Privacy Policy
Last updated: [DATE]
Vokari builds AI front desks and websites for salons and med spas. This policy explains what we collect, why, and how long we keep it.
There are two kinds of people this covers, and they are treated differently:
- Businesses who buy Vokari.
- Guests who talk to a Vokari concierge on a business's website or social media. Most people reading this are guests, so that part comes first.
If you talked to a concierge
What we collect. What you type, and what the concierge replies. If you give your name and contact details to request a call or a booking, we collect those too. Nothing else. We do not track you across other websites, we do not build an advertising profile, and we do not sell anything to anyone.
Why. So the business you contacted can answer you, follow up, and see whether their front desk is working.
How long. Conversations are kept for as long as the business is a Vokari client. We delete a conversation when you ask, or when the business stops being a client. We do not delete conversations automatically after a set time.
If you gave contact details to request a call or a visit, they go to the business as a request. The business keeps it for as long as it needs it to follow up with you. We keep our copy for as long as the business is a Vokari client, and delete it when you ask, or when the business stops being a client.
Whether we store it at all is the business's choice. Each business decides whether their concierge keeps a record of conversations. Most do, because it is how they see what guests are asking and follow up properly. Where a business has turned it off, we keep only counts and timestamps (when a conversation started, how many messages, and whether it led to a booking or a callback request) and no message content ever reaches our database.
We tell you when it is on. Where a concierge records conversations, the page says so before you type. If you are on Instagram, the concierge identifies itself as automated at the start of the conversation.
You are talking to software. The concierge is an AI, not a person at the salon. It says so. You can always ask to reach a human, and it will tell you how.
Do not send us health information. The concierge is a front desk. It books appointments and answers questions about services and prices. Please do not send medical history, diagnoses, or health records through it. Where a business operates under HIPAA, protected health information belongs in their practice-management system, not on their marketing site or in a chat.
Sensitive service categories. Some clients offer medical aesthetic services. Asking about a service is not a medical record, and we do not treat it as one, but we also do not use it to target you with anything, because we do not target you with anything.
If you are a Vokari client
What we collect. What you tell us about your business: services, prices, your team, your hours, your photos, your booking link. Your account details. Anything you or we add to your business profile over time.
Some of this we gather from your own public website when we first research your business, before you are a customer. It is the same information any visitor to your site can see. If you would rather we did not hold it, ask and we will delete it.
Why. To build and run your website and your concierge.
How long. For as long as you are a client, and for a reasonable period after. Ask and we will delete it.
Your guests' data is yours. We hold it to run your service. We do not use it for anything else, we do not use it to build products for other businesses, and we do not sell it.
Everyone
Who else sees it.
- Our hosting and database providers, who store the data so the service can run. They do not use it for their own purposes.
- The AI model provider that generates the concierge's replies. Conversation text is sent to generate a response.
- Meta, if you contacted a business through Instagram or Facebook. That conversation also lives in their systems under their own policy.
- Nobody else. We do not sell data, we do not share it with advertisers, and we do not have advertisers.
Cookies and tracking. Vokari sites do not run advertising trackers. What you type to a concierge is held in your browser tab while you use it and is cleared from your browser when you close the tab. If you prove who you are with a one-time code, your browser keeps an encrypted token for 30 days so that you are not asked again on that device, and clearing the site's data removes it.
Security. Conversation content is stored in a database that the parts of our system handling live conversations can write to but cannot read back. Credentials are scoped to the narrowest thing each part of the system needs. This is a real design constraint in our code, not a slogan, but no system is perfectly secure and we will not claim otherwise.
Children. Vokari is not for children and we do not knowingly collect information from anyone under 13. If you believe a child has sent us information, contact us and we will delete it.
Your rights. Wherever you live, you can ask us what we hold about you, ask us to delete it, or ask us to correct it. Email daniel@vokari.ai and we will do it. Depending on where you live you may have further rights under local law; we will honor those too.
Changes. If this policy changes we will update the date at the top. If a change matters, we will say so rather than hoping you re-read it.
Contact. daniel@vokari.ai
Vokari, [TODO: legal entity name if one exists], Pennsylvania, USA.