SolvePoint Privacy Policy

Last updated: 20 October 2026

Who we are

SolvePoint is an AI booking assistant for UK service businesses such as beauty, hair, aesthetics and tattoo professionals. It replies to client messages on Instagram and Facebook Messenger, checks availability and books appointments. SolvePoint is operated by SolvePoint Ltd in the United Kingdom. Contact: carl@solvepoint.co.uk.

Our role

For businesses that sign up to SolvePoint, we are the data controller for their account information. For the clients of those businesses, the business is the data controller and SolvePoint processes client data on the business's behalf to provide the booking service.

What we collect

Businesses using SolvePoint: name, email address, business details, services, prices, opening hours, and the social media accounts they connect (for example their Instagram professional account ID and username, and access tokens needed to send and receive messages).

Clients messaging a business: the content of messages sent to the business, your social media ID and username on that platform, photos you choose to send (such as reference images), and the details you give to make a booking: your name, mobile number and email address, and appointment details. If a business charges for late cancellations or missed appointments, we also keep a record of any charge it has made and whether it has been paid. If you send a voice note, it is turned into text so it can be answered; the recording itself is not kept.

Referrals: if a business signs up through another business's referral link, we record which business referred it, and the referring business can see the new business's name and whether its reward has been earned.

How we use it

We use this information only to provide the service: to reply to messages, check availability, create and manage bookings, show bookings and reference photos to the business, and keep the service secure. We do not sell personal data, and SolvePoint does not use it for its own advertising.

Visitors to our website

On our public pages (such as the home page, guides and comparisons) we count visits with Umami, which doesn't use cookies or collect anything that identifies you: we see totals such as how many people viewed a page, which site they came from, their country and device type, and how many pressed "Set it up free". It isn't used on the dashboard or in the iPhone app.

Text messages from a business

If you give your mobile number when booking, the business may text you about that booking: a confirmation, a reminder, or a message if it is running late.

A business you have booked with before may also text you its own news and offers. Every one of those texts names the business and ends with a link to opt out. Opening the link and pressing the button stops that business's marketing texts to your number for good; you will still get texts about your own bookings. The business chooses what to send and who to send it to, and is responsible for those messages. To opt out, we keep your mobile number on that business's opt-out list even if the business later deletes your details, so that the opt-out lasts.

Automated replies

Messages are answered by an AI assistant acting for the business. You can ask to speak to a person at any time and the conversation will be passed to the business.

Lawful basis

We process business account data to perform our contract with the business. Client data is processed on the business's instructions so they can respond to your enquiry and take your booking, and for our legitimate interest in running a secure, reliable service. Marketing texts are sent by the business only to its own previous clients, about its own similar services, with a way to opt out in every text.

Who we share it with

We use trusted service providers to run SolvePoint:

  • Supabase (database, file storage and hosting of our backend)
  • Railway (hosting of our website)
  • OpenAI (generating AI replies to messages, turning voice notes into text, and reading screenshots a business chooses to upload to learn its writing style)
  • Telnyx (sending text messages to a client's mobile number: booking confirmations and reminders, and a business's own marketing texts)
  • Stripe (taking deposit payments for a business through that business's own Stripe account, and taking SolvePoint subscription payments from businesses)
  • Apple (sending notifications to a business owner's iPhone)
  • Umami (counting visits to our public web pages, without cookies)
  • Meta Platforms (Instagram and Facebook Messenger messaging)

Some of these providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as the UK International Data Transfer Addendum or equivalent contractual protections.

Screenshots of chats: a business can upload screenshots of its own chats so the assistant learns how it writes. The screenshots are sent to OpenAI to be read once and are not stored by SolvePoint. We keep only a written voice profile, including some of the business's own replies as examples, with clients' names replaced and phone numbers, emails and links removed.

Requests from public authorities

If SolvePoint receives a request from a public authority for personal data, we will:

  • review the request to check it is lawful and valid before responding;
  • challenge any request we consider unlawful, excessive or inappropriate;
  • disclose only the minimum information necessary to comply with a valid request;
  • keep a record of each request, our response, the legal basis relied on and the people involved.

How long we keep it

We keep business account data while the account is active. When a business closes its account, its data is deleted within 30 days, except where we must keep it longer by law.

Client data is kept only as long as it is needed:

  • Photos you send (such as reference images) are deleted the day after the appointment they were sent for, including an appointment that was cancelled or missed. A photo that did not lead to a booking is deleted 30 days after it was sent.
  • Messages, and the wording of text messages sent to you, are deleted 90 days after they were sent. If you have booked an appointment further ahead than that, the messages about it are kept until the day after the appointment.
  • Booking and contact details (your name, mobile number, email address and your appointments) are kept while the business uses SolvePoint, so the business has a record of its clients and bookings, or until deletion is requested.
  • Voice note recordings are never stored; only the text made from them is kept, as a message.

When a business opens one of your bookings, it is shown only the messages and photos that belong to that booking, not those from your earlier ones. Deletion is automatic and permanent; deleted photos and messages cannot be recovered. You can ask for your data to be deleted sooner at any time.

Your rights

Under UK data protection law you can ask to access, correct or delete your personal data, object to or restrict how it is used, and ask for a copy in a portable format. To make a request, email carl@solvepoint.co.uk. You can also see our data deletion instructions. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Security

Data is encrypted in transit, access is restricted so each business can only see its own data, and access tokens are stored on our servers and never exposed in the browser.

Changes

We may update this policy. The date at the top shows when it last changed.