Cucumber is operated by Swell & Stack Co. LLC, doing business as Swell & Stack Co., a Wyoming limited liability company ("we," "us," "Cucumber"). Registered address: 30 N Gould St, Ste R, Sheridan, WY 82801, USA. For anything privacy-related, email [email protected].
Cucumber is a tool your business (the spa or salon) uses to send retention messages to your own clients. For your account we are the data controller. For the client contact lists you upload and the messages you send, you are the controller and we are your processor — we handle that data on your instructions to run the service.
Your account. When you sign up we collect your name, business name, email, and (via Google sign-in) your basic Google profile. We use it to run your account and support you.
Your clients' contact data. To send follow-up and retention texts, you provide — or connect (e.g. via Mindbody) — your clients' names, phone numbers, and visit details. We store and process this only to deliver the messages you configure.
Messaging. Text messages are delivered through Twilio. We process message content, phone numbers, and delivery status. Twilio processes the same to send the SMS.
AI-assisted drafting. To help draft message copy, some text may be sent to a third-party AI provider (Groq) that generates suggestions. It processes the text to return a draft and does not use it to train its models under our arrangement.
Billing. Subscriptions are billed by Stripe. We never see or store your full card number — Stripe handles card data and passes us only your name, email, and plan.
Security & analytics. The service is served through Cloudflare and we use standard analytics (pages, approximate country/city from IP, device/browser). Server logs are kept briefly for security and debugging.
We don't sell your data or your clients' data, we don't run ad trackers, and we don't share information with anyone except the providers below, who process it only to run Cucumber.
Twilio (SMS), Stripe (payments), Google (sign-in), Mindbody (booking integration, if you connect it), Groq (AI drafting), Cloudflare (hosting/security), and our infrastructure host — each under its own privacy terms.
You are responsible for having the proper consent to text your clients and for complying with SMS/marketing laws (such as the U.S. TCPA and local equivalents). Every message includes a way to opt out, and we honor opt-outs.
Account and billing records: while your account is active and as long as tax/accounting law requires afterward. Client contact data and message history: for as long as your account is active; on request or account closure we delete or de-identify it.
To access, correct, export, or delete data we hold, email [email protected] and we'll handle it, usually within a few days. If one of your clients contacts us directly, we'll refer them to you as the controller and assist you. Depending on where you or your clients live (EU/UK GDPR, California CCPA), formal access and deletion rights may apply; we honor them.
Cucumber is a business tool and isn't directed at children under 13.
If this policy changes, the updated version is posted here with a new effective date.
Swell & Stack Co. LLC dba Swell & Stack Co.
30 N Gould St, Ste R, Sheridan, WY 82801, USA
[email protected]