Privacy Policy

This Privacy Policy describes how Capilara (“we,” “us,” or “our”) collects, uses, stores, and protects your personal information when you visit www.capilara.app, book appointments, use our AI features, or communicate with us. By using our services, you agree to the practices described in this policy.

We use your information to:

• Process and confirm bookings, send reminders, and manage your appointments.
• Generate AI previews, stylist protocols, and private Hair Memory records.
• Process payments and deposits.
• Communicate with you via email, SMS, WhatsApp, or voice calls about your appointments and relevant offers.
• Detect fraud, abuse, and security threats.
• Improve our platform and personalize your experience.
• Comply with legal obligations and enforce our Terms of Service.

When you provide your mobile phone number and check the SMS consent box on our booking form, you expressly consent to receive automated text messages from Capilara and Gio Beauty Glam. These messages may include appointment confirmations, reminders, updates, and occasional promotional offers.

• Message frequency: message frequency varies based on your appointment activity and marketing preferences, typically fewer than 10 messages per month.
• Message and data rates: standard message and data rates may apply according to your wireless carrier plan.
• Opt-out: you can cancel SMS messages at any time by replying STOP. After you reply STOP, we will send a confirmation message and no further SMS messages unless you opt in again.
• Help: reply HELP for assistance or contact us at hello@capilara.app.
• Participating carriers: supported carriers include major U.S. wireless providers; availability is not guaranteed by all carriers, and carriers are not liable for delayed or undelivered messages.
• Consent is not a condition of purchase: agreeing to receive SMS messages is not required to book a service or make a purchase.

We process personal information based on:

• Performance of a contract: to fulfill bookings and payments.
• Consent: for SMS marketing, AI previews, and optional cookies.
• Legitimate interests: for fraud prevention, service improvement, and security.
• Legal obligation: to comply with tax, accounting, and consumer protection laws.

We share only the minimum data necessary with trusted third-party vendors:

• Stripe — payment processing and deposits.
• Twilio — SMS and WhatsApp messaging.
• Vapi — AI voice assistant (Riley) for calls and scheduling.
• Google — calendar synchronization, Google Ads conversion measurement, and analytics.
• Lovable Cloud — hosting, database, storage, authentication, and email delivery from notify.capilara.app.

Each subprocessor is contractually bound to use your data only as needed to provide their services and to maintain appropriate security measures.

Beauty Twin AI and Riley use third-party AI models. Your photos and conversation transcripts are transmitted to those providers solely to generate the requested result or response. We do not use your photos or conversations to train public AI models. AI previews are simulations and not guarantees of an exact final look; results depend on hair condition, styling, and other factors at the time of service.

Booking and payment records are retained for as long as required by applicable tax and consumer protection laws. Photos and Hair Memory entries are kept while your account is active and deleted when you request account deletion, unless legal obligations require us to retain them longer. Marketing consent records are retained for at least four years to demonstrate compliance with opt-in requirements.

Depending on your location, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your personal information, subject to legal retention requirements.
• Withdraw consent for SMS marketing or optional cookies.
• Object to certain processing based on legitimate interests.
• Request a copy of your data in a portable format.

To exercise these rights, contact us at hello@capilara.app. You can also stop SMS reminders at any time by replying STOP or using the unsubscribe link in marketing emails.

We use cookies and similar technologies to keep you signed in, remember your language preferences, and measure conversions from advertising (Google Ads). You can manage or block non-essential cookies through your browser settings. Essential cookies required for bookings and security cannot be disabled.

Capilara is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately and we will delete it.

Data is transmitted over HTTPS and stored in managed cloud infrastructure with role-based access controls, encryption at rest, and regular security reviews. No system is perfectly secure. If you believe a security incident has occurred, please contact us immediately at hello@capilara.app.

Capilara is operated in the United States. If you access our services from outside the United States, you understand that your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

We may update this Privacy Policy from time to time. The latest version will always be available at www.capilara.app/privacy with the effective date shown at the top. Continued use of our services after any changes means you accept the updated policy.

For privacy questions, data requests, or to opt out of communications, contact us at:

• Email: hello@capilara.app
• Business name: Gio Beauty Glam
• Location: West Palm Beach, Florida, USA