Privacy Policy

Tepali (“Tepali”, “we”, “us”) provides an AI EMR and practice management platform for aesthetic and wellness practices (each a “Practice”). Tepali is a product of Lotus Artificial Intelligence Corporation, a Delaware corporation. This policy explains what information we collect and how we use it. It applies to our websites, applications, and related services (the “Service”).

Information we collect

Account information — business and staff details a Practice provides when signing up, such as names, email addresses, and phone numbers.

Client information processed for Practices — contact details, appointment and purchase history, communications, and related records that Practices manage through the Service. This information belongs to the Practice; we process it on the Practice’s behalf.

Payment information — payments are handled by our payment processor; card details are not stored by Tepali.

Newsletter sign-ups — if you join our newsletter on our website, we store the email address you enter and use it only to send you Tepali updates. Every message includes a way to unsubscribe.

Usage information — standard log and device data used to operate and secure the Service.

Cookies and analytics — our marketing website uses cookies and similar technologies, including the Meta Pixel and site analytics, to measure visits and the performance of our ads. Meta may use this information as described in its own privacy policy. You can limit it through your browser settings and your Meta ad preferences.

Information from Meta Platforms (Facebook and Instagram)

A Practice can connect its Facebook Page and linked Instagram professional account to Tepali. With the Practice’s permission, granted through Facebook Login, we access:

• the list of Facebook Pages the Practice manages, and basic Page details;
• lead submissions from the Practice’s Facebook and Instagram lead ads;
• the Practice’s linked Instagram business account details; and
• Instagram messages sent to the Practice’s account.

We use this information solely to provide the Service to the connected Practice. We do not sell data received from Meta, we do not use it for advertising, and we do not share it with third parties except the service providers described below. Our use of Meta Platform data complies with the Meta Platform Terms and Developer Policies. To have this data deleted, see Data Deletion.

Information from Google (Gmail)

A Practice can connect a Gmail mailbox to Tepali. With the Practice’s permission, granted through Google sign-in, we read, send, and organize email in that mailbox so its messages appear in the Practice’s Tepali inbox, replies written in Tepali are sent from it, and our AI can draft replies for staff to review. Tepali’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Gmail data, use it for advertising, or use it to train generalized AI models, and our staff do not read it except with the Practice’s permission, for security, or as required by law. A Practice can disconnect its mailbox at any time under Integrations.

How we use information

To provide, maintain, secure, and improve the Service; to route leads, messages, and bookings to the right Practice; to process payments; and to comply with legal obligations.

How we share information

We do not sell personal information. We share it only with service providers that help us run the Service (such as cloud hosting, payments, messaging, and AI processing), with the Practice the information concerns, and where required by law. Our AI providers process data only to deliver the Service and may not use it to train their models.

Text messaging (SMS)

Tepali sends text messages in two situations, and consent is never a condition of purchasing any product or service.

Practice staff. Staff sign in to Tepali by entering their phone number on the login screen, which is their consent to receive a one-time login passcode by SMS. Staff who sign in with an email address receive the passcode by email instead. We may also send staff occasional transactional messages about their account or the Service.

Clients of a Practice. A Practice that uses Tepali may text its clients about their own appointments and care: booking confirmations, reminders, follow-up instructions, replies to a client’s own messages, and, only where a client has separately opted in, occasional promotional offers from that Practice. A client opts in by checking the optional consent box when booking online, by asking the Practice in person or by phone, or by texting the Practice’s number first. The consent box on our booking pages is unchecked by default. Messages are sent from a phone number assigned to that Practice and identify the Practice by name.

Message frequency varies. Message and data rates may apply. Reply STOP to any message to opt out at any time; you will receive one confirmation text and nothing further. Reply HELP for help, email founders@tepali.com, or call (855) 552-6751. Carriers are not liable for delayed or undelivered messages. Full program terms are in our Terms of Service.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except as necessary to deliver the messages through our SMS service providers. Information shared with those providers is used only to send the messages you agreed to receive.

Retention and security

We keep information as long as needed to provide the Service and meet legal obligations, and protect it with industry-standard safeguards.

Your choices

To request access to, correction of, or deletion of your personal information, email founders@tepali.com. If your information is held for a Practice, for example as one of its clients, we will forward your request to that Practice, which decides how to respond. Deletion instructions, including for data received from Facebook or Instagram, are at tepali.com/data-deletion.

Changes and contact

We may update this policy from time to time; the current version will always be posted on this page. The Service is operated by Lotus Artificial Intelligence Corporation. Questions: founders@tepali.com or 855-552-6751.