Privacy Policy

Vokari builds AI front desks and websites for salons and med spas. This policy explains what we collect, why, and how long we keep it.

There are two kinds of people this covers, and they are treated differently:

• Businesses who buy Vokari.
• Guests who talk to a Vokari concierge on a business's website or social media. Most people reading this are guests, so that part comes first.

What we collect. What you type, and what the concierge replies. If you give your name and contact details to request a call or a booking, we collect those too. Nothing else. We do not track you across other websites, we do not build an advertising profile, and we do not sell anything to anyone.

Why. So the business you contacted can answer you, follow up, and see whether their front desk is working.

How long. Conversation content is deleted automatically after 90 days. After that, only a record that a conversation happened remains: when it started, how many messages, and whether it led to a booking or a callback request. Not what was said.

If you gave contact details to request a call, those are a different thing and are kept on a different schedule. They go to the business as a lead, and the business keeps them for as long as it needs them to follow up with you. They are not deleted at 90 days along with the conversation.

Whether we store it at all is the business's choice. Each business decides whether their concierge keeps a record of conversations. Most do, because it is how they see what guests are asking and follow up properly. Where a business has turned it off, we keep only the counts and timestamps above and no message content ever reaches our database.

We tell you when it is on. Where a concierge records conversations, the page says so before you type. If you are on Instagram, the concierge identifies itself as automated at the start of the conversation.

You are talking to software. The concierge is an AI, not a person at the salon. It says so. You can always ask to reach a human, and it will tell you how.

Do not send us health information. The concierge is a front desk. It books appointments and answers questions about services and prices. Please do not send medical history, diagnoses, or health records through it. Where a business operates under HIPAA, protected health information belongs in their practice-management system, not on their marketing site or in a chat.

Sensitive service categories. Some clients offer medical aesthetic services. Asking about a service is not a medical record, and we do not treat it as one, but we also do not use it to target you with anything, because we do not target you with anything.

What we collect. What you tell us about your business: services, prices, your team, your hours, your photos, your booking link. Your account details. Anything you or we add to your business profile over time.

Some of this we gather from your own public website when we first research your business, before you are a customer. It is the same information any visitor to your site can see. If you would rather we did not hold it, ask and we will delete it.

Why. To build and run your website and your concierge.

How long. For as long as you are a client, and for a reasonable period after. Ask and we will delete it.

Your guests' data is yours. We hold it to run your service. We do not use it for anything else, we do not use it to build products for other businesses, and we do not sell it.

Who else sees it.

• Our hosting and database providers, who store the data so the service can run. They do not use it for their own purposes.
• The AI model provider that generates the concierge's replies. Conversation text is sent to generate a response.
• Meta, if you contacted a business through Instagram or Facebook. That conversation also lives in their systems under their own policy.
• Nobody else. We do not sell data, we do not share it with advertisers, and we do not have advertisers.

Cookies and tracking. Vokari sites do not run advertising trackers. A conversation with the concierge lives in your browser tab and is gone when you reload the page.

Security. Conversation content is stored in a database that the parts of our system handling live conversations can write to but cannot read back. Credentials are scoped to the narrowest thing each part of the system needs. This is a real design constraint in our code, not a slogan, but no system is perfectly secure and we will not claim otherwise.

Children. Vokari is not for children and we do not knowingly collect information from anyone under 13. If you believe a child has sent us information, contact us and we will delete it.

Your rights. Wherever you live, you can ask us what we hold about you, ask us to delete it, or ask us to correct it. Email daniel@vokari.ai and we will do it. Depending on where you live you may have further rights under local law; we will honor those too.

Changes. If this policy changes we will update the date at the top. If a change matters, we will say so rather than hoping you re-read it.

Contact. daniel@vokari.ai