EU users are covered under GDPR. California residents have CCPA rights. Brazilian residents have LGPD protection.
11. Children's Privacy
Lookit!!! is not intended for users under 18. If you believe your child's data was collected, contact privacy@lookitonline.com and we will delete it upon notification.
We use SMS and WhatsApp messages to send booking confirmations and appointment reminders only. Message data (your name, phone number, and booking details) is processed solely to deliver these booking-related notifications. We do not send marketing messages via SMS or WhatsApp.
We do not sell or share your SMS information with third parties for marketing purposes.
You can opt out of SMS/WhatsApp reminders at any time by replying STOP to any message, or by visiting our opt-out page. After opting out, you will no longer receive reminder messages via SMS or WhatsApp.
Messaging Providers & Phone Numbers
We use third-party providers to deliver booking-related messages on behalf of businesses:
โขTwilio โ delivers SMS and WhatsApp messages (booking confirmations and reminders only)
โขResend โ delivers email reminders and notifications
Phone numbers: When a business sends a reminder or a customer receives a booking confirmation, the customer's phone number is shared with our messaging provider (Twilio) solely to deliver that specific message. Phone numbers are stored encrypted in our database and are never sold or used for marketing.
Opt-out: Customers can opt out of SMS/WhatsApp at any time by replying STOP to any message or visiting our opt-out page. Businesses can also opt out on behalf of a customer from their dashboard.
Reviews & Reputation Data
Review requests: Businesses on the Pro plan or higher can send automated review requests to customers after completed appointments. Review requests include a secure, time-limited link (30-day expiry) that allows the customer to submit a rating and optional comment.
โขReview content (rating, comment) is stored encrypted and linked to the appointment and customer.
โขReviews are only published publicly after the business owner approves them.
โขCustomers can request removal of their review at any time by contacting the business or privacy@lookitonline.com.
โขBusiness owner replies to reviews are public once published.
โขPrivate feedback sent to the business owner is never shown publicly.
Review request tokens expire after 30 days. Unused tokens are automatically deleted.
Intake Forms & Health Data
Intake forms are available to businesses on the Pro plan or higher. They allow businesses to collect custom information from clients before or during appointments.
โขForm responses are stored encrypted and linked to the customer and appointment.
โขA full snapshot of the form template is saved at submission time, so later edits to the form do not alter past responses.
โขBusinesses can set a retention period (in months) after which responses are automatically deleted.
โขIf a form includes health-related questions, the customer must explicitly consent before submitting.
โขCustomers can request a copy or deletion of their form responses at any time.
Health data: If a business collects health-related information via intake forms, that data is stored with the same encryption and access controls as all other data. It is never shared with third parties and is deleted according to the retention period set by the business or when the customer requests deletion.
Payment Processing
Lookit! integrates with third-party payment processors to enable online payments. We never store or process credit card numbers directly.
โขStripe โ processes online deposits, full payments, no-show fees, and membership subscriptions via Stripe Connect (each business connects their own Stripe account).
โขSquare โ businesses can connect their own Square account to track in-person transactions.
What we store: We store Stripe/Square customer IDs, payment method references, and transaction status โ never card numbers or CVVs. All payment data is handled by the payment processors' PCI-DSS-compliant systems.
No-show fees: Businesses on the Pro plan or higher can charge no-show fees to customers who miss appointments. Fees are charged through Stripe using a previously saved payment method (with the customer's consent at booking time). Customers can dispute charges through their bank or by contacting the business.
โขBrazil: ANPD (Autoridade Nacional de Protecao de Dados)
Or email privacy@lookitonline.com with subject 'Privacy Complaint' โ response within 10 business days.
14. Google Calendar Integration
To provide scheduling convenience, Lookit!!! offers optional integration with Google Calendar. This section explains exactly how we access, use, and protect your Google account data in compliance with Google API Services User Data Policy.
Data Accessed:
โGoogle account email โ used solely to identify your account during the OAuth connection flow
โCalendar events (read) โ to check your existing availability and prevent double-booking
โCalendar events (write) โ to add confirmed Lookit!!! appointments directly to your calendar
Data Usage:
โขCalendar data is used exclusively for appointment scheduling and conflict detection
โขWe do not use calendar data for advertising, profiling, or any purpose unrelated to scheduling
โขWe do not read, modify, or delete any calendar events that were not created by Lookit!!!
Data Sharing:
โWe do not share your Google Calendar data with any third parties
โAccess is strictly limited to the user who authorized the connection
โWe do not sell, rent, or disclose calendar data to advertisers or external entities
Data Protection:
โAccess tokens are stored using encrypted, platform-level secure storage
โAll data in transit is protected via TLS/SSL encryption
โRow-Level Security (RLS) ensures only you can access your own calendar tokens
Revoking Access & Deletion:
โขYou can revoke Google Calendar access at any time via your Google Account at myaccount.google.com/permissions
โขDisconnecting within Lookit!!! immediately purges all stored tokens and cached calendar data
โขDeleting your Lookit!!! account also permanently removes all Google OAuth tokens from our systems
15. AI-Powered Features & Third-Party AI Services
Lookit!!! uses artificial intelligence to power certain optional features. This section discloses what data is transmitted to AI services, who provides them, and how your information is protected โ in compliance with Apple App Store requirements and GDPR.
AI-Powered Features:
โขBooking Assistant (Let us Bookit!) โ conversational AI that helps you find businesses, compare services, and book appointments
โขLanguage Translation โ translates your messages and generates call scripts for businesses that speak a different language
โขRisk Assessment โ analyzes booking patterns to detect fraud and protect businesses (administrator use only)
Data Transmitted to the AI Provider:
โYour first name โ for personalized conversation
โYour approximate location (city/area) โ to find nearby businesses
โText messages you type in the AI chat
โAppointment context โ service type, date, time, business name
โBusiness public information โ name, services offered, phone number
Data NOT Transmitted:
โYour password or authentication credentials
โPayment or financial information
โPrecise GPS coordinates
โYour browsing history outside Lookit!!!
โYour email address or phone number (unless you explicitly type them in the chat)
AI Service Provider:
โขProvider: OpenAI, accessed via Base44's platform infrastructure
โขProcessing: Data is sent to OpenAI's API under their enterprise data usage terms
โขTraining: Your data is NOT used to train or improve AI models
โขEncryption: All data in transit is protected via TLS/SSL
โขRetention: AI conversation data is not stored by the provider beyond the session
Your Consent & Control:
โExplicit consent is required before any data is sent to the AI provider
โAI features are entirely optional โ you can book appointments without them
โYou may withdraw AI consent at any time via Settings
โWithdrawing consent immediately stops all data transmission to the AI provider
โYour existing bookings and account are not affected by withdrawing AI consent
By using Lookit!!!, you acknowledge reading this privacy policy. Last Updated: June 2026 ยท Next Review: June 2027