Overday Labs, LLC (“Company,” “we,” “us,” or “our”) operates JustPop! (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully.
1. Information We Collect
1.1 Information You Provide
- Account Information: Email address, name, phone number, and password when you create an account
- Business Information: Business name, logo, website URL, description, service offerings, operating hours, and brand preferences
- Booking Information: When customers book appointments through JustPop!, we collect their name, email address, phone number, appointment details, and any notes or intake form responses provided during the booking process
- Payment Information: Billing details processed through our payment provider, Stripe (we do not store your full credit card number)
- Content: Images you upload, posts you create, captions, and any text or prompts you provide
- Communications: Messages you send to us for support or feedback
1.2 Information Collected Automatically
- Usage Data: How you interact with the Service, features you use, and content you generate
- Device Information: IP address, browser type, operating system, and device identifiers
- Cookies and Similar Technologies: We use cookies and similar tracking technologies to maintain your session and improve the Service
- Advertising Attribution: When a business uses our managed advertising services, we collect click identifiers and referral information on ad-driven visits to that business's website and booking pages so the business can see which bookings came from its ads
- Call Tracking: Businesses using our managed advertising services may display a tracking phone number in their ads. When you call a tracking number, we collect the call time, duration, and caller phone number, and forward the call to the business. We do not record call audio
1.3 Information from Third Parties
- Social Media Platforms: When you connect Instagram, Facebook, or other platforms, we receive access tokens and basic account information necessary to post on your behalf
- Connected Messaging Accounts: For a business using our Meta messaging integration, we receive customer-initiated Instagram or Facebook messages, account and sender identifiers, message times, and referral or ad information supplied by Meta. If a person voluntarily includes a phone number, we use it to support staff follow-up and match the inquiry to a booking. Authorized salon staff can view the inquiry; replies happen in Instagram or Meta Business Suite.
- Analytics Providers: We may receive analytics data about Service usage
2. How We Use Your Information
We use your information to:
- Provide the Service: Facilitate online booking, manage appointments, generate AI content, publish posts to your social media accounts, and manage your subscription
- Process Payments: Handle subscription billing and credit purchases through Stripe
- Send Booking Communications: Deliver booking confirmations, appointment reminders, cancellation notices, reschedule updates, and no-show alerts via SMS and email
- Improve the Service: Analyze usage patterns to enhance features and user experience
- Communicate with You: Send service-related notifications, respond to inquiries, and provide customer support
- Ensure Safety: Detect and prevent fraud, abuse, and violations of our Terms of Service
- Legal Compliance: Comply with legal obligations and respond to lawful requests
3. SMS Communications
When a customer provides their phone number during the booking process, they may receive SMS notifications about that appointment. Messages are sent by JustPop! on behalf of the business the customer booked with. Consent for appointment-related messages is obtained via a clear disclosure displayed alongside the phone number field at the time of scheduling; consent for marketing messages (such as openings and offers) is obtained separately via an unchecked checkbox and is never required to book. Appointment-related messages include:
- Booking confirmations
- Appointment reminders
- Cancellation and reschedule notifications
- No-show alerts
Message frequency varies based on booking activity. Message and data rates may apply. Consent to receive SMS is not a condition of booking an appointment.
Opt-out: You can opt out of SMS notifications at any time by replying STOP to any message. After opting out, you will no longer receive text messages from JustPop! You may still receive booking-related communications via email.
Help: For help with SMS notifications, reply HELP to any message or contact us at support@justpop.io.
We do not share your phone number with third parties for their marketing purposes. Phone numbers support appointment-related communications and booking matching. For businesses using advertising measurement, hashed contact identifiers may also be used as described below.
4. AI Processing and Third-Party Services
Important: To generate content, we transmit your prompts, business information, and uploaded images to third-party AI service providers. These providers process your data according to their own privacy policies and data handling practices.
We use third-party service providers for the following purposes:
- AI and Machine Learning: Image and text generation
- Cloud Infrastructure: Vercel hosts our application and processes incoming integration events and operational logs.
- Payment Processing: Subscription billing and transactions
- Database Services: Supabase stores and manages application records, including connected-account identifiers and message inquiry records.
- Product Analytics: PostHog provides usage analytics, error reporting, and session recordings. The restricted reviewer demo omits these analytics providers, and the message inquiry card is excluded from PostHog autocapture and recording.
- Social Media Platforms: Publishing content to your connected accounts (e.g., Instagram, Facebook, LinkedIn, X, Threads)
- SMS and Communications: Twilio processes phone numbers and communication content for booking-related text messages and notifications. Our Meta webhook does not forward raw Instagram transcripts to Twilio.
We select service providers that maintain appropriate security standards, but we cannot guarantee the security practices of third parties.
Advertising measurement
For businesses using Meta advertising measurement, completed booking events may be sent to Meta with booking value and hashed contact identifiers to match conversions and measure advertising. Hashing does not make these identifiers anonymous. Raw message transcripts are not included in these conversion events. You can request deletion of connected-message data using our data deletion instructions.
5. How We Share Your Information
We may share your information in the following circumstances:
- Service Providers: With third-party vendors who help us operate the Service (as described above)
- Social Media Platforms: Content you choose to publish is shared with connected platforms
- Legal Requirements: When required by law, subpoena, or legal process
- Safety: To protect the rights, property, or safety of our users or others
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- With Your Consent: When you explicitly agree to share your information
We do not sell your personal information to third parties.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. We retain generated content and usage data for a reasonable period to support the Service and comply with legal obligations.
After account deletion, we may retain certain information as required by law or for legitimate business purposes (such as resolving disputes or enforcing our Terms). Backup copies may persist for a limited time.
7. Data Security
We implement reasonable technical and organizational measures to protect your information, including encryption in transit and at rest, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Your Rights and Choices
Depending on your location, you may have the following rights:
- Access: Request a copy of your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request your data in a portable format
- Opt-Out: Unsubscribe from marketing communications
- Withdraw Consent: Where processing is based on consent, withdraw it at any time
To exercise these rights, contact us at support@justpop.io. We will respond within the timeframe required by applicable law.
9. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the “sale” of personal information. We do not sell personal information as defined by the CCPA.
10. International Data Transfers
Your information may be transferred to and processed in countries other than your own, including the United States, where data protection laws may differ. By using the Service, you consent to such transfers.
11. Children's Privacy
The Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child under 18, we will delete it promptly.
12. Cookies and Tracking
We use cookies and similar technologies to maintain your login session, remember preferences, and analyze Service usage. You can control cookies through your browser settings, but disabling them may affect Service functionality.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last Updated” date. Your continued use of the Service after changes constitutes acceptance.
14. Contact Us
If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:
Email: support@justpop.io
Company: Overday Labs