Privacy Policy
Last updated: October 2026
What Sage does
Sage Hong Kong builds and operates done-for-you AI agents for salons, spas and wellness studios in Hong Kong. Your Sage agent answers customer enquiries, books appointments, and follows up leads on WhatsApp, Instagram, and your website, in English and Cantonese, 24 hours a day.
Data we collect from Clients (business owners)
When you sign up for Sage, we collect your business name, contact details, services and pricing, booking setup, working hours, locations, cancellation policy, and sample messages. We use this information to train and configure your agent so it responds in your voice and according to your business rules.
Data we collect from End Customers
Your agent processes messages from your customers, including their names, contact numbers, enquiry content, and booking details. This data is used solely to answer their questions, manage bookings, and provide you with a record of the conversation. We do not use your customers' data to train any shared or general-purpose AI model.
Controller and processor roles
You are the data controller for your customers' personal data. Sage is your data processor. We process customer data only on your behalf and under your instructions, as set out in your agent's configuration. You remain responsible for ensuring you have a lawful basis to collect and use your customers' data under the Hong Kong Personal Data (Privacy) Ordinance (PDPO).
We never train shared models on your data
Your business data and customer conversations are never used to train any shared, public, or third-party AI model. Each agent is trained exclusively on the material you provide and operates within your isolated environment.
AI disclosure and human handoff
When a customer asks whether they are speaking with an AI, your agent identifies itself as an automated assistant. You can take over any conversation at any time. Conversations flagged for attention — complaints, sensitive topics, or anything outside the agent's trained scope — are escalated to you for a human response.
Sub-processors
Sage uses trusted third-party service providers to deliver the service, including cloud hosting, messaging infrastructure (WhatsApp Business API), and AI model providers. All sub-processors are bound by data protection agreements and process data only as necessary to provide the Sage service. A current list of sub-processors is available on request.
Website analytics
This website uses analytics tools to understand how visitors use the site and improve the experience. We use website analytics including the Meta Pixel and Conversions API to measure the effectiveness of our marketing. These tools may collect device information, page views, and conversion events. You can manage cookie preferences through your browser settings.
Data storage and security
All data is stored with encryption in transit and at rest. Access to your data is restricted to authorised Sage personnel and is logged. We do not sell or share your data with any third party for marketing purposes.
Data retention after cancellation
If you cancel your Sage subscription, we retain your data for 30 days to allow for wind-down and export of your records. After 30 days, all your business data and customer conversations are permanently deleted from our systems, unless we are legally required to retain them.
Your rights under the PDPO
Under the Hong Kong Personal Data (Privacy) Ordinance, you have the right to request access to and correction of your personal data held by Sage. You may also request that we cease using your personal data for marketing. To exercise these rights, contact us at sagehkassistant@gmail.com.
Questions about your privacy? Email sagehkassistant@gmail.com.