Privacy Policy

This explains what we collect, why, who else sees it, and how to get it deleted. The Spa Engine is operated by Jennifer Cote, sole proprietor, operating as The Spa Engine, based in Ontario, Canada.

What we collect

When you use the free calculator: your name and email address, whether you agreed to marketing email, and the figures you entered, such as the treatment name, costs, and time.

When you have an account: your email address, your business name, and whatever you put into the product, including your service list and costs, your procedures, your training material, and staff records you choose to add.

When you buy something: your email address and a record of the purchase. Card details go directly to Stripe. We never see or store them.

Why we use it

To run the service, to email you the result you asked for, to give you access to what you bought, to answer you when you get in touch, and to keep the service working. If you ticked the marketing box, we also use your email to send occasional tips and news about The Spa Engine. We do not sell your information, and we do not share it for anyone else’s advertising.

Marketing email and consent

We only send marketing email to people who ticked the box asking for it. That box is never ticked for you in advance. Every marketing email has an unsubscribe link, and unsubscribing takes effect promptly. You will still get email we need to send about something you bought, such as a receipt or an account notice.

Who else handles your information

We use these providers to run the service, and they only handle your data on our behalf:

• Supabase stores the database and handles logins.
• Vercel hosts and serves the site.
• Stripe processes payments and holds the card details we never see.
• Resend delivers our email.
• Anthropic powers the AI features. When you use one, the relevant content, such as a document you upload or a quiz answer, is sent to be processed and the result is returned to you.

These providers may store and process information outside Canada, including in the United States, where different laws apply and where courts and authorities may be able to require access to it.

How long we keep it

Account data is kept while your account is open. If you unsubscribe, we keep a record of your email address so we do not email you again by mistake. Purchase records are kept as long as tax and accounting rules require. Calculator leads are kept until you ask us to remove them.

Your choices

You can ask us what we hold about you, ask us to correct it, ask us to delete it, or withdraw your marketing consent. Email hello@thespaengine.com and we will deal with it within 30 days. There are some things we may have to keep, such as records of a sale, and we will tell you if that applies.

Security

Traffic to the site is encrypted, access to your business data is restricted to your own account, and payment details are handled by Stripe rather than by us. No service can promise that nothing will ever go wrong. If a breach affects your information in a way that creates a real risk to you, we will tell you and the relevant authority as the law requires.

Children

The Spa Engine is a business tool and is not intended for anyone under 16. We do not knowingly collect information from children.

Changes and contact

If we change this policy in a way that matters, we will tell you by email or in the product. Questions, requests, or complaints go to hello@thespaengine.com. Postal address: PO Box 1508, New Liskeard, ON P0J 1P0, Canada. If you are in Canada and are not satisfied with how we have handled a privacy matter, you can contact the Office of the Privacy Commissioner of Canada.