Draft for legal review. This document may change before launch.
Privacy Policy
What information Relco collects, how we use it, who processes it for us, and the choices you have.
Last updated: October 4, 2026
This page is in English for every language. The English version governs.
Who we are
Relco is an AI front desk for US med spas. This website and the service are operated by Relco Digital ("Relco", "we", "us", "our"). You can reach us at hello@relcoai.com. Relco Digital, [Registered business address: to be confirmed].
This policy covers three groups of people: visitors to this site, the clinics that subscribe, and the people who call or text those clinics and are answered by Relco.
Information we collect
From website visitors. When you fill in a form, request a walkthrough, take a quiz or talk to Mia on this site, we collect what you give us: your name, work email, phone number, clinic name and anything you type or say.
Consent records. Before we store your details you agree to our Terms of Service and this policy. We keep a record of that agreement: the wording you agreed to, its version, the time, the form it came from, a one-way hash of your IP address and your browser's user agent.
Demo conversations. If you use the walkthrough or the live demo, we keep a record of the conversation with your details once you agree to it, so our team can follow up. For the live demo we also record when a session starts and how long it lasts, to keep within our daily demo budget.
Technical data. Your browser sends basic technical data such as IP address and device type. We use it to keep the site secure, limit abuse and run the bot check. IP addresses we keep for rate limits and consent records are stored only as one-way hashes.
Campaign and partner information. If you arrive from an ad or a partner's link, we record the campaign tags in the link (such as utm_source) and the partner code with any form you submit.
From clinics that subscribe. To set up the service we collect business and account details: business name and address, billing contact, the treatment menu, prices, hours and the answers you want Mia to give, plus details carriers require to register your text messaging.
From people who contact a clinic. When someone calls or texts a clinic that uses Relco, we process what is needed to answer and capture the consult: name, phone number, the treatment asked about, a preferred time and the message content. We handle this data on behalf of the clinic, as its service provider. Relco does not ask for or store medical history or clinical records.
How we use information
- To run the AI front desk: answer questions from the clinic's price list, capture consults and pass them to the clinic's team.
- To answer your inquiries, run the demo and schedule walkthroughs.
- To send the messages you asked for or agreed to, on our behalf or a clinic's.
- To set up, support, secure and improve the service.
- To bill subscribers and keep required business records.
- To meet legal, security and fraud-prevention obligations.
Text messaging and phone data
We never sell your data, and we never share phone numbers or text message opt-in consent with third parties for their own marketing. Mobile information collected for text messaging is used only to deliver the messages you agreed to receive and to support and secure the service.
Message frequency varies. Message and data rates may apply. Reply STOP to opt out or HELP for help. Full details are in our Messaging Terms.
Service providers we use
These providers process data for us to deliver the service. They may use it only to provide their service to us.
| Provider | What it does | When |
|---|---|---|
| Vercel | Hosts this website and the app, and serves every page and request. | Always |
| Neon | Database. Stores form submissions, consent records, demo conversation records and service data. | Always |
| Cloudflare Turnstile | Bot check on forms and before the live demo starts. Processes technical data about your browser. | When the bot check is switched on |
| Resend | Sends the emails you ask for, such as walkthrough confirmations and follow-ups. | When email is switched on |
| Twilio | Carries the phone calls and text messages the AI front desk and Text-Back answer for clinics. | When phone and SMS are switched on for a clinic |
| ElevenLabs | Voice and conversation engine for the live demo of Mia on this site. Processes what you say to her. | Only during a live demo session |
| Anam.ai | Renders Mia's AI face for the live demo on this site. | Only during a live demo session |
| Cal.com | Shows open walkthrough times and holds the one you pick. | When online walkthrough booking is switched on |
| Dub | Partner and referral tracking: records which partner link brought you here and whether you signed up. | Only with your analytics consent |
| Meta (Pixel and Conversions API) | Measures whether our Facebook and Instagram ads bring people here. | Only with your marketing consent |
How long we keep data
We keep information for as long as we need it to provide the service and to meet legal, tax and security obligations, then delete or anonymize it. Clinics can ask us to export or delete account and conversation data, subject to records we must keep. People who contacted a clinic can ask the clinic, or us, to delete their data.
Security
We protect data with encryption in transit, restricted access to our database and admin tools, and least-privilege handling. Conversations are scoped to scheduling and lead capture. No system is perfectly secure; if a breach affects you, we will tell you promptly.
Your rights and choices
Depending on where you live, you may have the right to access, correct, delete or port your personal information and to object to some processing. To use any of these rights, email hello@relcoai.com. We will not treat you differently for using them. California residents (CCPA/CPRA) and people in the EU and UK (GDPR) have specific rights, which we honor. For data we process on a clinic's behalf, please also contact that clinic.
Children
Relco is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 18. Clinics are responsible for the age and consent of the people they serve.
International users
Relco serves clinics in the United States. Data may be processed and stored in the United States and other countries where we or our providers operate.
Changes to this policy
We may update this policy as the service or the law changes. We will change the "Last updated" date above and, for material changes, give notice through the service.
Contact
Questions about privacy? Email hello@relcoai.com. Relco Digital, [Registered business address: to be confirmed].