◆ The CRM for medical spasLive in two to four weeks

Run your medspa
from one platform.

The all-in-one med spa CRM: booking, charts, consent, payments, AI SMS agent, email and SMS marketing — and a full reporting suite. HIPAA-compliant. BAA included. Implementation in two to four weeks.

Get a demo See pricing →

A 30-minute walkthrough on your real services. One business day to a calendar invite.

BAA in every contractHIPAA isn't an upgrade tier.
Integrated paymentsCard, cash, and check inside the appointment flow.
Built for medspasNot a salon platform with extras bolted on.

acmespa.getlumecrm.com/calendar

Thursday, May 15· ManhattanToday+ New appointment

Sarah

RN · Injectables

Jamie

Esthetician

Marco

Laser tech

Priya

NP · Consults

9 am

Botox 30u

L. Davis · consent signed

Laser · full legs

P. Rao

10 am

HydraFacial

S. Kim

Consult

New client

11 am

Filler 1ml

M. Tran

Microneedling

A. Lee · form pending

Daily close-out

$4,812.40

Card$3,940.00Cash$612.40Check$260.00

MATCHES THE DRAWER

Consent flagged

A. Lee · Microneedling

Unsigned form · before check-in

Booking◆Client charts◆Consent forms◆Payments◆Full reporting suite◆Multi-location◆AI SMS agent◆Email + SMS campaigns◆HIPAA-compliant◆Audit logging◆Payments included◆

The platform

Seven capabilities, every one for medspas.

Not a salon tool with the word ‘aesthetics’ pasted on top.

01Booking 02Client charts 03Consent forms 04Payments 05Reports 06Multi-location 07Marketing

ALL FEATURES →

01 / BOOKING

A calendar that knows who works where.

Each provider gets their own column. Drag to reschedule. Click to take payment. Unsigned consent is flagged before the client walks in.

· Per-provider, per-location columns· Drag-to-reschedule with conflict detection· Online booking with deposit-on-book· Automated SMS + email reminders

◆ /calendar · thu may 15 · manhattan3 PROVIDERS

Botox 30u

9:00 · L. Davis
Consent signed

HydraFacial

10:00 · S. Kim
Deposit paid

Microneedling

11:00 · A. Lee
Form pending

Learn more

02 / CLIENT CHARTS

The whole client, on one page.

Treatment history, allergies, signed consents, outstanding paperwork, invoice history, provider notes. Two clicks from the calendar. The same record across every location.

· Searchable across all locations· Treatment history with outcome tracking· Provider-only notes thread· Pending forms surfaced where needed

SCSarah ChenClient since Mar 2024 · 12 visitsACTIVE

PHONE

(555) 234-1180

DATE OF BIRTH

Jan 14, 1989

ALLERGIES

Penicillin

PENDING FORMS

Botox consent

Learn more

03 / CONSENT FORMS

Consent forms that survive an audit.

Intake signs once. Per-treatment consent signs every visit. One tokenized link. Every signature captures IP and user-agent. The template is snapshotted at signing, so next month's edits never rewrite last month's record.

· Version-snapshotted at signing· Tokenized fill links (no login required)· Auto-assigned per service or per visit· Audit trail with IP, user-agent, timestamp

◆ /sign/9j4k… · tokenized link

Botox & Neurotoxin Consent

Version 4 · For: Sarah Chen

✓I am not pregnant or nursing.✓I have not received Botox in the last 90 days.✓I understand the risks: bruising, headache, asymmetry.○I consent to before / after photography.

SIGNATURE ─────────────────

Audit entry

FORM_SIGNEDconsent:botox-v4:c-4218IP 203.0.113.51UA Safari/iOS 18.2TS 2026-05-15T14:18:51Z

Append-only. UPDATE and DELETE rejected at the database.

Learn more

04 / PAYMENTS

Invoicing and integrated payments in one flow.

Card, cash, and check go in with a payment reference. Card processing runs through our licensed payment partner inside the appointment flow — no separate terminal to reconcile against. Daily close-out splits totals by method. Sixty-day reopen window.

· Owner-only 60-day reopen window· Per-payment-method daily close-out· Tax handled per service line item· Integrated card processing through a licensed partner

Invoice INV-2026-0214 · L. Davis · 11:40 AMOPEN

Botox 30u × 1$540.00HydraFacial add-on × 1$180.00Tax (8.875%)$63.90

Total$783.90

TAKE PAYMENTVOID

Learn more

05 / REPORTS

The reports your accountant keeps asking for.

Daily close-out, AR aging, revenue by service or provider or location, no-show rate, top spenders, booking lead time — and more. Live data. Every CSV export is audit-logged.

· Financial, staff, guest, and operations reports· Live data, no nightly refresh delay· CSV export with PHI confirmation· Audit-logged on every run

GROSS · 30D

$48.6k

TAX

$4.31k

AVG INVOICE

$483

Sales by date range · Apr 16 → May 15CSV ↓

Learn more

06 / MULTI-LOCATION

Open a second location without re-onboarding.

Each site gets its own calendar, staff schedule, and reporting filter. An org-level dashboard shows every location alongside cross-location revenue. The location switcher only appears for staff who span more than one.

· Per-location calendars + staff schedules· Org-level locations dashboard· Per-location revenue + reporting filters· Single sign-on across sites

◆ /org/dashboard · all locations3 SITES · LAST 30 DAYS

MManhattan

$28.4k+12%

Flagship · 8 providers

BBrooklyn

$14.1k+4%

5 providers

HYHudson Yards

$6.1k+38%

Opened Mar · 3 providers

Learn more

07 / MARKETING

Campaigns that run on live data, not spreadsheet exports.

Automated email and SMS campaigns against real CRM segments. Re-engagement at 90 days, treatment-cycle reminders, birthday offers, membership renewal nudges. Audiences update as clients book — no stale lists.

· Email + SMS in one campaign builder· Automated triggers: lapsed, cycle reminder, birthday· Segments update in real time· Separate marketing vs. transactional consent tracking

CampaignTypeStatusSentOpen

90-day lapsed clientsEmailActive24831%

Botox 12-week reminderSMSActive9448%

Birthday month offerEmailActive3127%

Package balance nudgeSMSDraft——

Segments update in real time as clients book

Learn more

Why Lumè

Three things other platforms get wrong.

Each is a deliberate choice baked into how Lumè is built, not a roadmap promise.

01
Built for medspas, not adapted.
Mindbody for salons. Boulevard for high-end salons. Zenoti for spa chains. None of them built around treatment-cycle scheduling, per-procedure consent, multi-provider rooms, or a close-out that matches the drawer.
02
HIPAA isn't a pricing tier.
Every customer runs on the same compliant architecture. Tenant data isolated at the database. Audit log on every PHI read. AWS under a signed BAA, included in your standard contract.
03
Pricing without the games.
Flat per workspace, not per seat. Clinical notes, packages, memberships, and consent forms ship in Starter, the entry tier — never gated to a higher tier. Add staff or locations one click at a time. No annual lock-in. No paywall on data export. No setup fee.

Security & compliance

HIPAA-compliant by architecture, not by checkbox.

Tenant data isolated at the database layer. Permissions resolved per request from a thirty-six-permission catalog. Audit log entries on every PHI read and every state change. AWS infrastructure under a signed BAA. BAA included in every contract, at every tier.

READ THE SECURITY OVERVIEW →

◆ /audit?range=last_60_minLIVE

TimeActorActionResource

14:22:09sarah.kimPHI_READcustomer:c-4218

14:18:51marco.diazFORM_SIGNEDconsent:botox-v3

14:11:33sarah.kimINVOICE_CLOSEDinv-9824 · $612.00

14:05:02systemREPORT_EXPORTphi_confirmed=true

13:47:18owner.leePERMISSION_GRANTrole:bookkeeper

APPEND-ONLY · UPDATE AND DELETE REJECTED

From the Journal

Guides for running a modern medspa.

Honest, in-depth pieces on choosing software, HIPAA, memberships, marketing, and reducing no-shows.

ALL ARTICLES →

Software selection

ALL ARTICLES →

Thirty-minute demo

See exactly how Lumè fits your spa.

A focused 30-minute walkthrough of the platform, tailored to how your spa runs. The first call is the demo.

Get a demoOne business day to a calendar invite.

Run your medspa
from one platform.

Seven capabilities, every one for medspas.

A calendar that knows who works where.

The whole client, on one page.

Consent forms that survive an audit.

Invoicing and integrated payments in one flow.

The reports your accountant keeps asking for.

Open a second location without re-onboarding.

Campaigns that run on live data, not spreadsheet exports.

Three things other platforms get wrong.

Built for medspas, not adapted.

HIPAA isn't a pricing tier.

Pricing without the games.

HIPAA-compliant by architecture, not by checkbox.

Guides for running a modern medspa.

AesthetixCRM Alternatives: The Questions the Top-10 Lists Won't Ask

Your Medspa's Payment Processor Isn't the Problem. Where It Lives Is.

Your Medspa Doesn't Bill Insurance. HIPAA May Still Apply.

See exactly how Lumè fits your spa.

Run your medspafrom one platform.

Seven capabilities, every one for medspas.

A calendar that knows who works where.

The whole client, on one page.

Consent forms that survive an audit.

Invoicing and integrated payments in one flow.

The reports your accountant keeps asking for.

Open a second location without re-onboarding.

Campaigns that run on live data, not spreadsheet exports.

Three things other platforms get wrong.

Built for medspas, not adapted.

HIPAA isn't a pricing tier.

Pricing without the games.

HIPAA-compliant by architecture, not by checkbox.

Guides for running a modern medspa.

AesthetixCRM Alternatives: The Questions the Top-10 Lists Won't Ask

Your Medspa's Payment Processor Isn't the Problem. Where It Lives Is.

Your Medspa Doesn't Bill Insurance. HIPAA May Still Apply.

See exactly how Lumè fits your spa.

Run your medspa
from one platform.