LoomiBook Privacy Policy

Effective date: May 8, 2026

LoomiBook ("we," "us," "our") is operated by Harman Digital Consulting LLC, doing business as LoomiBook. This Privacy Policy explains what we collect, how we use it, who we share it with, and the choices you have.

LoomiBook is a software-as-a-service booking platform for independent hair stylists and small salons (each, a "Stylist"). A Stylist's customers (each, a "Client") interact with the platform primarily by SMS — typically by texting a phone number assigned to the Stylist by LoomiBook.

This policy applies to both Stylists who use LoomiBook to manage their business and Clients who interact with LoomiBook on behalf of a Stylist.

1. Information we collect

From Stylists

• Account information: name, email address, phone number, password (stored as a hash), business name
• Business information: services offered, pricing, working hours, calendar availability, client lists you upload or create
• Payment information: billing address; full card details are processed and stored by Stripe — we never see or store full card numbers
• Support communications: messages you send to us
• Usage data: logins, feature usage, IP address, device and browser information

From Clients

When you interact with a Stylist via LoomiBook, we collect:

• Phone number (this is your identity in the system)
• Name when shared by you or by the Stylist who briefed the AI assistant on your behalf
• Appointment history with that Stylist: services booked, dates, times, prices
• SMS message content sent to or received from the booking assistant
• Communication preferences and consent records: opt-in choices, opt-outs, consent attestations recorded by your Stylist

Automatically collected

• Server logs (IP address, timestamps, error information)
• Limited cookies on our web pages (see §10)

2. How we use information

We use information to:

• Provide and operate the booking service (matching Clients to Stylists, scheduling, sending confirmations and reminders)
• Process payments and manage Stylist subscriptions
• Send transactional and consented marketing SMS
• Improve service quality through analytics and aggregated usage data
• Detect and prevent fraud and abuse
• Comply with legal obligations

We do not use Client SMS content or Stylist account data to train AI models — neither our own nor third parties'. Our AI processing is per-conversation; only the data we explicitly store to operate the service is retained.

3. SMS communications (TCPA / 10DLC)

Types of messages we send

• Transactional: booking confirmations, reminders, schedule changes, account verifications, opt-in confirmations
• Marketing (consented only): rebooking suggestions sent based on a Client's appointment history, sent only to Clients who explicitly opted in via the first-booking confirmation checkbox

Message frequency

Frequency varies by use. Transactional messages are tied to your appointment activity. Marketing messages are capped at no more than two per Client per 30 days.

Consent

By providing your mobile number to a Stylist on the LoomiBook platform, you consent to receive transactional messages necessary to manage your appointments. Marketing messages require separate, explicit opt-in.

Opt-out

You can opt out of all messages at any time by replying STOP to any message. You will receive a one-time confirmation. After opting out, we will not send you further messages from that Stylist's number unless you opt back in.

For help, reply HELP to any message.

Message and data rates may apply.

Mobile information sharing

No mobile information (including phone numbers, opt-in status, consent records, and message content) will be shared with third parties or affiliates for marketing or promotional purposes. This information is shared only with the operating Stylist (your appointed service provider) and with subprocessors necessary to deliver the service (see §5). All other categories of data exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

4. AI assistant disclosure

LoomiBook uses an AI booking assistant (powered by Anthropic's Claude API) to handle conversations on behalf of Stylists. When the AI sends a message to you, the message will identify itself as the Stylist's AI assistant — for example, "Hi, I'm Sarah's AI booking assistant."

The AI processes only the SMS content you send and limited context from your booking history with the relevant Stylist. We do not allow the AI provider to retain your data beyond the immediate conversation, and we do not allow your data to be used for AI model training.

5. Sharing and disclosure

We share information only as follows.

Subprocessors (vendors who help us run the service)

Each subprocessor is contractually limited to using your data only as necessary to provide their services to us.

With your Stylist

Information you share with the booking assistant is shared with the Stylist whose booking number you texted. This is the central purpose of the platform.

Legal requirements

We may disclose information if required by law (e.g., subpoena, court order), to protect our legal rights, or to investigate suspected fraud or abuse.

Business transfers

If LoomiBook is acquired or merged, your information may transfer to the acquiring entity, subject to this policy.

We do not sell personal information.

6. Data retention

You can request earlier deletion (see §8), subject to legal retention obligations.

7. Security

We use industry-standard security measures: TLS in transit, encryption at rest, role-based access controls, multi-tenant data isolation, and regular security reviews. No system is perfectly secure, but we work hard to protect your data.

8. Your rights

Regardless of jurisdiction, you have the right to:

• Access — request a copy of the data we hold about you
• Correction — fix inaccuracies
• Deletion — request deletion of your data, subject to legal retention obligations
• Opt-out of marketing communications
• Portability — receive a structured copy of your data

Stylists can exercise these rights through their account settings. Clients can email us at privacy@loomibook.com or reply to any LoomiBook SMS with a clear request.

California residents (CCPA / CPRA)

You have additional rights under the California Consumer Privacy Act, including the right to know, the right to delete, the right to correct, and the right to limit use of sensitive personal information. We do not "sell" your data within the meaning of the CCPA.

EEA / UK residents (GDPR)

Our lawful bases are: contract (to provide the service), consent (for marketing), legitimate interests (for analytics and service improvement), and legal obligation. You may lodge a complaint with your local data protection authority.

9. Children

LoomiBook is not directed at children under 13 (or under 16 in jurisdictions where that is the applicable threshold). We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

10. International data transfers

LoomiBook operates from the United States. If you access the service from outside the U.S., your information will be transferred to and processed in the U.S. We rely on Standard Contractual Clauses where required by applicable law.

11. Cookies and tracking

Our marketing site (loomibook.com) and dashboard (app.loomibook.com) use limited cookies for authentication, fraud prevention, and analytics. We do not use third-party advertising cookies. You can disable cookies in your browser, though some features may not work.

12. Changes to this policy

We may update this policy. Material changes will be communicated by email (Stylists) or by SMS notification (Clients with active opt-in). The "Effective date" at the top reflects the latest version.

13. Contact

For privacy questions, requests, or complaints:

Harman Digital Consulting LLC d/b/a LoomiBook Email: privacy@loomibook.com Mailing address: 12070 Silver Crest St. Moorpark, CA 93021