Privacy Policy

011. Who This Privacy Policy Applies To

This Privacy Policy applies to personal information processed in connection with:

• Salon owners and managers
• Receptionists
• Technicians and other salon staff
• Salon customers who make or manage appointments
• Visitors to gelza.net
• Users of Gelza's web dashboard
• Users of the Gelza Booking mobile app
• People who receive or interact with Gelza-powered SMS, email, AI, or telephone features

Gelza is a technology provider. Each salon remains responsible for its own salon services, staff, contractors, prices, customer relationships, policies, and independent use of personal information.

Depending on the circumstances, Gelza may process information for its own business purposes or on behalf of a salon. When we process salon customer or staff information primarily on behalf of a salon, the salon may be the organization primarily responsible for that information under applicable privacy law.

022. Information We Collect

The information we collect depends on how you interact with Gelza.

Salon owners and managers

We may collect:

• Name
• Email address
• Phone number
• Login and authentication information
• Salon name
• Business address and contact information
• Account role and permissions
• Subscription information
• Billing and transaction information
• Support communications
• Account activity
• Security events

Staff and technicians

A salon owner or authorized manager may create accounts for receptionists, technicians, managers, and other staff.

We may process:

• Name
• Email address
• Phone number where provided
• Login and authentication information
• Salon affiliation
• Staff role
• Account permissions
• Work schedule and availability
• Appointment assignments
• Account activity
• Notification preferences
• Device push identifier when push notifications are enabled

Salon customers and appointments

When a customer makes or manages an appointment, we may process:

• Name
• Phone number
• Email address where provided
• Salon selected
• Service selected
• Technician selected or assigned
• Appointment date and time
• Booking status
• Appointment history
• Rescheduling or cancellation information
• Booking preferences
• Appointment notes entered by the customer or salon
• Information needed to securely manage an appointment

Customers and salons should avoid entering unnecessary sensitive personal information in appointment notes or other free-text fields.

Communications

Depending on the features enabled by a salon, we may process:

• SMS messages
• Email messages
• Booking-management communications
• Customer-support communications
• AI-assisted messages
• Telephone conversation information
• AI-generated transcripts
• Date and time of communications
• Delivery status
• Communication identifiers

Gelza's intended AI phone configuration does not require permanent storage of raw call audio by default. Calls may be processed in real time and converted into text when necessary to handle bookings, customer requests, support, security, quality review, or salon records.

If persistent audio recording is enabled in the future, appropriate notice and consent procedures will be used where required by applicable law.

Subscription and payment information

Gelza uses Stripe to process salon subscription payments.

Stripe may collect and process:

• Name
• Email address
• Billing address
• Phone number
• Payment method
• Full payment-card information
• Transaction information
• Fraud-prevention information

Gelza may receive limited payment information from Stripe, including:

• Payment status
• Transaction amount
• Transaction identifier
• Subscription status
• Payment-method type
• Card brand
• Last four digits of a payment card
• Billing information where applicable

Gelza does not store full payment-card numbers or card security codes such as CVV or CVC when Stripe processes the payment.

Salon customers do not pay Gelza for appointments or salon services.

Technical and security information

When you use our website, booking pages, dashboard, or mobile app, we may process:

• IP address
• Browser type
• Device type
• Operating system
• Login timestamps
• Service activity
• Error logs
• Security logs
• Network and request information
• Approximate location inferred from IP address where reasonably necessary for security, fraud prevention, analytics, or network operations

The Gelza Booking technician app does not request or collect precise device location.

033. Website Cookies, Analytics, and Advertising Technologies

Gelza may use cookies and similar technologies on gelza.net to operate the website, understand how visitors use it, measure marketing effectiveness, protect the website, and improve the Services.

These technologies may include:

• Google Analytics
• Meta Pixel
• TikTok Pixel

Depending on how these services are configured, they may receive information such as:

• IP address
• Browser and device information
• Pages visited
• Referring website
• Website interactions
• Conversion information
• Cookie or advertising identifiers

Gelza does not sell personal information for money.

Some U.S. state privacy laws may treat disclosures through advertising technologies as a "sale," "sharing," or targeted advertising even if Gelza does not receive money for the information.

Where applicable privacy law gives users the right to opt out of this activity, Gelza will provide or honor legally required privacy choices, including recognized browser-based opt-out signals such as Global Privacy Control where required.

These advertising and analytics technologies do not change our separate commitment that mobile phone information and SMS consent are not shared with third parties for their own promotional or marketing purposes.

The Gelza Booking technician app does not contain advertising and does not track users across unrelated apps or websites for advertising purposes.

044. How We Collect Information

We may collect information:

• Directly from you
• From a salon owner or manager who creates a staff account
• From salon staff entering or managing customer information
• When a customer creates, reschedules, manages, or cancels an appointment
• When you communicate by SMS, email, telephone, or support channel
• Automatically from devices and browsers
• From Stripe and other providers used to operate Gelza

A salon should provide Gelza only with information that it has the right to collect, use, and provide to us.

055. How and Why We Use Information

We use personal information to:

• Create and manage salon accounts
• Authenticate users
• Manage staff accounts and permissions
• Provide online appointment booking
• Maintain appointment calendars
• Display technician schedules
• Assign appointments
• Allow customers to manage, reschedule, or cancel appointments
• Maintain appointment history
• Send permitted SMS messages
• Send service emails
• Send optional push notifications
• Process salon subscription payments
• Provide customer support
• Detect fraud or unauthorized access
• Protect Gelza, salons, customers, and users
• Diagnose technical problems
• Maintain service reliability
• Provide AI-assisted features
• Measure and improve our website and Services
• Comply with legal obligations
• Enforce our Terms of Service
• Establish, exercise, or defend legal claims

Where applicable law requires a legal basis for processing, our legal basis may include:

• Performing a contract
• Providing a service requested by a user or salon
• Consent
• Compliance with legal obligations
• Protection of our Services and users
• Legitimate business interests permitted by applicable law, including fraud prevention, support, security, and service improvement

Where processing depends on consent, consent may generally be withdrawn for future processing.

066. Salon Customer and Staff Data

Salons use Gelza to manage their own customers and staff.

Each salon is responsible for:

• Having an appropriate legal basis for information it collects
• Providing legally required privacy notices
• Managing staff access and permissions
• Obtaining required SMS consent
• Obtaining marketing consent where required
• Honoring applicable privacy rights
• Maintaining reasonably accurate information
• Using customer information lawfully

If Gelza receives a privacy request involving information that Gelza processes primarily on behalf of a salon, Gelza may refer the request to that salon or coordinate with the salon before responding.

Gelza does not acquire ownership of a salon's customer information merely because that information is processed through Gelza.

077. Gelza Booking Mobile App

The Gelza Booking mobile app is currently intended for salon technicians using iPhone. An Android version may be offered in the future.

Technicians do not create salon accounts through the app. Their account credentials are created or authorized by their salon owner or manager.

Nothing is sold through the technician app.

Information processed by the app

The app may process:

• Technician name
• Technician email address
• Phone number where associated with the account
• Authentication information
• Salon affiliation
• Appointment schedule
• Appointment assignments
• Notification preferences
• App activity needed for security and operation
• Device push identifier

The technician app does not:

• Collect precise location
• Display advertising
• Track users across unrelated apps or websites for advertising

Push notifications

Technicians may optionally receive push notifications relating to:

• New appointments
• Rescheduled appointments
• Cancelled appointments
• Appointment assignments

Individual notification types may be turned on or off in the app.

Users may also disable notifications through their device settings.

Push notifications are designed to show limited appointment information, such as appointment time and service.

Push notifications do not include customer phone numbers, email addresses, or other customer contact details.

To deliver notifications, Gelza stores a device push identifier.

For iPhone, Gelza sends the device identifier and limited notification payload through Apple Push Notification service.

If an Android app is released, Gelza may use Google Firebase Cloud Messaging for comparable push-notification delivery.

Technician account deletion

A technician may initiate deletion inside the app by:

1. Opening My Account
2. Selecting Delete Account
3. Completing the confirmation shown in the app

When the account is deleted:

• The technician is signed out from active sessions
• The technician's email address is removed
• The technician's phone number is removed
• Authentication credentials associated with the account are removed
• The active technician account is deleted

The salon may retain appointment and audit history necessary to preserve legitimate business records.

Where historical appointments need to identify the former technician, Gelza may display the label "Former Technician" together with the former technician's first name and last initial.

Salon owners may also archive staff accounts.

Other users may request deletion by contacting privacy@gelza.net.

Deletion does not require Gelza or a salon to delete information that applicable law permits or requires them to retain.

088. SMS Messaging and Consent

Gelza uses Telnyx and telecommunications carriers to provide SMS services.

Each participating salon may receive its own Telnyx telephone number for communication with that salon's customers.

For U.S. A2P messaging, Gelza acts as the technology provider while each salon is responsible for the messaging it sends to its customers, including sender identity, customer consent, and compliance with applicable law and carrier requirements.

Types of SMS messages

Depending on the salon's configuration and customer consent, messages may include:

• Booking confirmations
• Appointment reminders
• Rescheduling notices
• Cancellation notices
• Booking-management links
• AI-assisted booking conversations
• Re-engagement messages
• Birthday messages
• Promotional offers
• Other salon messages specifically disclosed when consent is obtained

Where an AI-assisted conversation is enabled, incoming messages from a customer may be processed as necessary to understand and respond to that conversation.

SMS information we process

We may process:

• Mobile phone number
• Message content
• Sender and recipient
• Date and time
• Delivery status
• Message identifiers
• SMS opt-in status
• SMS opt-out status
• Consent records
• Communication history

SMS consent

Where consent is required, SMS consent must be obtained separately from general acceptance of Terms or a Privacy Policy.

A voluntary SMS opt-in checkbox should:

• Be optional
• Be unchecked by default
• Identify the salon or messaging brand
• Describe the types of messages the customer agrees to receive

Providing a phone number for an appointment does not by itself authorize unrelated marketing messages.

Marketing, promotional, birthday, or re-engagement messages will be sent only when the salon has obtained consent required by applicable law and carrier rules.

Consent to promotional SMS is not a condition of purchasing Gelza or salon services.

Message frequency may vary.

Message and data rates may apply.

Recipients may reply STOP to applicable messages to opt out.

Recipients may reply HELP for assistance or contact the applicable salon or support@gelza.net.

Opting out of SMS does not automatically cancel an appointment.

Mobile information and SMS consent

Gelza does not sell or rent mobile phone information, SMS opt-in information, or SMS consent.

Gelza does not share mobile phone information, SMS opt-in information, or SMS consent with third parties for their own promotional or marketing purposes.

Gelza may disclose information to Telnyx, telecommunications carriers, network providers, and service providers only as reasonably necessary to transmit, route, secure, support, or manage the requested messaging service.

Those disclosures do not authorize those providers to use a customer's SMS consent for unrelated marketing.

099. Email Communications

Gelza uses Resend to deliver service-related email.

Resend may process:

• Sender email address
• Recipient email address
• Recipient name where included
• Email subject
• Email content
• Message identifiers
• Delivery information
• Bounce or error information

Emails may concern appointments, accounts, security, subscription billing, booking-management links, support, or other service communications.

1010. Artificial Intelligence Features

Gelza may provide AI-assisted SMS and an AI phone receptionist.

Gelza uses Telnyx for SMS, telecommunications, telephone, and related AI communication functionality.

AI features may process information necessary to understand and respond to a request, including:

• Customer questions
• SMS content
• Appointment requests
• Appointment availability
• Salon service information
• Salon policies
• Staff information relevant to a booking
• Existing appointment information
• Spoken telephone conversations
• Text transcripts

AI phone calls and transcripts

Gelza's intended configuration is to inform callers that they are interacting with an AI assistant and that the conversation may be transcribed to assist with their request.

Gelza does not intend to permanently store raw call audio by default.

A telephone conversation may be converted to a text transcript when reasonably necessary for:

• Booking an appointment
• Managing an appointment
• Customer support
• Security
• Quality review
• Troubleshooting
• Maintaining appropriate salon records

Transcripts are retained only for as long as reasonably necessary for the purpose for which they were created, subject to legal, security, dispute, backup, and recordkeeping needs.

If persistent audio recording is enabled in the future, Gelza and the applicable salon will use legally required notice or consent procedures.

Human assistance

Customers are not required to rely exclusively on AI.

A caller or customer may request assistance from a person when the salon provides human support or may contact the salon using another available contact method.

The salon remains responsible for its services, prices, policies, appointment fulfillment, and customer relationships.

AI limitations

AI may:

• Misunderstand spoken language
• Misunderstand written messages
• Provide incorrect or incomplete information
• Fail to complete an intended action
• Make other automated errors

Customers should confirm important appointment, price, service, or policy information with the salon when appropriate.

AI features are not emergency services and should not be used to request emergency assistance.

AI provider use of information

Gelza does not authorize service providers acting on Gelza's behalf to use private customer SMS conversations, appointment information, call content, or transcripts to train unrelated general-purpose AI models for their own purposes.

1111. Who We Disclose Information To

We disclose information only as reasonably necessary to provide Gelza, follow authorized salon instructions, protect the Services, or comply with applicable law.

Salons

The salon with which a customer books and authorized salon staff may receive information necessary to provide and manage appointments.

Amazon Web Services

Gelza uses Amazon Web Services in the United States for hosting and infrastructure.

AWS may store or process information handled by Gelza systems as necessary to provide infrastructure services.

Cloudflare

Gelza uses Cloudflare for website delivery, network performance, and security.

Cloudflare may process information such as:

• IP address
• Device and browser information
• Network request information
• Security information
• Internet traffic passing through Cloudflare infrastructure

Telnyx

Telnyx may process:

• Telephone numbers
• SMS content
• Message metadata
• Delivery information
• Telephone call information
• Voice data while processing a call
• Transcripts or AI communication information where the applicable feature is enabled

Resend

Resend may process:

• Email addresses
• Email content
• Email delivery information
• Message identifiers

Stripe

Stripe processes salon subscription and billing information.

Gelza does not store full payment-card numbers when Stripe processes the payment.

Apple Push Notification service

Apple may receive:

• Device push identifier
• Limited notification payload necessary to deliver a push notification

Gelza does not include customer contact details in technician push-notification payloads.

Google Firebase Cloud Messaging

If an Android version is released and Gelza uses Firebase Cloud Messaging, Google may receive:

• Device push identifier
• Limited notification payload needed to deliver notifications

Website analytics and advertising providers

Google, Meta, and TikTok may receive website and device information when their applicable analytics or advertising technologies are enabled, as described in Section 3.

Legal and safety disclosures

We may disclose information where reasonably necessary to:

• Comply with applicable law
• Respond to valid court orders, subpoenas, or government requests
• Investigate fraud or abuse
• Protect Gelza, salons, users, or others
• Establish, exercise, or defend legal claims

Business transactions

Information may be transferred or disclosed in connection with a merger, acquisition, financing, restructuring, sale of assets, or similar business transaction, subject to applicable law.

1212. Sale of Personal Information

Gelza does not sell personal information for money.

Gelza does not sell, rent, or disclose mobile phone information or SMS consent to third parties for their own marketing.

As explained in Section 3, certain website advertising technologies may constitute "sharing," targeted advertising, or a "sale" under particular state privacy laws even when no money is exchanged.

Where those laws apply, eligible users may exercise the applicable opt-out rights.

1313. Data Retention

Gelza retains information for only as long as reasonably necessary for the purpose for which it was collected and for legitimate business, legal, security, and recordkeeping needs.

Retention may be necessary to:

• Operate Gelza
• Maintain salon appointment history
• Maintain audit records
• Maintain billing and accounting records
• Preserve legally appropriate SMS consent and opt-out records
• Prevent fraud
• Maintain security logs
• Resolve disputes
• Enforce agreements
• Meet legal obligations
• Maintain backups and disaster-recovery systems

Different categories of information may be retained for different periods.

Technician deletion

Technician deletion is handled as described in Section 7.

Salon cancellation or closure

When a salon stops using Gelza or its account is closed, Gelza may deactivate active access and begin deleting or anonymizing data that is no longer reasonably necessary.

Gelza does not promise that every piece of data will be deleted immediately when a salon account closes.

Limited information may remain for a reasonable period where necessary for:

• Billing and accounting
• SMS consent and opt-out records
• Appointment or audit history
• Fraud prevention
• Security
• Legal compliance
• Dispute resolution
• Backup systems
• Account recovery

Data in backups may remain until the applicable backup is overwritten or expires through Gelza's normal backup cycle.

Gelza may permanently delete salon data when it is no longer reasonably necessary. Once data has been permanently deleted, Gelza may not be able to recover it.

1414. Security

Gelza uses reasonable administrative, technical, and organizational safeguards designed to protect personal information from unauthorized access, loss, misuse, alteration, or disclosure.

Access to salon and customer information is limited through account permissions and other controls appropriate to the Services.

Users are responsible for protecting their login credentials.

Users should promptly notify Gelza if they believe an account has been compromised.

No Internet, telecommunications, or storage system can guarantee absolute security.

1515. Children's Privacy

Gelza is not directed to children under 13.

Gelza does not knowingly provide accounts directly to children under 13.

A parent, guardian, or salon may provide information relating to a child when booking an appropriate salon service for that child.

If you believe information from a child under 13 has been submitted to Gelza improperly, contact privacy@gelza.net.

1616. U.S. State Privacy Rights

Depending on where you live and whether a particular privacy law applies to Gelza or the applicable salon, you may have rights relating to your personal information.

These may include the right to:

• Know or access personal information
• Request information about how personal information is collected, used, or disclosed
• Correct inaccurate personal information
• Request deletion
• Obtain a portable copy of certain information
• Opt out of the sale of personal information
• Opt out of certain sharing or targeted advertising
• Limit certain uses of sensitive personal information where applicable
• Withdraw consent where processing depends on consent
• Appeal certain privacy decisions where applicable
• Exercise privacy rights without unlawful discrimination

California residents may have rights under the California Consumer Privacy Act, as amended, where that law applies.

Where applicable, Gelza honors recognized opt-out preference signals, including Global Privacy Control, as required by law.

Gelza may need to verify identity before fulfilling certain requests.

If a request concerns information primarily controlled by a salon, Gelza may refer the request to the salon or coordinate with the salon.

Privacy requests may be sent to privacy@gelza.net.

1717. International Users

Gelza is based in the United States and primarily focuses on serving U.S. salons, but the Services may be accessed from other countries.

Information processed through Gelza may be transferred to, stored in, and processed in the United States.

Privacy protections in the United States may differ from those in your country.

Where the European Union General Data Protection Regulation, United Kingdom GDPR, or another international privacy law applies to Gelza's processing, eligible individuals may have additional rights under that law, including rights of access, correction, deletion, restriction, objection, portability, or complaint to an appropriate supervisory authority.

Nothing in this Privacy Policy limits rights that cannot legally be waived under applicable law.

1818. Changes to This Privacy Policy

Gelza may update this Privacy Policy when our Services, technology, providers, practices, or legal obligations change.

We will update the "last updated" date when this Policy changes.

For material changes, we may provide additional notice through:

• Gelza's website
• The dashboard
• The mobile app
• Email
• Another reasonable method

Where consent is legally required for a new use of personal information, an updated Privacy Policy alone does not replace that consent.

1919. Contact Us

For privacy questions or requests:

• Company: Another Good Day LLC, doing business as Gelza and Gelza Booking
• Address: 5126 N Mason Ave, Chicago, IL 60630, United States
• Privacy email: privacy@gelza.net
• Support email: support@gelza.net
• Phone: 773-899-9977
• Website: https://gelza.net