Lellie Privacy Policy

Effective Date: July 10, 2026

Lellie LLC ("Lellie," "we," "our," or "us") respects your privacy and is committed to protecting the personal information entrusted to us.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you access or use the Lellie website, mobile applications, software, and related services (collectively, the "Services").

This Privacy Policy applies to all users of the Services, including business owners, independent professionals, employees, contractors, clients booking appointments, website visitors, and others who interact with Lellie.

Please read this Privacy Policy carefully before using the Services.

1. Scope of this Privacy Policy

This Privacy Policy applies to personal information collected through:

The Lellie website
The Lellie mobile applications
Online booking pages
Business dashboards
Client accounts
SMS communications
Email communications
Customer support interactions
Marketing campaigns
Surveys
Waitlists
Promotions
Social media interactions
Other Services operated by Lellie

This Privacy Policy does not apply to third-party websites, applications, or services that may be linked through the Services. Those third parties maintain their own privacy practices, and we encourage you to review their privacy policies before providing any personal information.

2. Information We Collect

The information we collect depends on how you interact with the Services.

A. Information You Provide

When you create an account, book appointments, contact support, subscribe to communications, or otherwise use the Services, you may provide information such as:

Full name
Business name
Username
Email address
Phone number
Mailing address
Billing address
Profile photo
Password
Appointment information
Service preferences
Calendar availability
Notes entered by businesses or clients
Uploaded documents or images
Communications sent through the Services
Survey responses
Customer support requests
Marketing preferences
Other information you voluntarily choose to provide

You are responsible for ensuring that any information you provide is accurate and current.

B. Business Information

Businesses using Lellie may provide additional information including:

Business name
Business address
Business phone number
Business email address
Business hours
Service offerings
Pricing
Staff information
Availability schedules
Deposit policies
Cancellation policies
Memberships
Promotions
Business branding
Business logos
Tax information where applicable
Payment account information
Appointment records
Client records

C. Client Information

Businesses may collect and store client information using the Services.

Such information may include:

Client name
Email address
Phone number
Appointment history
Booking preferences
Service notes
Preferences selected by the client
Communication history
Loyalty information
Membership information
Package balances
Gift card information
Custom fields created by the business

Businesses are responsible for ensuring that they have the legal right to collect and process information relating to their clients.

D. Payment Information

Payments made through the Services are processed by third-party payment processors, including Stripe.

Lellie does not store complete credit card numbers, debit card numbers, or payment security codes on our servers.

Depending on the transaction, we may receive limited payment-related information such as:

Payment status
Transaction identifiers
Payment method type
Partial payment card information (such as the last four digits)
Billing ZIP code
Refund information
Chargeback status
Subscription status

Payment processing providers maintain their own privacy and security practices.

E. Communications

When you communicate with Lellie or use communication features within the Services, we may collect information including:

Emails
SMS messages
Push notification preferences
Customer support conversations
Chat messages
Survey responses
Feedback
Reviews
Feature requests
Bug reports
Attachments provided during support interactions

We may retain these communications to improve the Services, provide customer support, maintain security, and comply with legal obligations.

3. Information We Collect Automatically

When you access or use the Services, certain information is collected automatically through our systems and trusted service providers to help operate, secure, maintain, and improve the Services.

This information may include:

IP address
Device type
Device manufacturer
Operating system
Browser type and version
Mobile carrier
Language preferences
Time zone
Device identifiers
Advertising identifiers (where permitted by law)
App version
Screen resolution
Network information
Crash reports
Error logs
Performance metrics
Session duration
Pages and screens viewed
Features used
Links clicked
Referral sources
Dates and times of access
Authentication events
Security events
Diagnostic information

This information generally does not directly identify you by itself, but it may be associated with your account where necessary to provide the Services.

3.1 Cookies and Similar Technologies

Lellie uses cookies and similar technologies to operate and improve the Services.

Cookies are small text files stored on your device that allow websites and applications to recognize your browser and remember certain information.

We may use:

Essential cookies necessary for the operation of the Services.
Authentication cookies to keep you signed in.
Preference cookies to remember user settings.
Analytics cookies to understand how the Services are used.
Security cookies to detect fraud and protect accounts.
Performance cookies to improve reliability and functionality.

Depending on your jurisdiction, you may be able to manage certain cookie preferences through your browser settings or other available controls. Please note that disabling cookies may affect the functionality of certain features.

3.2 Analytics

We may use third-party analytics providers to better understand how users interact with the Services.

Analytics information may include:

App launches
Screen views
Session duration
Feature usage
Navigation paths
Click and tap interactions
Device characteristics
Crash diagnostics
Performance metrics
User engagement
Referral sources
Aggregate usage trends

Analytics information helps us improve user experience, identify bugs, measure feature adoption, and develop new functionality.

Where practical, analytics information is aggregated or de-identified.

3.3 Log Information

Our servers automatically create logs when users access the Services.

Log information may include:

IP address
Browser information
Device information
Access dates and times
Authentication events
Error messages
API requests
Network diagnostics
Security events
System activity

These logs help us detect fraud, troubleshoot issues, maintain system security, and ensure the reliable operation of the Services.

3.4 Mobile Device Information

When you use the Lellie mobile application, we may collect information specific to your mobile device, including:

Device model
Operating system version
App version
Device language
Time zone
Push notification token
Mobile network information
Diagnostic information
Crash reports
Performance data

Collection of certain device information may vary depending on your device settings and operating system permissions.

3.5 Location Information

The Services may collect approximate location information derived from your IP address to help protect accounts, prevent fraud, improve security, and comply with applicable laws.

If future versions of the Services include features requiring access to your device's precise location (such as location-based business discovery or appointment features), Lellie will request your permission before collecting precise location information, as required by your device and applicable law.

You may decline or revoke location permissions through your device settings; however, doing so may limit the functionality of certain features.

4. How We Use Personal Information

We use personal information to operate, maintain, improve, secure, and support the Services.

Depending on how you interact with Lellie, we may use personal information to:

Create and manage user accounts.
Authenticate users.
Schedule and manage appointments.
Process subscriptions and payments.
Facilitate deposits and payment transactions.
Send appointment confirmations, reminders, invoices, receipts, waitlist notifications, and other transactional communications.
Respond to customer support requests.
Personalize the user experience.
Improve the performance and reliability of the Services.
Develop new products and features.
Monitor usage and feature adoption.
Detect, investigate, and prevent fraud, abuse, unauthorized access, and other security incidents.
Protect the rights, safety, and property of Lellie, our users, and others.
Comply with legal obligations.
Enforce our Terms of Service and other agreements.
Maintain business records.
Conduct internal reporting, auditing, and analytics.
Send marketing communications where permitted by law and consistent with your communication preferences.
Evaluate beta features and product improvements.
Train and improve automated systems using aggregated, anonymized, or de-identified information where appropriate.

We will only use personal information for purposes that are compatible with the reasons it was collected or as otherwise permitted by applicable law.

5. Legal Bases for Processing (Where Applicable)

If you are located in a jurisdiction that requires a legal basis for processing personal information, including certain international jurisdictions, Lellie may process personal information on one or more of the following grounds:

To perform our contract with you.
To comply with legal obligations.
To protect vital interests.
To pursue our legitimate business interests, provided those interests are not overridden by your rights and freedoms.
With your consent, where consent is required by law.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before consent was withdrawn.

6. How We Share Personal Information

Lellie does not sell your personal information for money.

We only disclose personal information as described in this Privacy Policy, with your consent, or as otherwise permitted or required by applicable law.

We may share personal information with the following categories of recipients:

6.1 Service Providers

We work with trusted third-party service providers that perform services on our behalf. These providers are contractually required to protect personal information and may only process it for the purposes we authorize.

Depending on the Services you use, these providers may include companies that assist with:

Cloud hosting and infrastructure
Payment processing
SMS messaging
Email delivery
Push notifications
Authentication
Data storage
Customer support
Analytics
Crash reporting
Fraud prevention
Security monitoring
Marketing communications
Website hosting
Software development
Customer relationship management
Business operations

Examples of providers may include Stripe, Amazon Web Services (AWS), Twilio, OneSignal, SendGrid, Firebase, and similar technology providers.

Our service providers may change from time to time as our business evolves.

6.2 Businesses and Their Clients

Lellie acts as a software platform connecting businesses and their clients.

When a client books an appointment through the Services, information submitted during the booking process is shared with the selected business to facilitate scheduling and service delivery.

Likewise, businesses may provide appointment information, confirmations, invoices, receipts, and other communications to their clients using the Services.

Businesses are independent controllers of the information they collect from their clients and are responsible for their own privacy practices.

Lellie is not responsible for how businesses use or protect information once it has been shared with them.

6.3 Legal Compliance

We may disclose personal information when we reasonably believe disclosure is necessary to:

Comply with applicable law.
Respond to lawful subpoenas, warrants, court orders, or legal process.
Respond to requests from law enforcement or governmental authorities.
Protect the safety of individuals.
Detect, investigate, or prevent fraud.
Protect the rights or property of Lellie.
Enforce our agreements and policies.
Defend against legal claims.

We may also disclose information where disclosure is otherwise permitted or required by applicable law.

6.4 Business Transfers

If Lellie is involved in a merger, acquisition, investment, financing, reorganization, bankruptcy, dissolution, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction.

Any successor organization will remain subject to applicable privacy obligations governing the transferred information.

6.5 With Your Consent

We may share personal information with other parties whenever you direct us to do so or otherwise provide your consent.

7. Data Retention

We retain personal information only for as long as reasonably necessary to:

Provide the Services.
Maintain user accounts.
Process payments.
Maintain appointment history.
Respond to customer support requests.
Comply with legal obligations.
Resolve disputes.
Enforce our agreements.
Maintain business records.
Protect the security and integrity of the Services.

Retention periods may vary depending upon:

The type of information.
The purpose for which it was collected.
Applicable legal requirements.
Tax and accounting obligations.
Ongoing disputes or investigations.
User requests.

When personal information is no longer required, we will delete, anonymize, or securely dispose of it in accordance with applicable law and our internal data retention practices.

Please note that backup systems may temporarily retain copies of deleted information until those backups are overwritten or securely deleted.

8. Data Security

Protecting personal information is a priority for Lellie.

We implement administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Security measures may include:

Encryption of data in transit using industry-standard protocols.
Encryption of sensitive data where appropriate.
Secure authentication systems.
Access controls based on job responsibilities.
Multi-factor authentication for administrative accounts where appropriate.
Network monitoring.
Security logging.
Firewalls.
Routine software updates.
Vulnerability management.
Secure cloud infrastructure.
Employee access restrictions.
Security training.

Although we strive to protect personal information using commercially reasonable safeguards, no method of electronic transmission or storage is completely secure.

Accordingly, Lellie cannot guarantee absolute security, and users provide information at their own risk.

If we become aware of a security incident affecting personal information, we will investigate the incident and provide any notices required under applicable law.

9. Your Privacy Choices and Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information.

These rights may include the ability to:

Access the personal information we maintain about you.
Correct inaccurate personal information.
Update your account information.
Request deletion of certain personal information.
Request a copy of your personal information.
Object to certain processing activities.
Restrict certain processing activities.
Withdraw consent where processing is based on consent.
Request correction of incomplete information.
Opt out of certain marketing communications.

Some requests may be limited where retention is necessary to:

Complete transactions.
Provide requested Services.
Detect fraud.
Comply with legal obligations.
Resolve disputes.
Exercise or defend legal claims.
Enforce our agreements.

To exercise applicable privacy rights, please contact us using the information provided at the end of this Privacy Policy.

We may request additional information to verify your identity before fulfilling certain requests.

Verification procedures help protect your information from unauthorized access.

10. Marketing Communications

With your consent where required by law, Lellie may send marketing and promotional communications by email, SMS, push notification, or other electronic means.

These communications may include:

Product announcements
Feature releases
Software updates
Educational content
Promotions
Special offers
Beta invitations
Surveys
Newsletters
Event invitations
Tips for using the Services

You may opt out of marketing communications at any time by:

Clicking the "Unsubscribe" link included in marketing emails;
Replying with a supported opt-out keyword (such as "STOP") to eligible SMS messages;
Adjusting your communication preferences within your account settings, where available; or
Contacting us using the information provided at the end of this Privacy Policy.

Please note that even if you opt out of marketing communications, we may continue to send transactional or service-related communications that are necessary to administer your account or provide the Services, including appointment confirmations, receipts, invoices, password reset emails, security alerts, billing notices, and important updates.

11. Children's Privacy

The Services are intended for individuals who are at least 18 years of age or the age of majority in their jurisdiction.

Lellie does not knowingly collect personal information directly from children under the age of 13 or otherwise process children's personal information in violation of applicable law.

If we become aware that we have collected personal information from a child in violation of applicable law, we will take reasonable steps to delete that information as soon as practicable.

If you believe that a child has provided personal information through the Services, please contact us immediately.

Nothing in this section prevents businesses using the Services from maintaining appointment records relating to minors where permitted by law and where the business has obtained any legally required consent from a parent or legal guardian.

12. International Users

Lellie is operated from the United States.

If you access or use the Services from outside the United States, you acknowledge that your personal information may be transferred to, stored, and processed in the United States or in other countries where Lellie or its service providers operate.

These countries may have data protection laws that differ from those in your jurisdiction.

Where required by applicable law, Lellie will implement appropriate safeguards for international transfers of personal information.

By using the Services, you consent to the transfer of your information as described in this Privacy Policy where such consent is required.

13. California Privacy Rights

If you are a California resident, you may have additional rights under applicable California privacy laws, including the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), subject to applicable exemptions.

Depending on applicable law, California residents may have the right to:

Know what categories of personal information we collect.
Know the purposes for which personal information is collected and used.
Request access to certain personal information.
Request deletion of certain personal information.
Request correction of inaccurate personal information.
Request a copy of certain personal information in a portable format.
Limit the use or disclosure of certain sensitive personal information where required by law.
Be free from unlawful discrimination for exercising applicable privacy rights.

Lellie does not sell personal information for monetary consideration.

Lellie also does not knowingly share personal information for cross-context behavioral advertising as those terms are defined under applicable California law.

California residents may exercise applicable privacy rights by contacting us using the contact information provided below.

We may request additional information to verify your identity before fulfilling requests.

14. Nevada Privacy Rights

Nevada residents may have certain rights under Nevada privacy law regarding the sale of covered personal information.

Lellie does not currently sell covered personal information as defined under applicable Nevada law.

Nevada residents who have questions regarding their privacy rights may contact us using the contact information provided below.

15. Do Not Track Signals

Some web browsers transmit "Do Not Track" ("DNT") signals.

Because there is currently no universally accepted standard governing how websites should respond to these signals, Lellie does not currently respond differently to DNT browser signals.

If industry standards or legal requirements change in the future, Lellie may update its practices accordingly.

16. Artificial Intelligence and Automated Features

Certain features of the Services may use artificial intelligence ("AI"), automation, or machine learning technologies to assist users with scheduling, business management, communications, recommendations, or other functions.

Where AI features are available:

Users remain responsible for reviewing and approving AI-generated content before relying on it.
AI-generated outputs may contain errors or inaccuracies.
AI-generated recommendations should not be considered professional, legal, financial, accounting, tax, or medical advice.

To improve our Services, Lellie may analyze aggregated, anonymized, or de-identified usage information to evaluate system performance and improve automated features.

Lellie does not use personal information to train public artificial intelligence models without appropriate authorization or another lawful basis.

17. Third-Party Websites and Services

The Services may contain links to third-party websites, applications, products, or services that are not owned or controlled by Lellie.

Your interactions with those third parties are governed by their own privacy policies and terms of service.

Lellie is not responsible for the privacy, security, content, or practices of third-party services, and encourages users to review the privacy policies of those providers before providing personal information.

18. Account Management and Data Deletion

You may review, update, or correct certain account information at any time by logging into your account or contacting Lellie.

If you wish to delete your account, you may submit a request through the Services (where available) or by contacting us using the information provided below.

Please note that deleting your account does not necessarily result in the immediate deletion of all associated information.

We may retain certain information after an account is deleted when necessary to:

Complete pending transactions;
Maintain appointment records;
Comply with legal obligations;
Meet tax and accounting requirements;
Resolve disputes;
Detect or prevent fraud;
Enforce our agreements;
Protect the security and integrity of the Services; or
Exercise or defend legal claims.

Where possible, retained information will be limited to what is reasonably necessary for these purposes.

19. Business Data Responsibilities

Businesses using Lellie are responsible for the personal information they collect from their clients.

Each business is independently responsible for:

Providing any legally required privacy notices to its clients;
Obtaining any legally required consents;
Maintaining the accuracy of client records;
Responding to requests from clients regarding their information where applicable;
Complying with applicable privacy, consumer protection, tax, and professional regulations.

Lellie provides software tools that assist businesses in managing client information but does not determine how businesses collect, use, disclose, or retain client information.

Businesses remain solely responsible for their own privacy practices and legal compliance.

20. Data Accuracy

We encourage users to keep their account information accurate and up to date.

You may update certain information directly through your account settings.

Providing inaccurate or outdated information may affect your ability to use certain features of the Services or receive important communications.

Lellie is not responsible for issues resulting from inaccurate, incomplete, or outdated information provided by users.

21. Security Responsibilities of Users

While Lellie implements safeguards designed to protect personal information, users also play an important role in protecting their accounts.

You are responsible for:

Maintaining the confidentiality of your login credentials;
Choosing a strong password;
Protecting your devices from unauthorized access;
Logging out of shared devices;
Promptly notifying Lellie of suspected unauthorized account activity;
Maintaining appropriate security practices within your business.

Lellie is not responsible for unauthorized access resulting from compromised passwords, shared login credentials, or insufficient security practices outside of our control.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in:

Our Services;
Applicable laws;
Regulatory guidance;
Technology;
Business practices; or
Security requirements.

When we make material changes, we will revise the Effective Date at the beginning of this Privacy Policy and provide notice through the Services, by email, or through other reasonable methods where required by applicable law.

Your continued use of the Services after the updated Privacy Policy becomes effective constitutes your acknowledgment of the revised Privacy Policy.

If you do not agree with the revised Privacy Policy, you should discontinue use of the Services.

23. Contact Us

If you have questions about this Privacy Policy or our privacy practices, or if you wish to exercise any applicable privacy rights, please contact us:

Lellie LLC

Email: hello@lellie.com

Website: https://www.lellie.com

We will make reasonable efforts to respond to privacy-related inquiries and requests within the timeframes required by applicable law.

24. Supplemental State and International Rights

Certain jurisdictions may provide additional privacy rights that are not specifically described in this Privacy Policy.

Where applicable law grants you greater privacy protections than those described herein, Lellie will honor those rights to the extent required by law.

Nothing in this Privacy Policy is intended to limit or reduce any rights that cannot legally be waived under applicable privacy laws.

25. Policy Interpretation

This Privacy Policy is intended to explain Lellie's privacy practices in a clear and transparent manner.

Headings are provided for convenience only and do not affect the interpretation of this Privacy Policy.

If any provision of this Privacy Policy is determined to be invalid or unenforceable, the remaining provisions shall remain in full force and effect.

This Privacy Policy should be read together with Lellie's Terms of Service and any additional policies or notices made available through the Services.

26. Your Acknowledgment

By accessing or using the Services, creating an account, submitting personal information, or otherwise interacting with Lellie, you acknowledge that you have read and understand this Privacy Policy.

Where required by applicable law, you further acknowledge that you have been informed of how your personal information is collected, used, disclosed, retained, and protected as described in this Privacy Policy.

If you do not agree with this Privacy Policy, you should discontinue use of the Services.

27. Authorized Agents

Where permitted by applicable law, you may designate an authorized agent to submit certain privacy requests on your behalf.

Before fulfilling such a request, Lellie may require the authorized agent to provide documentation demonstrating their authority to act on your behalf, and we may require you to verify your identity directly with us.

Lellie reserves the right to deny requests where we are unable to verify the identity of the requester or the authority of the authorized agent.

28. Accessibility

Lellie is committed to making our privacy information accessible to all users.

If you require this Privacy Policy in an alternative format or need assistance understanding our privacy practices, please contact us using the information provided in this Privacy Policy, and we will make reasonable efforts to accommodate your request.

29. Data Breach Notification

If Lellie becomes aware of a security incident involving personal information that requires notification under applicable law, we will investigate the incident promptly and provide notice to affected individuals and regulatory authorities, where required.

The timing and content of any notification will be determined in accordance with applicable legal requirements and the nature of the incident.

30. Changes to Our Business

As Lellie grows, we may buy, sell, merge with, reorganize, or transfer parts of our business.

In connection with these transactions, personal information may be transferred as a business asset, subject to applicable confidentiality obligations and this Privacy Policy or a successor privacy policy providing substantially similar protections.

31. Data Minimization

Lellie strives to collect only the personal information reasonably necessary to provide, maintain, secure, and improve the Services.

We encourage users not to submit sensitive or unnecessary personal information unless specifically requested or required for the intended use of the Services.

32. Privacy by Design

Lellie is committed to incorporating privacy and security considerations throughout the design, development, and operation of the Services.

When developing new features, we endeavor to consider:

Data minimization;
Appropriate security safeguards;
User transparency;
Access controls;
Responsible data retention practices; and
Compliance with applicable privacy laws.

33. Contact Information

Questions, concerns, or requests regarding this Privacy Policy or Lellie's privacy practices may be directed to: