This Privacy Policy describes how AIVA Solutions LLC ("Bukkii", "we", "us") collects, uses, and shares information when you use the websites at bukkii.ai and related products (the "Service").
1. Information we collect
We collect information you provide directly (account info, business profile, calendar events, customer records you import) and information we receive automatically when you use the Service (device/IP, log data, basic analytics).
When AIVA handles a phone call on your behalf, we record the audio and create a transcript so you can review and verify what happened. Recordings and transcripts are stored encrypted, accessible only to you and authorized Bukkii staff for support.
2. How we use information
- Operate, maintain, and improve the Service.
- Understand how the Service is used and improve AIVA's performance.
- Provide customer support.
- Communicate updates, security notices, and (with your permission) marketing.
- Comply with legal obligations.
3. Sharing
We do not sell personal information. We share information only with:
- Service providers (hosting, telephony, analytics) under written contracts limiting use of your data.
- Authorities when required by law (subpoena, lawful request, safety of users).
- Acquirer or successor in connection with a merger, acquisition, or sale of assets.
Mobile information and SMS consent are never shared. No mobile information, phone numbers, or text-messaging opt-in data will be shared with or sold to third parties, affiliates, or lead generators for marketing or promotional purposes. Mobile opt-in consent is not shared with any third party. We share this information only with subcontractors that provide support services (for example, our messaging platform provider), and solely to deliver the messages you have requested — never for their own marketing.
4. Security
We use industry-standard administrative, technical, and physical safeguards. All data in transit is encrypted via TLS 1.2+. Data at rest is encrypted with AES-256. Access is logged and least-privilege.
5. Your rights
You can request access, correction, or export of your personal information at any time by emailing [email protected]. To request deletion of your Bukkii account and the personal data linked to it, use the Delete your account page. We aim to respond within 30 days.
6. International users
Bukkii is based in the United States. By using the Service you consent to the transfer and processing of your information in the U.S. We comply with applicable laws including GDPR for European users and CCPA for California residents.
7. Children
The Service is not intended for children under 16. We do not knowingly collect personal information from children.
8. Changes
We may update this Policy. Material changes will be communicated via email or in-product notice.
9. Text messaging (SMS)
If you provide your mobile phone number and consent, Bukkii (operated by AIVA Solutions LLC) may send you SMS text messages relating to your account, appointments, bookings, service updates, and customer support. Bukkii is the sender of all text messages sent through the Bukkii platform; messages are sent from Bukkii-branded phone numbers, and the name of the salon you booked with may appear inside the message as appointment detail only.
How you consent. You consent by entering your mobile phone number and ticking the SMS consent checkbox on a Bukkii booking page, on a Bukkii check-in kiosk at a participating business, on a signed Bukkii SMS consent form, or by giving verbal consent to a Bukkii agent after the disclosure has been read to you. The consent checkbox is never pre-selected. Consent is not a condition of purchase.
Message frequency. Message frequency varies depending on your account and appointment activity.
Message and data rates. Message and data rates may apply, according to your mobile carrier plan.
Opt out. You can opt out at any time by replying STOP to any message; we will send one confirmation message and then stop sending you texts. Reply HELP for assistance, or contact us at [email protected] or (215) 791-6766.
The mobile information and SMS consent described here are never shared with or sold to third parties or lead generators for marketing purposes. Full messaging terms are available in our SMS Terms & Conditions.
10. Contact
Questions? Email [email protected]
11. Google user data and Limited Use
Bukkii's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect a Google account, Bukkii requests a single narrow permission: Google Calendar events (https://www.googleapis.com/auth/calendar.events). We cannot create or delete calendars, change calendar settings, or read calendar sharing permissions, and we request no access to Gmail, Drive, Contacts or Photos.
What we do with that access. We create, move and cancel appointment events on the calendar you connect, on your behalf. To find a free time we read only the start time, end time and all-day flag of your existing events — never their titles, descriptions, guests, locations or organisers — and we use those times solely to work out which slots are unoccupied. To show a caller their own booking we read back only events that Bukkii itself created.
Artificial intelligence and machine learning. Bukkii uses a third-party AI provider, OpenAI, to power its receptionist. Google user data — raw, aggregated, anonymised or derived — is never used to develop, train, fine-tune or improve any generalized or foundational artificial intelligence or machine learning model, whether ours or a third party's. We do not transfer Google user data to any third party for model training, for advertising, or for resale, and we never use it for personalised advertising or for credit decisions. The times we read from your existing events are consumed inside our own systems to compute free slots and are never sent to any AI model.
Human access. A person at Bukkii accesses your Google data only with your explicit consent, where necessary for security purposes, to comply with applicable law, or in aggregated and anonymised form for internal operations.
Retention and revocation. We store the credential that lets us reach your calendar, and the appointments we create for you. We do not keep a copy of your calendar. You can disconnect at any time from your Bukkii settings, or revoke Bukkii's access directly at https://myaccount.google.com/permissions, which stops all further access immediately.