Trust & Security
Your business runs on OpenSassy — bookings, clients, money. That only works if you can trust us completely.
These are the terms we run on today. If something here stops being true, we change the page.
🔐 Encrypted, everywhere
- ✓Every connection to OpenSassy is encrypted in transit (HTTPS/TLS) — web, mobile, and the voice line.
- ✓Your data is encrypted at rest (AES-256) in our EU-hosted database.
- ✓API keys and secrets live in Google Cloud Secret Manager — never in code, never in the browser.
🧱 Your business is walled off
- ✓Hard multi-tenant isolation: every request is scoped to your business by a verified token — code can't reach another tenant's data.
- ✓Every blocked attempt is logged to a security audit trail the founder reviews.
- ✓Clients can only ever see and change their OWN bookings — enforced in the database query itself, not just the interface.
⚖️ GDPR, properly
- ✓Our database and application hosting run on Google Cloud Platform’s europe-west1 region (Belgium), within the EEA. Our database itself is hosted by Supabase, also on an EEA-region project. These locations describe our primary hosting, not a guarantee that every provider stores or processes data only in the UK/EEA.
- ✓Every consent is recorded with timestamp, version, and source — and can be withdrawn any time.
- ✓Access, rectification, erasure, portability: ask in the app or email privacy@the-sassy.com.
- ✓Our Privacy Policy, Terms and DPA are public.
🤖 An AI with a moral code
- ✓Sassy never claims she did something she didn't — if a build isn't deployed, she says so. Honesty is written into her instructions, and we treat it as a hard rule.
- ✓Sassy asks before anything irreversible: payments, deletions, and deployments all stop at a human approval gate.
- ✓The AI providers we use are the ones named in our Privacy Policy: Anthropic (Claude), xAI (Grok), Google (Gemini), OpenAI, ElevenLabs, Tavily, TypeSafe (Jev) and Moonshot AI (Kimi). OpenAI is used for live voice, dictation, playback and the other purposes that policy names. Several of these providers publish business or API terms saying they do not train their models on data sent through those services, but we have not completed a contractual verification of every provider, so we do not promise that no provider uses your data for training. In particular, Tavily’s own policy and terms allow search input and output to be used to improve and train its AI functionality.
- ✓We never sell your data. Not to anyone, not ever.
👁️ Nothing hidden
- ✓Live service status is public — you can check our heartbeat any time.
- ✓Security issues: security@the-sassy.com — we read it, we answer.
- ✓This page only lists what is REAL in production today. When we ship more, we add it here — never the other way round.
Trust & transparency
Prices, limits, cancellation, data, and what Ara will and will not do. If a line is not here, we are not promising it.
Fees
- Small business £99/month. £169/month does not include Ara, AI receptionist.
- Enterprise is from £169 per site. Ara, AI receptionist is from £299/month.
- 600 minutes included, then £0.30/min. No fee per call. No install fee.
- Card payments through OpenSassy: a payment-processing fee of 2.5% (30p minimum) per transaction. No commission on your bookings.
- Ara on her own only if your existing software lets her into the diary and CRM. Otherwise she is sold with OpenSassy as the diary and CRM.
Limits
- Sassy’s chat is a fair-use AI allowance, shown in your dashboard. We do not promise a number of conversations.
- Ara includes 600 answered minutes each calendar month, then £0.30/min, recorded on your billing page and billed at that rate when billing starts.
- The monthly safety ceiling defaults to 2,000 answered minutes. After that she takes a message instead of a live call.
- Ara can take several calls at once (each voice server takes up to 10 per business); she does not answer every call. On each voice server, one number is limited to 8 calls an hour, and one call to 20 minutes. When a voice server is full, a caller may hear that the lines are busy.
Cancellation
- Cancel any time from Billing, which opens the Stripe billing portal. Access continues to the end of the billing period.
- 30-day money-back after the first paid charge: contact us and we refund that charge in full. There is no automatic refund button.
Data
- We never sell your data.
- Application hosting is Google Cloud europe-west1 (Belgium). The database is an EEA Supabase project. AI, maps, messaging and payment providers may process data elsewhere under their own terms.
- Delete in the app, or use https://the-sassy.com/account-deletion. Export is available, and billing records we must keep for tax stay for that legal period.
What Ara will and will not do
- She will say she is an AI in her first sentence, read the real diary, and offer times she has actually seen.
- She will put a booking request in the diary for the team to confirm. She will not say it is confirmed unless the booking tool says so.
- She will not take a card number, even if the caller starts reading one. When you switch it on, she can text a payment link.
- She will not read out another client’s bookings, and she will not move or cancel anyone’s booking but the caller’s own — and that switch ships off.
- Colour by phone needs a recorded passed patch test at least 48 hours before the appointment. It is valid 183 days (about 6 months) unless the salon sets another window, from 1 to 730 days. A spoken “it passed” is not enough. Otherwise she offers a patch-test visit or takes a message.
- She will not book a closed day or a time outside opening hours. Out-of-hours text replies stay off until you switch them on.
- Complaints and medical questions are handed to the team. She will not diagnose, admit liability, or promise a refund.
- Transfer stays off until you switch it on. Even then she transfers only when a separate number exists, the business is open, and the caller says yes. Otherwise she takes a message. An owner can take the live call from the desk.
FAQ
What do I actually pay?
Small business is £99/month. £169/month does not include Ara, AI receptionist. Enterprise is from £169 per site. Ara, AI receptionist is from £299/month, 600 minutes included, then £0.30/min. There is no install fee. If you take card payments through OpenSassy, a payment-processing fee of 2.5% (30p minimum) per transaction applies. We take no cut of your bookings.
What are the limits?
Sassy’s chat is a fair-use AI allowance, shown in your dashboard. We do not promise a number of conversations. Ara includes 600 answered minutes each calendar month, then £0.30/min, recorded on your billing page and billed at that rate when billing starts. The monthly safety ceiling defaults to 2,000 answered minutes; after that she takes a message instead of a live call. Ara can take several calls at once (each voice server takes up to 10 per business); she does not answer every call. On each voice server, one number is limited to 8 calls an hour, and one call to 20 minutes.
Can I cancel, and do I get a refund?
Cancel from Billing, which opens the Stripe billing portal. Access continues to the end of the billing period. If you are not satisfied within 30 days of your first paid charge, contact us for a full refund. That refund is not an automatic button in the app.
Do you sell my data, and how do I delete it?
We do not sell your personal data. The app and database are hosted on Google Cloud europe-west1 (Belgium), and the database project is in the EEA. AI, maps, messaging and payment providers may process data elsewhere under their own terms. Delete a business account in the app (Account → Delete account, or More → Account → Delete business account on mobile) or follow https://the-sassy.com/account-deletion. A client can erase their own record, including what Ara remembers, from the GDPR tools in the app.
What will Ara do, and what will she refuse?
She says she is an AI in her first sentence. She reads the real diary and puts in a booking request the team confirms. She does not say the time is confirmed unless the booking tool says so. She will not take a card number, will not read out another client’s bookings, and will not book a closed day or a time outside opening hours. Colour by phone needs a recorded passed patch test at least 48 hours before the appointment, valid 183 days unless that salon sets another window from 1 to 730 days; otherwise she offers a patch-test visit or takes a message. Complaints and medical questions are handed to the team: she does not diagnose, admit fault, or promise a refund. Transfer stays off until you switch it on, and even then only if a separate number exists and the business is open.
Can I hire Ara without OpenSassy?
Ara on her own only if your existing software lets her into the diary and CRM. Otherwise she is sold with OpenSassy as the diary and CRM. The apply form still offers a Google Calendar you already own, under that same condition. This page does not decide whether a Google Calendar by itself is software that lets her into the diary and CRM.
Questions? security@the-sassy.com · OpenSassy is built by ANDUMA Intelligence Group Ltd, UK.