Privacy Notice

Our business name is Stylo. Stylo is a trading name of Tolgay Demir, a sole trader based in the United Kingdom; Stylo is not a limited company and has no company number. Tolgay Demir, trading as Stylo, is the data controller for the personal data described in this notice. For questions about your data, contact us at tolgaydemir@icloud.com or by post at 191 Lytchet Way, EN3 5XU, United Kingdom.

• Account data: your name, email address and sign-in credentials (or the identifier from Google if you sign in with Google).
• Business listing data: for businesses — business name, type, address, phone number, opening hours, services, prices and photos you upload.
• Booking data: the service booked, appointment time, your name and phone number, and the visit address for mobile appointments.
• Reviews: your review text and the display name you choose.
• Reminder preferences: the tone and personal details you choose for AI-generated appointment reminders.
• Usage data: basic telemetry such as pages viewed and error reports, and device identifiers including your IP address.

Payment card details are collected by Paddle, our Merchant of Record, and are not stored by Stylo.

• To create and manage your account — contract performance.
• To publish listings and take bookings, and to send booking confirmations and reminders — contract performance.
• To generate AI appointment reminders from your preferences — contract performance, with safeguards described in section 4.
• To process subscriptions, invoices and refunds — contract performance; this is handled by Paddle.
• To keep Stylo secure, prevent fraud and fix problems — our legitimate interests.
• To improve the product — our legitimate interests.
• Service messages about your account or bookings — contract performance; marketing emails, if we ever send them, only with your consent, which you can withdraw at any time.

When you ask for a personalised appointment reminder, we send the booking details and your stated preferences to an AI model provider to generate the text. We send only what is needed, we do not use your data to train the provider's models, and generated reminders are shown only to you. You are responsible for the preferences you submit and should check reminders before using them.

• Service providers (subprocessors): our hosting and database provider, email delivery, error monitoring and analytics tooling.
• Paddle: our online reseller and Merchant of Record, which processes subscription payments, manages billing, handles tax compliance and provides invoices and receipts.
• AI provider: to generate appointment reminders, as described above.
• Professional advisers: lawyers and accountants, where needed.
• Authorities: where we are required by law, for example to prevent fraud or comply with a court order.

We never sell your personal data.

Some of the providers above are based outside the UK and EEA. Where personal data leaves the UK or EEA, we rely on safeguards such as the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or on adequacy decisions, to protect it.

We keep your data only as long as we need it: account and booking data while your account is active, then deleted or anonymised after 24 months of inactivity; invoices and payment records for the period required by tax law (currently 6 years); reviews until you or the account holder deletes them. When data is no longer needed, we delete it or anonymise it.

Under UK GDPR you have the right to access your personal data, have it corrected, have it erased, restrict or object to its processing, and receive a portable copy. Where we rely on consent, you can withdraw it at any time. To exercise any right, contact us through the app — we respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk), the UK's data protection regulator.

We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and row-level security in our database.

Stylo uses only essential cookies and similar storage needed to keep you signed in and keep the service secure. We do not currently use advertising or analytics cookies. If that changes, we will update this notice and ask for your consent where required.

We may update this notice from time to time. The latest version is always on this page, with the \u201clast updated\u201d date at the top.