Privacy Policy

1. Who we are and our roles

This Privacy Policy explains how LolaDesk (“we,” “us”) collects, uses and shares personal information.

For salon owners and staff who use LolaDesk, and visitors to loladesk.com, we decide how your information is used (we are the “controller” or “business”).

For salon clients and callers (people who call, text, chat with or book through a salon that uses LolaDesk), we process information on behalf of that salon as its service provider / processor. The salon’s own privacy policy applies, and you should contact the salon to exercise your rights; we will help them respond.

2. Information we collect

From salon owners and staff

• Account and contact details: name, email, phone, business name and address, role, login and two-step verification data.
• Business information you or Lola collect for your account: services, prices, hours, team, website, Google Maps and Instagram links and public content, policies and documents you upload.
• Billing information: plan, invoices and payment status. Card details are collected and stored by Stripe, not by us.
• Usage and device data: pages used, actions, IP address, browser and device type, approximate location, and logs.
• Communications with us, including support calls and texts.

From salon clients and callers (on the salon’s behalf)

• Contact details: name, phone number, email.
• Appointments, services, preferences, notes and visit history the salon keeps.
• Call audio, recordings, transcripts and AI-generated summaries; text messages; website chat messages.
• Payment status for deposits or fees (card details are handled by Stripe).
• Messaging consent and opt-out status.

Automatically

We use cookies and local storage that are necessary to keep you signed in, remember preferences and secure the Service. We do not use third-party advertising cookies on the app.

3. How we use information

• Provide the Service: answer calls and messages, book and manage appointments, send confirmations, reminders and campaigns the salon enables, process payments, and show dashboards and insights.
• Operate AI features, including speech recognition, text-to-speech and language models, to understand and respond to callers and owners.
• Secure the Service, prevent fraud, spam and abuse, and comply with carrier rules and law.
• Provide support, send service and billing notices, and (for owners) product updates you can opt out of.
• Improve and develop the Service using de-identified or aggregated data.
• Comply with legal obligations and enforce our agreements.

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not use Client Data to train general-purpose AI models.

4. Text messaging and mobile information

Mobile phone numbers are used to deliver the messages people asked for or consented to (for example appointment confirmations and reminders) and to honor opt-outs. See our Messaging Terms.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Information sharing to subcontractors in support services, such as customer service and message delivery, is permitted. All other categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

5. AI, calls and recordings

Calls answered by Lola are handled by an AI assistant and may be recorded and transcribed so the salon can review them and so Lola can book accurately and improve service for that salon. Callers are told they are speaking with an AI assistant and that the call may be recorded. See our AI & Call Recording Notice.

6. How we share information

We share personal information only as follows:

• With the salon you are interacting with (for clients and callers).
• With service providers who process it for us under contract, such as cloud hosting, database, telecommunications, AI processing, payments and email. See Subprocessors.
• With integrations the salon connects (for example a booking system or Google), at the salon’s direction.
• For legal reasons: to comply with law, legal process or lawful requests; to protect rights, safety and the Service; and to investigate fraud or abuse.
• In a business transfer such as a merger or acquisition, subject to this Policy.

7. Retention

We keep account information while your account is active and for a reasonable period afterward for legal, tax, accounting and dispute purposes. Client Data is retained as instructed by the salon and deleted or returned after the salon’s account ends, as described in the DPA. Call recordings and transcripts are kept as long as the salon keeps them in its account, unless the salon or the law requires earlier deletion. Backups are overwritten on a rolling schedule.

8. Security

We use administrative, technical and physical safeguards including encryption in transit, access controls, tenant isolation, two-step verification for owners, logging and least-privilege access. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Your privacy rights

Depending on where you live (for example California, Virginia, Colorado, Connecticut, Texas, Florida, and other states, or the EU/UK), you may have rights to know, access, correct, delete or obtain a copy of your personal information, to opt out of sale, sharing or targeted advertising (we do none of these), and to not be discriminated against for exercising your rights.

Owners and staff can exercise rights by emailing legal@loladesk.com. Salon clients should contact the salon first; we will assist the salon. We will verify requests and respond within the time the law requires. Authorized agents may submit requests with proof of authorization. You may appeal a decision by replying to our response.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child provided us information, contact us and we will delete it.

11. International users

We are based in the United States and process data in the United States. If you access the Service from elsewhere, you understand your information will be transferred to and processed in the United States, where appropriate safeguards (such as Standard Contractual Clauses, where required) apply.

12. Changes and contact

We may update this Policy and will post the new date above; material changes will be notified by email or in the app. Contact: legal@loladesk.com, LolaDesk, Miami Beach, Florida.