Privacy Policy

This Privacy Policy explains how Destilio handles personal data when people use the Destilio website, salon management platform, public booking pages, account features, subscription features, support services and related functionality.

A participating Salon may also have its own privacy obligations and policies for the professional services it provides and for the way it uses client information in its own business.

Depending on how Destilio is used, information may include:

• Account information such as name, email address, account role and login information.
• Salon information such as salon name, business type, phone number, location, country, currency, timezone and language preferences.
• Team information such as employee names, roles, schedules, availability and account permissions.
• Client information entered by a Salon, including name, phone number, email address, appointment history and related booking information.
• Appointment information such as selected Salon, service, professional, appointment date and time, booking status, cancellation, rescheduling and no-show information.
• Email-verification, account-verification and booking-security metadata.
• Subscription information such as selected plan, billing interval, billing country, billing currency, subscription status and payment status.
• Priority Booking request, deposit and payment-status information where enabled.
• Support messages and information you choose to provide when contacting Destilio.
• Technical and usage information such as browser type, device information, IP address, pages viewed, session information, analytics events and other security or diagnostic information reasonably necessary to operate and protect the service.

Personal data may be used to:

• Create and manage Destilio accounts and salon workspaces.
• Provide calendar, appointment, client and team-management features.
• Create, confirm, reschedule and cancel appointments.
• Support public online booking and client-facing booking pages.
• Verify email addresses and help reduce fake, abusive or fraudulent bookings.
• Send transactional messages such as verification codes, booking confirmations, reminders and account-related notices.
• Process subscriptions, billing status and access to paid features.
• Provide reports, product analytics and business-management functionality.
• Operate AI-powered features such as Destilio Copilot and AI Receptionist.
• Prevent fraud, abuse, security threats and unauthorized use of Destilio.
• Provide support and troubleshoot technical problems.
• Improve the reliability, usability and performance of Destilio.
• Comply with legal obligations and protect legitimate rights and interests.

A participating Salon is responsible for the professional services it provides and for deciding how it uses client information in its own business. When a Salon stores client information in Destilio, the Salon is generally responsible for having an appropriate legal basis for collecting and using that information.

Destilio provides the technology used to manage accounts, bookings, appointments, client records, team information and related features. Depending on the specific processing activity and applicable law, the Salon and Destilio may have different data-protection roles.

Salon owners and authorized team members may enter client information into Destilio. This can include names, phone numbers, email addresses, appointment history and related service information.

Salons are responsible for ensuring that they are permitted to collect, store and use client information through Destilio and for responding to client requests relating to their own use of that information where required by law.

Subscription payments may be processed by Lemon Squeezy or another authorized payment provider. Destilio does not store full payment-card numbers or card verification codes.

Payment providers may process billing information, transaction information, taxes, payment status and related data under their own privacy policies and legal obligations.

Destilio may use analytics services, including Google Analytics, to understand website traffic, page usage, product interactions and conversion activity.

Analytics tools may use cookies or similar technologies and may process information such as device information, browser information, session details, pages visited and events such as demo views, signup activity and checkout activity.

Where applicable law requires consent for non-essential analytics technologies, Destilio should request appropriate consent before those technologies are activated.

Destilio may provide AI-powered features such as Copilot, automated assistance and AI Receptionist functionality. Information provided to these features may be processed to generate responses, suggestions or automated actions.

Users should avoid entering unnecessary sensitive information into AI features. AI-generated output may be incomplete or inaccurate and should be reviewed where it could affect bookings, clients or important business decisions.

Information may be shared where reasonably necessary with:

• The Salon and relevant professionals involved in an appointment.
• Service providers that support hosting, database infrastructure, authentication, email delivery, analytics, security or communications.
• Payment providers where subscription or booking payment functionality is enabled.
• AI or technology service providers where necessary to provide AI-powered functionality.
• Authorities or other parties where disclosure is required by law or necessary to protect legal rights, users or the security of the service.

Service providers should receive only the information reasonably necessary for the service they provide and should be subject to appropriate contractual and security safeguards.

Verification codes, account notices, booking confirmations, reminders, rescheduling notices, cancellation messages and billing notices are transactional communications used to operate the service.

Consent to receive marketing messages should be requested separately where required and is not automatically created merely by opening an account or making an appointment.

Destilio may send a temporary verification code or confirmation link to an email address entered during signup or booking.

Verification is used to confirm access to the email address, reduce abuse and improve the security of account and booking activity.

Destilio may use technical safeguards, authentication tools, verification tokens, booking metadata and other reasonable measures to prevent fake bookings, fraud, automated abuse and unauthorized use.

No internet service can guarantee absolute security, but Destilio aims to maintain reasonable administrative and technical protections appropriate to the nature of the information processed.

Personal data is intended to be kept only for as long as reasonably necessary for account management, booking operations, subscription management, customer support, fraud prevention, accounting, dispute handling, legal compliance and other legitimate purposes.

Different categories of data may have different retention periods depending on operational requirements and applicable law.

Depending on the law that applies to you, you may have rights such as access, correction, deletion, restriction, objection, portability or the right to withdraw consent where processing is based on consent.

You may also have the right to complain to a competent data-protection authority. Some rights may be limited where information must be retained for legal, security, fraud-prevention, billing or dispute-resolution purposes.

Privacy requests relating directly to Destilio can be sent to support@destilio.com.

Destilio and its service providers may process information in more than one country. Where applicable data-protection law requires safeguards for international transfers, appropriate mechanisms should be used.

Destilio public booking is not designed to override parental-consent or age requirements that apply to a Salon's services. A Salon is responsible for applying any legal or professional consent requirements for minors.

This Privacy Policy may be updated as Destilio features, legal requirements and data practices evolve. The most recent version will be published on this page with an updated version date.

Privacy questions about Destilio can be sent to support@destilio.com.

Questions about a Salon's own use of client information may also need to be directed to that Salon.