1. Scope and who is responsible
This policy applies to Stylo websites, the master CRM, public booking pages, and the services delivered through them. Stylo determines how platform account and service data is processed. A beauty professional may separately determine how client information entered into their workspace is used for providing beauty services.
This policy does not cover third-party websites or services that have their own privacy terms.
2. Personal data we collect
We collect data that you provide, data created through use of the service, and limited technical data needed to operate and secure Stylo. This may include:
- Account and identity data, such as name, email address, phone number, authentication identifiers, language, and profile photo.
- Professional profile data, including services, prices, schedule, public-page content, photos, and booking preferences.
- Client and appointment data, such as contact details, selected services, appointment time, status, notes, and communication history.
- Subscription, payment, invoice, and WhatsApp quota information. Full card details are handled by the relevant payment provider and are not intended to be stored by Stylo.
- Support messages and technical information such as IP address, browser, device, timestamps, security events, and diagnostic logs.
3. How we use personal data
We use personal data only for purposes connected with operating, protecting, and improving Stylo, including to:
- Create and secure accounts, verify identity, and provide login methods.
- Run CRM features, calendars, public pages, availability, online booking, revenue tracking, and customer support.
- Send booking, service, security, and billing communications through WhatsApp or email where applicable.
- Process subscriptions and maintain payment and invoice records.
- Prevent abuse, investigate incidents, enforce our terms, and comply with legal obligations.
- Improve reliability and develop new features using aggregated or otherwise appropriately protected information.
5. International data transfers
Some providers may process or store data outside Israel. When personal data is transferred internationally, we use contractual, technical, and organizational safeguards required by applicable law and limit transfers to the purposes described in this policy.
6. Data retention
We retain personal data for as long as needed to provide the service, maintain legitimate business and security records, resolve disputes, and meet legal, accounting, or regulatory requirements. Retention periods differ by data type. When data is no longer needed, we delete it or make it anonymous, unless continued retention is required by law.
7. Security
We use administrative, technical, and organizational safeguards designed to protect personal data, including access controls, authenticated connections, monitoring, backups, and restrictions on service-provider access. No online service can guarantee absolute security, so users should protect their credentials and notify us about suspected unauthorized access.
8. Your choices and rights
Subject to applicable law, you may ask whether we hold personal data about you, request access to it, and request correction of information that is incomplete, inaccurate, unclear, or outdated. You may also ask us to delete or restrict certain data where the law allows, or withdraw consent when processing depends on consent.
We may need to verify your identity before completing a request. If you are a client of a beauty professional, some requests concerning appointment records may need to be handled by that professional.
10. Updates and contact
We may update this policy as Stylo evolves or legal requirements change. The latest version will be posted here with its effective date. Material changes may also be communicated through the service or by email.
For privacy questions or requests, contact [email protected]. Please do not include sensitive information that is not necessary for us to handle your request.