Privacy Policy
Mobile Massage Manager is software that massage practices use to run their business. If you are a client of a massage practice, that practice decides what it collects about you and how it uses it. You can ask the practice directly, or contact us and we will help.
- Who we are
- What we collect
- How we use it
- Google user data
- Who we share with
- Text messages
- Cookies
- Retention
- Security
- Your choices
- Contact
Who we are
Mobile Massage Manager ("MMM", "we", "us") is operated by CMGF Enterprises, LLC, 1696 Wehutty, Murphy, NC 28906, United States. This policy covers this website (mobilemassagemanager.com), the Mobile Massage Manager web app, including each practice's own address for it, the booking forms practices place on their websites, and the AI Assistant that answers calls and chats for practices.
There are two kinds of people whose information we handle:
- Practices and their staff (owners, managers and therapists) who have an account. For their account information, we decide how it is used.
- Clients of a practice, who book, receive treatment, pay, or contact a practice. For this information we act on the practice's behalf and follow its instructions. The practice is responsible for its own notices to its clients and for any consent it needs.
What we collect
From practices and staff
- Name, email address, mobile number, username and password (stored only as a one-way hash), role, photo, and professional details such as license number, license state and NPI if entered.
- Business details: business names, addresses, service areas, services, prices, hours, booking rules and message templates.
- Work schedules, time off, and appointment and pay records.
- If a practice connects its own mailbox, the mailbox settings and password, stored encrypted, so MMM can send and read that practice's email for it.
- If a staff member connects Google Calendar, the data described under Google user data.
- Payout account status from Stripe. We do not receive or store full bank account or card numbers.
From clients of a practice
- Contact details: name, phone, email, and the service address where the visit takes place, with its map location.
- Appointment history, services, notes, payments, tips, gift cards and series.
- Health and treatment information the practice collects, such as intake form answers (health conditions, medications, areas of concern marked on a body diagram), signatures on forms and waivers, and treatment (SOAP) notes written by the therapist.
- Reviews and survey answers the client chooses to give.
- Conversations with the AI Assistant: chat text, and for calls the audio and a transcript, along with the phone number or browser session used.
- Payment details are entered directly into Stripe's secure forms. We receive the result, the amount, the card brand and its last four digits, and a reference if the client chooses to save a card with Stripe.
Automatically
- Basic technical data when you use the app or booking forms: IP address, browser type, pages requested and times, kept in server logs for security and troubleshooting.
- A sign-in cookie for staff (see Cookies). This website itself sets no cookies and uses no analytics or advertising trackers.
How we use information
- To provide the service: scheduling, travel-time planning, online booking, the AI Assistant, checkout, therapist pay, reminders, forms, reviews and reports.
- To send the messages a practice has set up, such as booking confirmations, reminders, payment links, review requests and surveys, and notices to staff.
- To keep the service secure, prevent abuse and fraud, and fix problems.
- To support practices when they ask for help.
- To meet legal obligations.
We do not sell personal information, and we do not use client information or health information for advertising. We do not use clients' information to train AI models.
Google user data
Staff can choose to connect their own Google Calendar. When they do, Google asks them to allow MMM to see and edit events in their calendars. With that permission MMM:
- reads the start and end times of events in the connected calendar so that busy times block that person's schedule in MMM (event titles and details are not stored);
- adds, updates and removes that person's own MMM appointments in their calendar;
- stores the Google account's email address and an access token, encrypted, to keep the sync running.
Google user data is used only to provide this calendar sync for the person who connected it. It is not used for advertising, not sold, not shared with other users or third parties except as needed to provide the sync or required by law, and not read by people except with that person's permission, for security purposes, or to comply with law. Disconnecting Google Calendar in MMM removes MMM's appointments from the calendar and stops access; you can also remove access at any time from your Google Account's security settings.
Mobile Massage Manager's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Who we share information with
We share information only with the service providers that run parts of the service for us, under contracts that limit their use of it, and only what each one needs:
| Stripe | Card payments, saved cards, gift card and series sales, and payouts to practices and therapists. |
|---|---|
| ClickSend | Sending text messages. |
| Retell AI | Running the AI Assistant's calls and chats, including speech recognition, the language model that writes its replies, and call recordings and transcripts. |
| Calendar sync for staff who connect it, address search and maps, and reCAPTCHA spam protection on booking and chat forms. | |
| U.S. Census Bureau geocoder | Turning a service address into a map location (the address only). |
| The practice's email provider | Email is sent through the mailbox the practice connects. |
We may also disclose information if required by law or to protect the rights, safety and property of our users or others, and to a successor if the business is sold or merged, under terms at least as protective as these. Information about a practice's clients is never shared with another practice.
Text messages
Practices use MMM to text their clients and staff about appointments. Mobile numbers and text messaging consent are not shared with third parties or affiliates for their marketing purposes. See our Text Messaging Terms for how to stop messages and get help.
Cookies
The MMM app uses one essential cookie to keep staff signed in. It is not used for tracking or advertising. Practices' booking forms and the AI Assistant may use Google reCAPTCHA, which sets its own cookies to tell people from bots. This website sets no cookies.
How long we keep information
We keep information for as long as the practice's account is active, because practices need complete appointment, payment and treatment records. Practices can deactivate staff and archive records at any time. When a practice closes its account, we delete or anonymize its data within 90 days of a written request, except where we must keep records longer to meet legal, tax or payment-network requirements, or to resolve disputes. Server logs are kept for a limited period for security.
Security
Information is sent over encrypted connections (HTTPS). Passwords are stored as one-way hashes, and connected mailbox passwords and calendar tokens are encrypted. Access is limited by role: therapists work with their own schedule and appointments, and each practice's managers see their own practice only. Card details are handled by Stripe and never touch our servers. No system is perfectly secure, and we will notify affected practices without undue delay if a breach affects their data.
Your choices and rights
- Clients of a practice can ask the practice to see, correct or delete their information. If you contact us instead, we will pass your request to the practice and help it respond. Some records, such as treatment notes and payments, may need to be kept for legal reasons.
- Staff can update their profile in the app and ask their practice or us about their information.
- Depending on where you live, you may have additional rights, such as the right to know, access, correct or delete personal information and to not be discriminated against for using these rights. We honor these requests as required by law. We do not sell or share personal information for targeted advertising.
Children
MMM is a business tool and is not directed to children under 13. We do not knowingly collect information directly from children. A practice that treats a minor is responsible for getting a parent's or guardian's consent.
Health information
Practices decide what health and treatment information to record. Practices with obligations under health privacy laws, such as HIPAA, are responsible for deciding whether MMM meets their needs before storing that information in it.
Changes to this policy
We will post any changes here and update the date at the top. If a change is significant, we will also tell practices by email or in the app before it takes effect.
Contact
CMGF Enterprises, LLC
1696 Wehutty, Murphy, NC 28906
Contact form · Phone (727) 279-5435