Last updated August 2026
Privacy Policy
This policy explains what MedSpa Planner collects, why we collect it, who processes it on our behalf, and how you can have it deleted.
What we collect
Account data: your name, email address and authentication records. Business profile: practice name, location, services, brand voice, goals, promotions and important dates you enter. Generated content: the plans, captions, Reels, Stories and campaigns created for you. Usage data: counts of posts generated and AI requests, used to enforce plan allowances. Billing data: plan, status and period, held alongside a customer reference from our payment processor.
What we do not want
Do not enter patient names, patient photos, medical records or any other protected health information into the planner. The service is not designed or intended to store patient data.
How we use it
To create and improve your content plans, to remember what has already been written so months don't repeat, to enforce plan limits and control AI costs, to process payments, to provide support, and to keep the service secure.
Processors we use
Hosting, database and authentication are provided by our cloud infrastructure provider. Content generation is performed by third-party large language model providers, which receive your prompt inputs (business profile and content briefs) for the purpose of returning generated copy. Payments are processed by our payment processor, which handles card details directly, we never store card numbers.
Data protection and retention
Data is stored in an access-controlled database with row-level security, so each account can only reach its own records. We keep your data while your account is active. Delete your account and we remove your profile, plans and generated content, retaining only the minimal billing records required by law.
Cookies
We use essential cookies and local storage to keep you signed in. We do not use advertising cookies or sell personal data.
Your rights
You can request access to, correction of, export of, or deletion of your data at any time. Email hello@traciacreative.com and we will respond within 30 days.
Children
The service is intended for business use by adults and is not directed at anyone under 18.
Changes
We will update this page and change the date above when this policy changes materially, and notify active subscribers by email.
