Privacy Policy
Last updated July 23, 2026
Tepali (“Tepali”, “we”, “us”) provides an operating platform for medical spas and aesthetic practices (each a “Practice”). This policy explains what information we collect and how we use it. It applies to our websites, applications, and related services (the “Service”).
Information we collect
Account information — business and staff details a Practice provides when signing up, such as names, email addresses, and phone numbers.
Client information processed for Practices — contact details, appointment and purchase history, communications, and related records that Practices manage through the Service. This information belongs to the Practice; we process it on the Practice’s behalf.
Payment information — payments are handled by our payment processor; card details are not stored by Tepali.
Usage information — standard log and device data used to operate and secure the Service.
Information from Meta Platforms (Facebook and Instagram)
A Practice can connect its Facebook Page and linked Instagram professional account to Tepali. With the Practice’s permission, granted through Facebook Login, we access:
- the list of Facebook Pages the Practice manages, and basic Page details;
- lead submissions from the Practice’s Facebook and Instagram lead ads;
- the Practice’s linked Instagram business account details; and
- Instagram messages sent to the Practice’s account.
We use this information solely to provide the Service to the connected Practice. We do not sell data received from Meta, we do not use it for advertising, and we do not share it with third parties except the service providers described below. Our use of Meta Platform data complies with the Meta Platform Terms and Developer Policies. To have this data deleted, see Data Deletion.
How we use information
To provide, maintain, secure, and improve the Service; to route leads, messages, and bookings to the right Practice; to process payments; and to comply with legal obligations.
How we share information
We do not sell personal information. We share it only with service providers that help us run the Service (such as cloud hosting, payments, messaging, and AI processing), with the Practice the information concerns, and where required by law.
Text messaging (SMS)
Practice staff sign in to Tepali by entering their phone number on the login screen, which is their consent to receive a one-time login passcode by SMS. We may also send staff occasional transactional messages about their account or the Service. Message frequency varies and message and data rates may apply. Reply STOP to any message to opt out, or HELP for help; you can also contact founders@tepali.com.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties, except as necessary to deliver the messages through our SMS service providers.
Retention and security
We keep information as long as needed to provide the Service and meet legal obligations, and protect it with industry-standard safeguards.
Your choices
To request access to, correction of, or deletion of your personal information, email founders@tepali.com. Deletion instructions, including for data received from Facebook or Instagram, are at tepali.com/data-deletion.
Changes and contact
We may update this policy from time to time; the current version will always be posted on this page. Questions: founders@tepali.com.