Privacy Policy

Some businesses (for example clinics and salons) use an nkroft assistant on WhatsApp so customers can book, change or cancel appointments and ask questions. When you message one of these assistants, the business you are contacting is responsible for your information, and we process it on their behalf to provide the service.

• Contact details: your name, WhatsApp phone number and WhatsApp profile name, and the email address you give for booking confirmations.
• Booking details: the service, date and time, booking reference, and any changes or cancellations.
• Messages: what you write to the assistant, and anything you choose to tell the business (for example an injury or how many weeks pregnant you are, so the therapist can prepare). Please only share health details you are comfortable sharing.
• Website enquiries: the name, company, email and message you send through our contact form.

We do not collect payment card details through the assistant or the website.

• To check availability and make, change or cancel bookings, and to send confirmations and reminders.
• To answer your questions about the business and pass your request to its staff when you ask for a person.
• To reply to enquiries sent through our website.
• To keep the service secure, fix problems and prevent misuse.

We do not sell personal information or use it for advertising.

We use trusted providers to run the service. They process information only to provide their service to us:

• Meta (WhatsApp) delivers messages between you and the assistant.
• Google provides the business’s calendar (Google Calendar) and the AI model that writes the assistant’s replies (Gemini). We use paid API access, under which Google does not use the content to train its models.
• Hostinger hosts our servers, databases and email.
• The business you booked with, and its staff, see your booking and contact details.

Some of these providers store or process information outside Australia, including in the United States. We choose providers with strong security and privacy commitments.

• Conversations with an assistant are deleted automatically after 30 days.
• Bookings and contact details are kept while the business uses our service, or until you or the business ask us to delete them, unless a law requires the business to keep records for longer.
• Database backups are kept for 14 days and then deleted.

Each business’s data is kept in its own database. Connections are encrypted (HTTPS), access to our systems is limited to authorised nkroft staff using strong passwords and two-factor authentication, and the assistant can only see bookings for the WhatsApp number it is talking to.

You can ask to see, correct or delete your personal information at any time. Email info@nkroft.com or follow the steps on our data deletion page. We respond within 30 days.

Contact us at info@nkroft.com. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner at oaic.gov.au.

We may update this policy from time to time. The date at the top shows when it last changed.