Privacy Policy
Effective date: [to be set] · Last updated: [to be set]
This explains what information Enactity handles, why, and who it's shared with. It covers text conversations with businesses that use Enactity, this website and its demo, and pilot applications.
Who we are and whose policies apply
Enactity is operated by [legal entity name], [business address]. Enactity is software that lets a business, such as a gym or fitness studio, answer customer text messages with an automated assistant.
When you text a business that uses Enactity, you are texting that business. The business decides what the assistant can answer and what it's allowed to do, and it controls its own policies, such as membership terms, freezes, cancellations, and refunds. We handle your information on the business's behalf to provide the service. For questions about your membership or the business's own privacy practices, contact the business directly.
Information we collect
When you text a business that uses Enactity
- Your phone number, so replies go to the right person and the conversation stays together.
- The content of your messages and the replies sent to you, including replies written by the business's staff.
- Names and email addresses you choose to share in the conversation, for example when booking a tour.
- Tour bookings: the time you booked and the name you gave.
- Membership change requests and confirmation records. When you ask to freeze, cancel, or change a plan, we keep what was requested, the dates and prices you were shown, your confirmation reply, the result, and when it happened. The business keeps these records so there's a clear history of what was agreed.
- Verification records: that a verification step was completed for your conversation and when. We don't collect your member login password.
- Messaging preferences: whether you've opted out or back in (for example by texting STOP or START), and when.
- Website chat: if you use the chat on a business's website, the messages in that chat and a random visitor ID saved in your browser so the conversation continues when you come back. If you ask about your membership there, we ask for the phone number or email on your account and use it only to find the account and send the verification link.
- Aggregate insights for the business: counts of what customers ask about and which questions went unanswered, shown to the business without phone numbers.
- Delivery information from the text messaging provider, such as whether a message was delivered.
To act on account requests, the assistant may look up your membership details (such as your plan, status, and renewal date) in the business's systems after you verify who you are.
When you use this website
- Pilot applications: your name, business name, email, and anything else you choose to include (phone, number of locations, current software, and your message).
- The website demo: a cookie that keeps your private demo session, and the messages you send in the demo. The demo uses fictional data, never sends real texts, and demo sessions expire after 24 hours.
- IP addresses, used briefly to limit abuse (for example, too many messages or form submissions in a short time).
Business owner accounts
For people who manage a business's Enactity account, we keep your name, email, and a securely hashed password, plus the settings, information, and policies you enter.
How we use information
- To reply to your messages on the business's behalf.
- To complete requests the business allows by text, like booking a tour or scheduling a membership change under the business's written policy, after you verify who you are and confirm with a code.
- To pass conversations to the business's staff when you ask for a person or the assistant can't help.
- To keep records of conversations, bookings, and confirmed changes for the business.
- To honor requests to stop texts, and to keep the service secure, including preventing abuse and enforcing usage limits.
- To respond to pilot applications.
Automated replies
Some replies are written by an AI model from an outside provider, using information the business has approved. To write a reply, the relevant parts of your conversation are sent to that provider. Membership changes don't rely on the AI to decide terms: the dates and prices you see are calculated from the business's written policy, and nothing changes until you confirm with a code.
Service providers
We use service providers to run Enactity. They process information on our behalf and only as needed to provide their service:
- An AI model provider that generates replies
- An SMS provider that sends and receives text messages
- A hosting provider that runs the website and service
- A database provider that stores the information described here
[names of service providers to be listed before launch]
How information is shared
- With the business you texted. Its staff can see your conversation, bookings, and requests.
- With our service providers, as described above.
- When required by law, or to protect the rights, safety, or security of people or the service.
We do not sell personal information. Mobile numbers and SMS consent are not shared with third parties for their own marketing.
How long we keep information
Retention periods are [to be defined before launch]. Website demo sessions expire after 24 hours, and their fictional data is then removed.
Security
- Owner accounts require a login, and passwords are stored hashed, never in plain text.
- Each business can only access its own conversations and records.
- Verification links work once and expire after a short time.
- Membership changes require verification and a confirmation code from the customer.
- Phone numbers are partially masked in our operational logs.
No system is perfectly secure, but we work to protect the information we handle.
Your choices
- Reply STOP to stop texts from a business, and START to opt back in. See the SMS terms.
- Ask for a person at any time by texting the business.
- For access, correction, or deletion requests, contact the business you texted, or contact us at [contact email].
Children
Enactity isn't directed to children under 13, and we don't knowingly collect their information.
Changes
If we change this policy, we'll update the date at the top and, for significant changes, give notice before they take effect.
Contact
[legal entity name], [business address], [contact email].