Privacy Policy

Bella IQ, LLC ("Bella IQ," "we," "us," or "our") operates an AI-powered appointment scheduling platform for independent beauty and wellness professionals — including hair stylists, nail technicians, massage therapists, estheticians, and fitness coaches (collectively, "Professionals").

This Privacy Policy explains how we collect, use, disclose, and protect information when you use bella-iq.com and our related services (the "Service"). By accessing or using the Service, you agree to the practices described here.

1. Scope — Two Types of Users

Bella IQ serves two distinct groups, and this policy applies differently to each:

• Professionals (salon owners, stylists, technicians). When you create a Bella IQ account to run your business, this policy applies fully to you. We are the data controller of your account data.
• Clients (the customers of Professionals). When a Professional uses Bella IQ to manage appointments with their clients, we process that client data as a service provider / data processor on behalf of the Professional. The Professional — not Bella IQ — is responsible for obtaining client consent and for their own privacy practices. Clients should contact the Professional directly with any privacy requests.

2. Information We Collect from Professionals

Account & Business Information

• Name, email address, phone number, business name
• Business address and timezone
• Services offered, pricing, and hours of operation
• Profile photos and business content you upload

Financial Information

• Payment card and bank account details — collected and stored by Stripe, our payment processor. We do not store raw card numbers.
• Subscription billing history and transaction records

Usage & Device Information

• IP address, browser type, operating system, referring URLs
• Pages visited, features used, and session duration
• Device identifiers

Communications

• Support tickets, emails, and chat conversations with our team
• Feedback and survey responses

3. Client Data We Process on Behalf of Professionals

When a Professional uses Bella IQ, they may upload or generate data about their clients, including names, phone numbers, email addresses, appointment history, and notes. We process this data solely on the Professional's behalf and under their direction. We do not use client data for our own marketing or advertising purposes.

If you are a client of a salon or studio that uses Bella IQ, please contact that business directly regarding your personal information. The Professional is responsible for their client data practices.

4. SMS Messaging & AI Communications

Bella IQ provides automated SMS appointment reminders, confirmations, cancellation notices, waitlist alerts, and AI-assisted scheduling conversations on behalf of Professionals. These messages are sent via Twilio, our SMS infrastructure provider, using phone numbers registered under the Bella IQ brand with The Campaign Registry (TCR).

When a Professional's client receives SMS messages through Bella IQ:

• Consent — The Professional is responsible for obtaining client consent to receive automated SMS messages. Bella IQ provides tools and workflows to facilitate compliant opt-in.
• Opt-out — Clients may reply STOP at any time to opt out of future messages. Reply HELP for assistance.
• Message frequency — Varies based on appointment activity.
• Message & data rates — Standard carrier message and data rates may apply.
• AI-generated content — Some messages may be composed by Bella IQ's AI scheduling agent (powered by xAI). These messages are sent on behalf of and under the direction of the Professional. The Professional is responsible for the accuracy of AI-assisted communications.

5. How We Use Your Information

We use information we collect to:

• Provide, operate, and improve the Service
• Process payments and manage subscriptions
• Send appointment notifications, receipts, and service communications
• Power AI scheduling conversations on behalf of Professionals
• Respond to support requests and communicate about the Service
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Analyze usage patterns in aggregate to improve features (we do not sell this data)

6. Third-Party Services We Use

We share data with third-party service providers only as necessary to operate the Service:

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may disclose information if required by law, court order, or to protect the rights and safety of Bella IQ, our users, or the public.

7. Data Security

We implement industry-standard technical and organizational safeguards to protect your information, including encryption in transit (TLS), encrypted database storage, and access controls. We do not store raw payment card numbers — all payment data is handled by Stripe's PCI-DSS-certified infrastructure.

No system is perfectly secure. In the event of a data breach that affects your rights or freedoms, we will notify you as required by applicable law.

8. Data Retention

We retain your account data for as long as your account is active. If you cancel your subscription, we retain your data for 90 days to allow for reactivation, after which it is deleted or anonymized. Transaction records are retained for 7 years for tax and accounting purposes. AI conversation logs are automatically purged after 48 hours of inactivity. You may request deletion of your data at any time by contacting us.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate information
• Deletion — Request deletion of your personal information (subject to legal retention requirements)
• Portability — Request your data in a portable format
• Opt-out of sale/sharing — We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

California residents may exercise rights under the California Consumer Privacy Act (CCPA). To submit a request, contact us at the address below. We will respond within 45 days.

10. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor without parental consent, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by email. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

12. Contact Us

Questions, requests, or concerns about this Privacy Policy may be directed to: