Privacy Policy

1. Introduction

Noyla Labs, LLC (www.noylalabs.com) ("Noyla Labs," "we," "our," or "us") operates the BKDUP platform ("the Service"), a booking, scheduling, and business management platform for salons, spas, yoga studios, pilates studios, and similar service-based businesses. We are committed to protecting the privacy and security of all individuals who use our Service, including business operators, their staff, and their customers.

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access or use the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

Personal Information You Provide

We collect personal information that you voluntarily provide when you register for an account, use our features, or communicate with us, including:

• Contact information: name, email address, phone number
• Business information: business name, address, type of business, staff details
• Booking and appointment data: service selections, appointment dates and times, booking preferences, notes
• Client records: client names, contact details, service history, and preferences (managed by business operators)
• Payment information: billing details processed securely through Stripe; we do not store credit card numbers or sensitive payment card data on our servers
• Communications: messages sent through the platform, support requests, and feedback
• Account credentials: login information and authentication data

Automatically Collected Information

When you access the Service, we may automatically collect certain information, including:

• Device information: browser type and version, operating system, device type
• Network information: IP address, approximate geographic location
• Usage data: pages visited, features used, time spent on the platform, clickstream data
• Cookies and similar technologies: session identifiers, preferences, and analytics data (see Section 9)

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: operating, maintaining, and delivering the features of the platform, including booking, scheduling, client management, and POS functionality
• Processing transactions: handling subscription billing and facilitating payment processing between businesses and their clients
• Communications: sending appointment reminders, booking confirmations, system notifications, and support responses
• Improvement and analytics: analyzing usage patterns to improve the Service, develop new features, and optimize the user experience
• Security and fraud prevention: detecting, preventing, and addressing technical issues, fraud, and abuse
• Legal compliance: complying with applicable laws, regulations, and legal processes

4. We Do Not Sell Your Information

Noyla Labs will never sell, rent, lease, or trade the personal information of our users — including business operators, their staff, and their customers — to any third party, for any reason, under any circumstances.

We do not share your personal information with third parties for their marketing purposes or for any non-operational purpose. Your data is yours. We collect and process it solely to provide and improve the Service you have chosen to use.

The limited service providers who assist us in operating the platform (such as payment processors and email delivery services) receive only the minimum data necessary to perform their specific functions, and they are contractually obligated to protect your information and prohibited from using it for any other purpose.

5. Information Sharing

We may share your information only in the following limited circumstances:

• Service providers: trusted third parties who assist us in operating the Service, including Stripe (payment processing), Resend (email delivery), Telnyx (SMS messaging), and cloud infrastructure providers. These providers are bound by confidentiality obligations and may only use your data as necessary to provide services to us.
• Business-customer relationship: when you book an appointment or interact with a business on the platform, your relevant booking and contact information is shared with that business to facilitate the service.
• Legal requirements: when we believe disclosure is necessary to comply with applicable law, regulation, legal process, or governmental request; to enforce our Terms of Service; to protect our rights, privacy, safety, or property; or to respond to an emergency involving the safety of any person.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will provide notice before your personal information becomes subject to a different privacy policy.
• Mobile information: No mobile information will be shared with third parties/affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

6. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal information:

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete personal information
• Deletion: request deletion of your personal information, subject to certain legal exceptions. We will process deletion requests within 30 days.
• Data portability: request a machine-readable copy of your data for transfer to another service
• Opt-out of marketing: unsubscribe from marketing communications at any time by clicking the unsubscribe link in any marketing email or by contacting us directly. Note that you may still receive transactional communications related to your account and bookings.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption: data in transit (TLS/SSL) and at rest
• Access controls: role-based access controls and authentication
• Security monitoring: regular security assessments and monitoring
• Infrastructure security: secure cloud infrastructure with reputable providers

However, no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee absolute security.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. When your data is no longer needed, we will securely delete or anonymize it.

If you request deletion of your account, we will delete your personal information within 30 days, except where we are required to retain certain data by law or for legitimate business purposes (such as resolving disputes or enforcing agreements).

9. Cookies

The Service uses cookies and similar technologies to provide and improve the platform:

• Essential cookies: required for the Service to function, including session management and authentication. These cannot be disabled.
• Analytics cookies: help us understand how users interact with the Service so we can improve the experience. These do not identify you personally.

You can control and manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Service.

10. Third-Party Services

The Service may contain links to third-party websites or services that are not owned or controlled by Noyla Labs. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through the platform. Our Privacy Policy applies only to the BKDUP Service.

11. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to promptly delete that information. If you believe we may have collected information from a child under 13, please contact us at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date at the top. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

• Email: [email protected]
• Operator: Noyla Labs, LLC (www.noylalabs.com)