An AI phone agent for the med spa phone that rings during every treatment

A med spa's phone rings hardest when nobody can pick it up. Providers are in treatment rooms, the coordinator is checking a client out, and the caller — often a first-time prospect who found the spa an hour ago — reaches voicemail and calls the next spa on the list. The calls that do get answered pull staff between the desk and the schedule: consultation requests that need the right provider and room time, intake questions, package math, and price shoppers.

ThunderPhone gives an aesthetics practice an AI phone agent that works in both directions: inbound coverage for consultation requests, pricing questions, and reschedules, and outbound campaigns for the confirmations, waitlist calls, and rebooking outreach the team never has time to place. It works from the spa's own treatment menu, scripts, and policies, and it can search an approved knowledge base instead of improvising.

Two boundaries are the design. The agent never gives medical or aesthetic advice and never recommends a treatment — suitability is the provider's decision, made in consultation. And the screening questions it asks during intake are the provider's script: the agent collects answers for clinical review; it never assesses them.

What a med-spa agent can be configured to do

Every workflow below runs on spa-written instructions. The agent follows the script, collects the fields the practice requires, and escalates when a spa-defined trigger is met.

Consultation booking by treatment type

Aesthetic scheduling is not one calendar slot. Injectables, laser sessions, and skin treatments need different providers, rooms, and lengths — and many services start with a consultation rather than a treatment. The agent books from the spa's approved menu: it identifies the service category, applies the spa's rules for it — consultation first, which providers perform it, how much time to reserve — and checks availability and books through a connected calendar or booking-system API. A caller who asks for something off the menu, or asks which treatment would suit them, is routed to a consultation rather than answered with a guess.

New-client intake with the spa's screening questions

Most practices collect a health history before an appointment: medications, allergies, prior treatments, and the contraindication questions the medical director has written for each service category. The agent can run that intake by phone — reading the spa's questions exactly as written and recording answers verbatim into a structured record for clinical review. The questions are the provider's script, the answers go to the provider's team, and the agent draws no conclusions from them. If an answer matches something the practice has flagged, the agent follows the configured path — hold the booking as pending, route a task to staff, or transfer the call. It never tells a caller they are or are not a candidate for anything.

Pre-treatment instruction calls

Many aesthetic treatments come with preparation rules the spa has already written down — what to pause, what to avoid, when to arrive. An outbound campaign can call upcoming appointments, read the spa's written pre-treatment instructions for that service, confirm the client heard them, and capture questions for a human callback. A client who asks whether an instruction applies to their situation gets a callback from staff, not an interpretation.

Post-treatment check-in calls

A follow-up call a day or two after a treatment is a strong retention signal that busy spas often skip. The agent can place spa-scripted check-in calls: ask the practice's approved questions, repeat the written aftercare instructions on request, and offer to book the follow-up visit the provider recommended. Any answer on the practice's flag list routes to a human immediately by transfer or webhook task. The agent records answers; it never interprets them, and it never reassures a client that something they describe is normal.

Membership and package questions

Memberships and treatment packages smooth a med spa's revenue and generate a steady stream of administrative calls: what a membership includes, how many package sessions remain, how banked credits work, how to pause or cancel. The agent answers general questions from the spa's approved material and, where the booking or membership system exposes the lookup, retrieves account-specific details through a connected API. Anything the sources do not answer — a billing dispute, a cancellation the policy routes to a manager — becomes a transfer or a structured callback task instead of a guess.

Appointment confirmation and no-show reduction

Aesthetic appointments reserve a provider, a room, and often a device, so an unfilled slot is expensive. An outbound campaign can call ahead of scheduled visits, confirm attendance, restate the spa's cancellation policy as written, capture a reschedule on the spot instead of losing the slot to a no-show, and repeat the pre-treatment instructions for that service. Voicemail detection can leave a configured reminder or retry on the policy you set, and each outcome is delivered to your systems by webhook.

Waitlist and cancellation-fill outbound

When a client cancels a laser slot at 10 a.m., the revenue question is how fast it refills. The agent can work the waitlist the moment an opening appears: call clients who asked to be contacted for that service, offer the specific time, book the first acceptance, and stop calling once the slot is filled. An hour of coordinator phone tag runs as a campaign in minutes — on the spa's list, in the spa's wording.

Pricing questions from approved "from" pricing

"How much is it?" is one of the most common calls a med spa receives, and it is answerable without a consultation — carefully. The agent quotes only the spa's approved pricing material: published "from" prices, package and membership rates, and the practice's own wording about why final pricing depends on the treatment plan. It never estimates units or sessions and never constructs a personal quote — those numbers come from the provider, so the agent offers the consultation where they are set.

Lapsed-client rebooking outreach

Every practice has clients whose maintenance window has passed — the neurotoxin client last seen five months ago, the package with two unused sessions. An outbound campaign can work that list with spa-approved wording: a reminder in plain, non-clinical terms, current availability, and a booking on the same call, with opt-outs recorded and honored. The spa remains responsible for ensuring its outbound calling complies with applicable consent and telemarketing rules — the campaign runs on the list, consent records, and calling hours the practice provides.

Multilingual client communication

ThunderPhone supports 47 voice languages. Set a primary language and additional languages for the client base the spa serves, and the agent can switch mid-call when a caller changes to a configured language — the same booking rules, screening script, and escalation paths in every language, with a transcript for every call.

Sample med-spa call flow

Agent: Thank you for calling Solace Aesthetics. Are you calling to book, ask about a treatment, or something else?

Caller: I've never been in before. I'm interested in Botox, and maybe something for sun spots. What does Botox cost?

Agent: Happy to help. Our neurotoxin treatments start at $12 per unit; the exact plan and total are set with your provider at a consultation. New clients begin with a complimentary consultation, and sun-spot concerns are assessed there too so the provider can recommend the right option. Would you like to book one?

Caller: Sure. Could I also do the treatment the same day?

Agent: Sometimes, when the provider confirms it at your consultation — I'll note that you'd like to. I have Thursday at 2:00 p.m. or Friday at 10:30 a.m. with our nurse injector. Which works better?

Caller: Friday.

Agent: Friday at 10:30 a.m. it is. I'll now ask a few intake questions from our clinical team — I record your answers exactly as given, and your provider reviews them and makes all treatment decisions. First, may I have your full name and the best number to reach you?

If an intake answer matches something the practice has flagged, the agent follows the configured path — hold for provider review, route a task, or transfer. It never comments on the answer itself.

Platform capabilities behind the med-spa workflows

GDPR and HIPAA compliance posture — and the spa's configuration responsibility

ThunderPhone's public compliance posture is GDPR and HIPAA compliant. That posture does not make any particular spa workflow compliant by itself, and because a med spa collects client health information — medical histories, medications, treatment records — this responsibility deserves the most attention on this page. The practice decides and configures: which health information the agent may collect in each workflow and which it must not; whether calls are recorded and what notice callers receive; how long transcripts and recordings are retained; which integrations receive client health information and under what agreements; what the agent's disclosure script says; and who can access call data. Collect the minimum each workflow needs, attach only approved documents, and have whoever owns compliance at the practice review the prompt, recording settings, and data destinations before launch.

Knowledge grounded in the spa's documents

Attach the treatment menu, pricing sheets, pre- and post-care instructions, membership terms, and policies — text files up to 5 MB, PDF or DOCX up to 50 MB — or import pages from the spa's website by URL. The agent searches these approved sources mid-call instead of improvising, and can be instructed to route any question the sources do not cover.

Booking-system and calendar connections

Connected apps, HTTP APIs, and remote MCP servers let the agent act during a call — check availability, create or move an appointment, look up a package balance where the system exposes it. HMAC-signed webhooks deliver call events and structured records to the spa's systems with verifiable integrity, and are retried automatically. A web voice widget can put the same agent on the spa's website.

Your numbers, inbound and outbound

Bring the spa's existing numbers through a supported VoIP connection or manual SIP configuration; verified numbers handle inbound answering and outbound campaigns, so clients keep dialing the number they already know.

Human handoff

Cold transfers route a caller immediately. On eligible production numbers that can place an outbound leg, warm transfers let the agent privately brief the coordinator or provider before connecting the call — so an escalated client is never dropped into a cold queue.

Testing before clients hear it

Rehearse the risky calls before launch. Run AI-caller simulations — a caller pushing for a treatment recommendation, a flagged intake answer, a price shopper demanding a personal quote — with grading against your criteria. Keep the passing cases as a regression suite so a prompt edit never quietly weakens the screening script, and settle wording choices with A/B experiments on live traffic. Every production call leaves a transcript — and a recording when recording is enabled — that the practice can review.

What would this cost each month?

Suppose a med spa handles 1,000 AI-assisted calls per month, averaging 3 minutes each:

1,000 calls × 3 minutes = 3,000 minutes per month

Spark: 3,000 × $0.02 = $60/month
Bolt: 3,000 × $0.05 = $150/month
Storm: 3,000 × $0.09 = $270/month

That is base engine usage, not a quote. Premium voice or language paths can add up to 3¢ per minute, and phone-number or carrier charges depend on the telephony setup. Hold time bills a flat 2¢ per minute; voicemail and phone-menu minutes bill at the engine rate. Optional add-ons such as verbal acknowledgements, call supervision, and long prompts carry their own published surcharges. The agent builder shows the current all-in rate before calls are placed.

Guardrails a med spa should write into the agent

Each rule belongs in the prompt explicitly, with a simulation that proves it holds:

No medical or aesthetic advice, ever. The agent never recommends a treatment, compares options for a caller's situation, or comments on outcomes. "Which treatment is right for me?" is always answered with a consultation.
Screening is collection, not assessment. Intake and contraindication questions are the provider's script, read as written; answers are recorded verbatim for clinical review, and flagged answers follow the configured escalation path. The agent never tells a caller whether they are a candidate.
Approved pricing and menu only. Quote published "from" prices, package rates, and membership terms — never a personal estimate of units, sessions, or totals. Book only services on the spa's menu, under the spa's rules; off-menu requests route to a person.
Aftercare is read, not interpreted. Pre- and post-care instructions are the spa's written text. A concern about how a treatment is healing routes to staff immediately — the agent never reassures.
Consent governs outreach. Rebooking, waitlist, and reminder campaigns run only on lists and consent records the spa provides, with opt-outs honored and calling hours respected.
Disclosure and minimum necessary. The agent identifies itself as an automated assistant, delivers the spa's required notices, and collects only the fields each workflow needs.
Escalation is always available. Any caller who asks for a person gets a transfer or a callback commitment — the agent never stands between a client and the practice.

Frequently asked questions

Is ThunderPhone HIPAA compliant for a med spa?

ThunderPhone's public posture is GDPR and HIPAA compliant. The spa remains responsible for configuring its own compliant workflow: what client health information the agent collects, recording and notice settings, retention, which integrations receive health information, and who can access call data. Review the configuration with whoever owns compliance at the practice before launch.

Can the agent recommend a treatment or tell a caller if they're a candidate?

No, and it should not be configured to try. Treatment recommendations and suitability decisions belong to the provider. The agent books the consultation where those decisions are made, and it collects intake answers for clinical review without assessing them.

Can it ask our contraindication screening questions?

Yes — as your script, not its judgment. The practice writes the questions; the agent reads them as written, records the answers verbatim, and delivers a structured record for clinical review. Answers the spa has flagged trigger the configured escalation: hold the booking, route a task, or transfer.

Can it quote prices for injectables and laser treatments?

It can quote the spa's approved pricing material — published "from" prices, package rates, membership terms — and explain, in the spa's wording, that final pricing is set with the provider. It never estimates a caller's units, sessions, or total.

Can it fill last-minute cancellations from our waitlist?

Yes. When a slot opens, an outbound campaign can call the waitlist for that service, offer the specific time, book the first acceptance, and stop once the slot fills. Voicemail detection and retry policy are configurable, and every outcome is delivered by webhook.

Can it call lapsed clients to rebook?

Yes, on the list and wording the spa approves, with opt-outs recorded and honored. The spa is responsible for ensuring its outbound campaigns comply with applicable consent and telemarketing rules.

Can it handle membership and package questions?

General questions are answered from the spa's approved documents. Account-specific lookups — sessions remaining, credit balances — work when the membership or booking system exposes them through a connected API; otherwise the agent collects details and routes the question to staff.

How do we make sure it's safe before clients call it?

Test it like clinical software. Browser mic tests support fast iteration; AI-caller simulations rehearse the scenarios that worry you — a caller fishing for medical advice, a flagged intake answer, a demand for a personal quote — with grading against your criteria. Regression suites keep prompt changes from quietly weakening the guardrails, and recordings and transcripts make live calls auditable after launch.