Privacy Policy

Bookluxe ("Bookluxe," "we," "us," or "our") is owned and operated by Toxic AI Labs, LLC, a Nevada limited liability company based in Las Vegas, Nevada. This Privacy Policy describes how we collect, use, disclose, and safeguard information when you use Bookluxe (bookluxe.com) and its associated mobile and web applications (the "Services").

This Privacy Policy applies to both Clients (individuals who search for and book appointments) and Businesses (spas, salons, and similar providers that list services and accept bookings), and is incorporated into our Terms of Service.

If you have questions about this Privacy Policy, contact us at info@bookluxe.com.

2.1 Information Clients Provide

• Account Information: name, email address, phone number, password, and profile photo (optional).
• Booking Information: appointment details, service preferences, staff preferences, appointment history, and notes you provide to a Business.
• Payment Information: billing details processed via our third-party payment processor for deposits, prepayments, or service payments (we do not store full payment card numbers on our own servers).
• Communications: messages you send to Businesses or to Bookluxe support, and any content of reviews you submit.
• Location Information: if you enable location services, approximate or precise location to help you find nearby Businesses.

2.2 Information Businesses Provide

• Business Account Information: business name, address, contact details, tax/business identifiers, staff names and schedules, service menus, pricing, and photos.
• Client Records Managed Through Bookluxe: names, contact information, appointment history, notes, and preferences that a Business enters or imports about its own clients.
• Payment and Payout Information: bank account or payout details processed via our third-party payment processor.
• Licensing/Credential Information: where requested, information relating to professional licenses, certifications, or insurance.

2.3 Information Collected Automatically

• Usage Data: pages and screens viewed, features used, search queries, booking flow interactions, and timestamps.
• Device and Log Data: IP address, device identifiers, browser or app version, operating system, and crash/error logs.
• Cookies and Similar Technologies: as described in Section 8.

2.4 Information from Third Parties

• Information from third-party sign-in providers (e.g., Google or Apple sign-in), if you choose to register that way.
• Information from payment processors necessary to complete transactions.
• Information from calendar, messaging, or marketing integrations that a Business chooses to connect to its account.

We use the information we collect to:

• Provide and operate the Services, including enabling Clients to search for, book, and manage appointments, and enabling Businesses to manage their calendars, staff, and client relationships;
• Process payments, deposits, and payouts;
• Send booking confirmations, reminders, rescheduling notices, and other transactional communications;
• Send marketing communications where you have opted in, or as otherwise permitted by law;
• Facilitate communication between Clients and Businesses regarding bookings;
• Personalize search results and recommendations (e.g., suggesting nearby or previously booked Businesses);
• Monitor, analyze, and improve the performance, security, and usability of the Services;
• Detect, investigate, and prevent fraud, abuse, no-show patterns, and other harmful or unlawful activity;
• Comply with legal obligations and enforce our Terms of Service;
• Facilitate a merger, acquisition, financing, or sale of assets involving Bookluxe or Toxic AI Labs, consistent with our business model of developing and, where applicable, transferring software products.

4.1 Between Clients and Businesses

When you book an appointment, we share the information necessary to fulfill that booking between you and the Business — for example, a Client’s name, contact information, and booking details are shared with the Business, and a Business’s listing, staff, and availability information is shared with Clients. Businesses are independent third parties responsible for their own use of Client information in accordance with applicable law and our Terms of Service.

4.2 Service Providers

We share information with third-party vendors who perform services on our behalf, including payment processing, hosting, analytics, customer support tooling, and SMS/email delivery, under contractual confidentiality and data protection obligations.

4.3 Integrated Third-Party Platforms

Where a Business connects a third-party platform (e.g., calendar sync, accounting, or marketing tools) to its Bookluxe account, relevant information may be shared with that platform as necessary to provide the connected functionality, subject to that platform’s own privacy practices.

4.4 Legal Reasons

We may disclose information where required to comply with applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Bookluxe, Toxic AI Labs, our users, or others.

4.5 Business Transfers

We may share information in connection with, or during negotiations of, any merger, sale of company assets, financing, acquisition, or transfer of all or a portion of our business, consistent with Toxic AI Labs’ business model of developing and transferring software products and brands.

4.6 With Your Consent

We may share information for any other purpose disclosed to you at the time of collection, or with your consent.

We do not sell personal information for money. To the extent certain data sharing (such as with advertising partners, if used) may constitute a "sale" or "share" under applicable state law, you may exercise the rights described in Section 6.

We retain personal information for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce our agreements. Client booking history is generally retained for the life of the applicable Business account (so Businesses can maintain client records) and for a reasonable period thereafter for backup and legal purposes, unless you request deletion in accordance with Section 6 and no legal or contractual obligation requires continued retention.

Depending on your location, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — request correction of inaccurate or incomplete information;
• Deletion — request deletion of your personal information, subject to certain exceptions (e.g., records a Business is required to retain);
• Portability — request a copy of your information in a portable format;
• Opt-Out of Marketing — unsubscribe from marketing communications at any time via the link provided or by contacting us; note that you cannot opt out of essential transactional messages tied to an active booking;
• Opt-Out of Sale/Sharing/Targeted Advertising — to the extent applicable under laws such as the CCPA/CPRA, opt out of the "sale" or "sharing" of personal information or its use for cross-context behavioral advertising;
• Non-Discrimination — you will not receive discriminatory treatment for exercising your privacy rights.

How to Exercise Your Rights: Submit a request to info@bookluxe.com. If your request concerns Client data held in a Business’s account, we may direct your request to that Business or assist the Business in responding, since the Business controls its own client records. We will verify your identity before fulfilling applicable requests and will respond within the timeframe required by applicable law.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf, subject to our ability to verify the agent’s authority and your identity.

6.1 Nevada Residents

Nevada law permits residents to opt out of certain sales of "covered information" under Nevada Revised Statutes Chapter 603A. We do not currently sell covered information as defined under Nevada law; you may still submit a request to info@bookluxe.com.

6.2 California Residents

If you are a California resident, see the rights listed above under the CCPA/CPRA. In the preceding 12 months, we may have collected the categories of personal information described in Section 2 for the business purposes described in Section 3. We have not sold personal information for monetary consideration; certain third-party integrations described in Section 4 may constitute "sharing" for cross-context behavioral advertising, which you may opt out of by contacting us.

6.3 Other Jurisdictions

If you are located in the European Economic Area, United Kingdom, Canada, or another jurisdiction with its own data protection framework, you may have additional or different rights under applicable law (such as the GDPR or PIPEDA). Contact us at info@bookluxe.com to make a request.

If you are a Business using Bookluxe to manage your own clients, you are responsible for:

• Providing any notices and obtaining any consents required by applicable law before entering client information into Bookluxe or sending clients marketing communications;
• Using client information only for legitimate business purposes related to servicing your clients;
• Responding to or forwarding to us, as appropriate, any privacy rights requests you receive directly from your clients;
• Complying with applicable health, beauty industry, and consumer protection laws regarding client records.

With respect to client data you manage through Bookluxe, Toxic AI Labs acts as a service provider/processor and processes such data according to your configuration and instructions within the platform.

We and our service providers use cookies, SDKs, and similar technologies to operate the Services, remember preferences, analyze usage, and support any marketing features. You can control cookies through your browser or device settings; disabling them may affect functionality. Where required by law, we will present a consent mechanism for non-essential cookies.

We implement commercially reasonable administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, or destruction, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We are based in the United States, and information is processed and stored in the United States and other jurisdictions where our service providers operate. If you access the Services from outside the United States, your information will be transferred to and processed in the United States, which may have different data protection laws than your home jurisdiction. Where required, we implement appropriate safeguards for such transfers.

The Services are not directed to individuals under 18, and we do not knowingly collect personal information from children. If we become aware that we have inadvertently collected information from a child under 18, we will delete it promptly. Contact us at info@bookluxe.com if you believe we have collected such information.

The Services may link to or integrate with third-party websites, payment processors, or tools. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will post the revised policy with an updated "Last Updated" date and, for material changes, provide additional notice as required by applicable law. Your continued use of the Services after the effective date of the revised policy constitutes acceptance of the changes.

Bookluxe, operated by Toxic AI Labs, LLC, Las Vegas, Nevada. Email: info@bookluxe.com.