This policy explains what LolaDesk collects, why, and your choices. It covers salon owners ("customers") and the people who interact with a salon's Lola ("end users" — callers, texters, and website visitors).
Solely to provide the Service: answering and routing communications, booking appointments, remembering client preferences per salon, billing, and support. We do not sell personal information. Each salon's data is isolated from every other salon's.
We rely on a small set of vetted infrastructure providers: database and application hosting, carrier-grade telephony and messaging, payment processing (Stripe), and AI language and voice processing. Each receives only what is necessary for its function; our current subprocessor list is available any time at hello@loladesk.com.
Conversations with Lola are processed by AI systems and stored so the salon can review them and so Lola can provide continuity (memory). Depending on jurisdiction, salons are responsible for any required disclosures to their clients about AI interaction or call processing.
Text recipients can reply STOP at any time; LolaDesk enforces this automatically across the platform. Website chat visitors can simply close the widget; a visitor identifier stored in their browser can be cleared via their browser settings.
Data is retained while the salon's account is active. Salons may request export or deletion of their data — including their clients' interaction history — by contacting hello@loladesk.com. End users may direct requests to the salon they interacted with or to us.
Data is encrypted in transit; OAuth tokens are encrypted at rest; tenant isolation is enforced at the database layer. No method is 100% secure, but we take this seriously.