Privacy Policy

What we collect

To run Thyme Studio for your business, we store the information you and your team enter: business details, staff accounts, client records, appointments, payments, and messages you send through the product. Your clients' contact and booking details are collected on your behalf, as our customer — you remain the data controller for that information.

AI features (Sprout)

Sprout, our in-app AI assistant, is powered by Anthropic. Structured suggestions (trend cards, seasonal hooks, Grow Suite) only ever send business-level and aggregate data — your business name, service names and price ranges, team size, and aggregated booking counts. They never include client names, contact details, individual transaction or appointment records, or medical/consent notes.

Sprout's free-form chat is different: you can type anything, so we ask you not to enter client names or personal details there — describe clients in general terms only. This is shown as a persistent notice in the chat itself. Chat history is kept for a limited time and automatically deleted after 90 days.

Who we share data with

We use a small number of sub-processors to run the product — database hosting, AI, payments, and error tracking. See our sub-processors list for details on each one.

Your rights

You can access, correct, or delete the personal data we hold about you, and request a copy of it, by contacting your account administrator or us directly. If you are a client of a business using Thyme Studio, please contact that business first — they control your data as our customer.

Retention

We keep your data for as long as your account is active, plus a reasonable period afterward for legal and operational purposes. Sprout chat conversations are deleted automatically after 90 days.