generate a response and help with product, treatment, or booking questions. The assistant provides general information and is not a medical professional. Please do not use it for emergencies or submit information you do not want processed for this purpose.

5. Payments

Online card and digital-wallet payments are processed by Stripe. Touch By Rain does not intentionally receive or store complete payment-card numbers. Stripe processes payment information under its own privacy policy and security requirements.

6. When information is shared

We do not sell personal information. Information may be disclosed to service providers that support the requested website functions, such as Netlify for hosting and server functions, Google for calendar invitations, Stripe for payments, and the provider used to process virtual-assistant responses. These providers may process information only as needed to provide their services or comply with law.

We may also disclose information when reasonably necessary to comply with legal obligations, protect a person from harm, investigate misuse, or protect the rights and security of Touch By Rain and its clients.

7. Security

We use reasonable administrative and technical safeguards designed to protect information, including encrypted HTTPS connections, authenticated administrative access, and server-side storage of private credentials and Google authorization tokens. No internet service can guarantee absolute security.

8. Retention, deletion, and revoking Google access

We retain information only for as long as reasonably necessary for appointments, client service, business records, dispute resolution, security, and legal obligations. Retention periods may vary by record type.

You may request access, correction, or deletion of your personal information by emailing touchbyrain2023@gmail.com. We will honor appropriate requests subject to identity verification and records we must retain by law or for legitimate business purposes.

The connected Google account owner may revoke Touch By Rain's Google access through the Google Account permissions page or disconnect Google Calendar in the Touch By Rain administrator settings. When access is revoked or no longer required, stored authorization tokens will be deleted when reasonably practicable. Appointment records may remain where required for legitimate business or legal purposes.

9. Children

The website is not directed to children under 13. A parent or legal guardian should make any appointment for a minor and provide any required consent.

10. Changes to this policy

We may update this policy as our services or legal requirements change. The effective date above will identify the current version.

11. Contact

For privacy questions or data requests, contact Touch By Rain in Jacksonville, Florida at touchbyrain2023@gmail.com.