Privacy Policy

We process salon profile details, services, availability, owner account information, and customer contact and appointment information supplied through Luster.

Customer phone numbers are contact information and are not treated as verified identity. Transactional texting is optional and requires separate consent.

When a salon owner connects Google Calendar, Luster stores the connected account email and Google account identifier and reads the list of calendars the owner can access. The owner chooses which calendar receives Luster appointments and which calendars Luster checks for booking conflicts.

For those selected calendars, Luster reads free/busy time and event information made available by Google, such as event title, date and time, description, location, status, and attendee or client contact details when present in event data. Luster stores the event information in the salon workspace to display the schedule, let the owner review or convert selected events, and keep Luster-linked appointments synchronized when they change in either system.

Google refresh tokens are encrypted at rest. Access is scoped to the connected salon, and Calendar data is not sold, transferred for advertising, or used to train generalized artificial intelligence or machine learning models.

To protect sensitive information, including Google user data, Luster uses HTTPS (TLS) to encrypt data in transit between your browser and our production service, and between Luster and Google’s OAuth and Calendar APIs.

Google OAuth refresh tokens are encrypted with AES-256-GCM authenticated encryption before they are stored in our database. The encryption key is kept in server configuration separately from the stored tokens. Refresh tokens are decrypted only in server-side integration code when needed for the Google connection; they are not sent to public booking pages.

Server-side authentication and salon-specific authorization checks protect integration settings and synchronized Google event details. Calendar connections and synchronized event records are associated with the connected salon, and access is checked against the signed-in user’s permission to manage that salon. The Google connection also uses signed, expiring authorization state to reject tampered or expired authorization responses.

Optional customer and owner text assistants use OpenAI to understand messages and help with services and settings. Messages you enter, relevant prior AI conversation, and salon service or setup information may be sent to OpenAI for that purpose. You can use ordinary online booking without the assistant.

Luster calculates appointment availability on its own server using salon rules, appointments, and connected Google Calendar conflicts. Luster does not include application-controlled Google Calendar events, busy windows, calculated openings, selected appointment times, or booking confirmations in these text assistants’ model requests. Availability previews and booking selections, reviews, and confirmations are handled separately by Luster.

If you independently type or paste scheduling or other personal information into chat, that message may still be sent to OpenAI. Luster cannot reliably identify the source of arbitrary messages. Avoid including sensitive information in chat.

The AI phone receptionist and owner microphone sandbox are retired. This change does not erase historical conversations, call summaries, previously issued provider sessions, or provider records. Luster requests no stored response application state for its text assistant calls; that setting does not guarantee zero provider retention. Other provider security and abuse-monitoring retention may apply. Luster does not use Google Calendar data to train generalized AI or machine learning models.

Luster’s use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

For owner-connected Calendar accounts, Luster requests separate permissions to list calendars without changing them, read free and busy time, and read and synchronize event information on calendars the owner selects. Google’s event permission covers calendars accessible to the connected account; Luster uses the calendar selections described above. Luster does not request Google’s full Calendar scope for this OAuth connection.

Human access to Google user data is limited to the cases the Limited Use requirements permit: with the owner’s explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymized for internal operations.

A salon owner can disconnect Google Calendar at any time from the Luster workspace. Disconnecting asks Google to revoke Luster’s access and removes the stored OAuth connection, refresh token, connected account email, and connected account identifier. Calendar event information already synchronized into the salon workspace is not automatically removed when the connection is disconnected.

Owners may also revoke Luster’s access directly from their Google Account permissions page. To request deletion of a Luster workspace and the salon records associated with it, email support@lustergel.app.

Information is used to provide bookings, salon CRM tools, reminders, appointment management links, security, support, and integration health. Luster product marketing to owners requires separate consent.

Luster uses infrastructure and account, email, Calendar, and optional messaging providers only as needed to operate the service. Access tokens, passwords, session cookies, and appointment capability tokens are never exposed through public salon APIs.

Information is retained only as long as needed for the service, legal obligations, security, and legitimate salon records. Owners may disconnect Google Calendar at any time from their Luster workspace.

Salon owners can update salon information, disconnect integrations, and request account or data support. Customers can use their secure appointment-management link to reschedule or cancel without creating an account.