Privacy notice

Who we are

FrontDesk is operated by Dovetailed Pte Ltd, a company registered in Singapore (UEN 202645349W). FrontDesk gives businesses a booking widget, a set of public pages that AI assistants can read, and a booking or request form.

Each business that uses FrontDesk sets it up and authorises it as its own booking surface. For bookings made with a business, that business is responsible for your data (in PDPA terms, the organisation). Dovetailed processes that data on the business's behalf, under its instructions, and does not use it for anything else.

For the details a business gives us when it signs up, and for this website, Dovetailed is responsible.

What each part collects

The public pages assistants read

/llms.txt, /ai/ and the availability pages hold the business's services, prices, locations and open start times. They hold no personal data: no names, no bookings, no counts, nothing about who holds a slot.

The widget on a business's website

• Your browser loads the widget from book.frontdesk.sg and fetches the business's public details, services and widget settings from there. These requests carry what any browser request carries (network address, browser type, the address of the page you are on) and no cookies. The widget runs no analytics.
• It remembers your own choices in your browser's local storage: a dismissed greeting or badge, and which assistant you chose last. Nothing else.
• A question you type in the Chat with AI panel is sent to the assistant you choose (for example ChatGPT or Claude), not to us. Nothing is sent to that assistant until you click.

The booking or request form

What the form asks for depends on the business. On a clinic's booking form this can include:

• full name, date of birth, gender and nationality;
• NRIC, FIN or passport number (optional where the clinic allows);
• mobile number and email address;
• the service, location, date and time chosen, and any add-ons;
• drug allergies, a message, and how you heard about the clinic.

On a hosted request form for other businesses: your name, contact details, the service and time you asked for, your message and your consent.

With each booking we also record whether you arrived through an AI link and the website you came from (for example chatgpt.com), as a web address only. This shows the business where its bookings come from.

Payments

FrontDesk takes no payments today. When paid bookings start, you will pay on the booking page through Stripe, into the business's own Stripe account. Card details will go straight to Stripe; we will never see or store them. We will keep the payment's status and reference with the booking.

A connected assistant (connector)

If you connect FrontDesk to Claude or ChatGPT, we keep a record of the connection and a log of each call the assistant makes: which tool, the outcome and details such as which location. The log never records your name, phone number, email address, NRIC or date of birth. Network addresses are stored only as keyed one-way hashes.

Health information

We read no medical record, result or report. A booking can still say something about you: the service you choose may be sensitive. It is stored in the business's booking record and seen by the staff who handle bookings, as for a booking made on the business's own website.

Prescription and age-restricted items will not be shown to assistants. The filter that enforces this is not built yet; until it is, our terms do not allow a business to list them for assistants to promote.

Who receives it

• The business you are booking with, and its staff who handle bookings.
• The business's booking system, for example its clinic system or calendar, when the booking is confirmed.
• Google Workspace (Gmail), which sends booking confirmations and request notices for us from frontdesk@dovetailed.sg.
• DigitalOcean, our hosting provider. FrontDesk runs on its servers in Singapore.
• Stripe, once paid bookings start: it will process your payment for the business.

We do not sell data and do not use it for advertising.

What AI assistants receive

Assistants receive only the public pages described above: no personal data. We do not receive your conversation with your assistant. That is covered by the assistant provider's own privacy terms. If we ever answer questions in the Chat with AI panel ourselves, this notice will say what is kept before that starts.

The notice shown in every Chat with AI panel:

Your AI assistant is not run by the business. It reads the clinic’s public booking pages and can give you a link to the booking form. Nothing is booked until you submit that form yourself, and the clinic confirms by email. It gives no medical advice. For health questions, contact the clinic.

How long we keep it

• Requests and bookings made on a FrontDesk form: kept in the business's request log while the business uses FrontDesk. Automatic deletion of the personal fields after 90 days is planned and not running yet. Until it is, you can ask the business, or us, to delete them.
• Bookings in the business's own system (its clinic system or calendar): kept by the business, under its own policy.
• Booking-form limits: daily counts per contact, stored only as a salted one-way hash of the contact.
• Unsubmitted booking links made by a connected assistant: expire after 48 hours.
• The connector's activity log: 24 months, then deleted.
• The connector's rate-limit counts: deleted within 24 hours.
• Web server access logs record the network address of each request for 14 days.
• Backups: the connector's records are backed up nightly, encrypted before they leave the server, and kept in Singapore for up to about 12 months. FrontDesk's own booking and request records are not backed up today.

Where it is held

On DigitalOcean servers in Singapore. Backups, where they exist, are encrypted and stay in Singapore.

Your choices and rights

Under Singapore's Personal Data Protection Act you can ask for access to your personal data, ask for it to be corrected, and withdraw consent. Withdrawing consent may mean a business cannot take your booking.

• About a booking: contact the business directly. They hold the record.
• About FrontDesk or this notice: frontdesk@dovetailed.sg. Our Data Protection Officer is Linus, Dovetailed Pte Ltd, frontdesk@dovetailed.sg.

We aim to reply within 30 days.

This website

frontdesk.sg sets no cookies and loads no analytics. Its only script is the menu button for small screens. If you email us, we use your message and address only to reply to you and to help you with FrontDesk.

Changes

If we change this notice, we update the date at the top.

Terms · Support