◆ The CRM for medical spasLive in two to four weeks

Run your medspa
from one platform.

The all-in-one med spa CRM: booking, charts, consent, payments, AI SMS agent, email and SMS marketing — and a full reporting suite. HIPAA-compliant. BAA included. Implementation in two to four weeks.

Start on the Starter plan — free for 30 days. No charge until day 31. Cancel anytime.

  • BAA in every contractHIPAA isn't an upgrade tier.
  • Integrated paymentsCard, cash, and check inside the appointment flow.
  • Built for medspasNot a salon platform with extras bolted on.
acmespa.getlumecrm.com/calendar
Thursday, May 15· ManhattanToday+ New appointment
Sarah
RN · Injectables
Jamie
Esthetician
Marco
Laser tech
Priya
NP · Consults
9 am
Botox 30u
L. Davis · consent signed
Laser · full legs
P. Rao
10 am
HydraFacial
S. Kim
Consult
New client
11 am
Filler 1ml
M. Tran
Microneedling
A. Lee · form pending
BookingClient chartsConsent formsPaymentsFull reporting suiteMulti-locationAI SMS agentEmail + SMS campaignsHIPAA-compliantAudit loggingPayments included
BookingClient chartsConsent formsPaymentsFull reporting suiteMulti-locationAI SMS agentEmail + SMS campaignsHIPAA-compliantAudit loggingPayments included
The platform

Seven capabilities, every one for medspas.

Not a salon tool with the word ‘aesthetics’ pasted on top.

01 / BOOKING

A calendar that knows who works where.

Each provider gets their own column. Drag to reschedule. Click to take payment. Unsigned consent is flagged before the client walks in.

· Per-provider, per-location columns· Drag-to-reschedule with conflict detection· Online booking with deposit-on-book· Automated SMS + email reminders
◆ /calendar · thu may 15 · manhattan3 PROVIDERS
Botox 30u
9:00 · L. Davis
Consent signed
HydraFacial
10:00 · S. Kim
Deposit paid
Microneedling
11:00 · A. Lee
Form pending
Learn more
02 / CLIENT CHARTS

The whole client, on one page.

Treatment history, allergies, signed consents, outstanding paperwork, invoice history, provider notes. Two clicks from the calendar. The same record across every location.

· Searchable across all locations· Treatment history with outcome tracking· Provider-only notes thread· Pending forms surfaced where needed
SCSarah ChenClient since Mar 2024 · 12 visitsACTIVE
PHONE
(555) 234-1180
DATE OF BIRTH
Jan 14, 1989
ALLERGIES
Penicillin
PENDING FORMS
Botox consent
Learn more
03 / CONSENT FORMS

Consent forms that survive an audit.

Intake signs once. Per-treatment consent signs every visit. One tokenized link. Every signature captures IP and user-agent. The template is snapshotted at signing, so next month's edits never rewrite last month's record.

· Version-snapshotted at signing· Tokenized fill links (no login required)· Auto-assigned per service or per visit· Audit trail with IP, user-agent, timestamp
◆ /sign/9j4k… · tokenized link
Botox & Neurotoxin Consent
Version 4 · For: Sarah Chen
I am not pregnant or nursing.I have not received Botox in the last 90 days.I understand the risks: bruising, headache, asymmetry.I consent to before / after photography.
SIGNATURE ─────────────────
Audit entry
FORM_SIGNEDconsent:botox-v4:c-4218IP 203.0.113.51UA Safari/iOS 18.2TS 2026-05-15T14:18:51Z
Append-only. UPDATE and DELETE rejected at the database.
Learn more
04 / PAYMENTS

Invoicing and integrated payments in one flow.

Card, cash, and check go in with a payment reference. Card processing runs through our licensed payment partner inside the appointment flow — no separate terminal to reconcile against. Daily close-out splits totals by method. Sixty-day reopen window.

· Owner-only 60-day reopen window· Per-payment-method daily close-out· Tax handled per service line item· Integrated card processing through a licensed partner
Invoice INV-2026-0214 · L. Davis · 11:40 AMOPEN
Botox 30u × 1$540.00HydraFacial add-on × 1$180.00Tax (8.875%)$63.90
Total$783.90
TAKE PAYMENTVOID
Learn more
05 / REPORTS

The reports your accountant keeps asking for.

Daily close-out, AR aging, revenue by service or provider or location, no-show rate, top spenders, booking lead time — and more. Live data. Every CSV export is audit-logged.

· Financial, staff, guest, and operations reports· Live data, no nightly refresh delay· CSV export with PHI confirmation· Audit-logged on every run
GROSS · 30D
$48.6k
TAX
$4.31k
AVG INVOICE
$483
Sales by date range · Apr 16 → May 15CSV ↓
Learn more
06 / MULTI-LOCATION

Open a second location without re-onboarding.

Each site gets its own calendar, staff schedule, and reporting filter. An org-level dashboard shows every location alongside cross-location revenue. The location switcher only appears for staff who span more than one.

· Per-location calendars + staff schedules· Org-level locations dashboard· Per-location revenue + reporting filters· Single sign-on across sites
◆ /org/dashboard · all locations3 SITES · LAST 30 DAYS
MManhattan
$28.4k+12%
Flagship · 8 providers
BBrooklyn
$14.1k+4%
5 providers
HYHudson Yards
$6.1k+38%
Opened Mar · 3 providers
Learn more
07 / MARKETING

Campaigns that run on live data, not spreadsheet exports.

Automated email and SMS campaigns against real CRM segments. Re-engagement at 90 days, treatment-cycle reminders, birthday offers, membership renewal nudges. Audiences update as clients book — no stale lists.

· Email + SMS in one campaign builder· Automated triggers: lapsed, cycle reminder, birthday· Segments update in real time· Separate marketing vs. transactional consent tracking
CampaignTypeStatusSentOpen
90-day lapsed clientsEmailActive24831%
Botox 12-week reminderSMSActive9448%
Birthday month offerEmailActive3127%
Package balance nudgeSMSDraft
Segments update in real time as clients book
Learn more
Why Lumè

Three things other platforms get wrong.

Each is a deliberate choice baked into how Lumè is built, not a roadmap promise.

  1. 01

    Built for medspas, not adapted.

    Mindbody for salons. Boulevard for high-end salons. Zenoti for spa chains. None of them built around treatment-cycle scheduling, per-procedure consent, multi-provider rooms, or a close-out that matches the drawer.

  2. 02

    HIPAA isn't a pricing tier.

    Every customer runs on the same compliant architecture. Tenant data isolated at the database. Audit log on every PHI read. AWS under a signed BAA, included in your standard contract.

  3. 03

    Pricing without the games.

    Flat per workspace, not per seat. Clinical notes, packages, memberships, and consent forms ship in the $99 Starter — never gated to a higher tier. Add staff or locations one click + $20 at a time. No annual lock-in. No paywall on data export. No setup fee.

Security & compliance

HIPAA-compliant by architecture, not by checkbox.

Tenant data isolated at the database layer. Permissions resolved per request from a thirty-six-permission catalog. Audit log entries on every PHI read and every state change. AWS infrastructure under a signed BAA. BAA included in every contract, at every tier.

READ THE SECURITY OVERVIEW →
◆ /audit?range=last_60_minLIVE
TimeActorActionResource
14:22:09sarah.kimPHI_READcustomer:c-4218
14:18:51marco.diazFORM_SIGNEDconsent:botox-v3
14:11:33sarah.kimINVOICE_CLOSEDinv-9824 · $612.00
14:05:02systemREPORT_EXPORTphi_confirmed=true
13:47:18owner.leePERMISSION_GRANTrole:bookkeeper
APPEND-ONLY · UPDATE AND DELETE REJECTED
Thirty-minute demo

See exactly how Lumè fits your spa.

A focused 30-minute walkthrough of the platform, tailored to how your spa runs. The first call is the demo.

Get a demoOne business day to a calendar invite.