Privacy Policy

Information we collect

• Account and business details: your name, email, phone number, business profile, address and account identifiers.
• Client and appointment records: contact details, bookings, services, notes, messages, consent records, reviews and the information submitted through a business’s forms. Some service forms ask about allergies, medical conditions or other health information. That information is available to the business providing the service.
• Payments and purchases: orders, receipts, refunds, subscriptions, revenue and payout information. Stripe processes payment and financial-account details. Marlo does not store full card numbers.
• Content you choose to add: photos, videos, files, digital products, course materials, form answers and signatures. We upload the content you select or submit, not your entire photo library or device files.
• Location: business and appointment addresses and their map coordinates. With device permission, location is also used by Stripe for in-person payment security and regulatory requirements. We do not request background location tracking.
• Device and service data: account and device identifiers, push-notification tokens, payment interaction data, and crash and performance diagnostics. We configure diagnostics to remove common personal information and disable screenshots and screen recordings.
• Support: the messages and attachments you send when asking us for help.

How we use information

We use information to run accounts, bookings, messaging, forms, payments, digital purchases and downloads; provide support; prevent fraud; diagnose problems; and meet legal obligations. Information is linked to an account or transaction where needed to provide these services.

Who receives information

The business you book or buy from receives the information needed to serve you. Information a business publishes, such as its profile, service photos and approved reviews, is visible on its public pages. A review or photo may also be shared outside Marlo by that business.

Our service providers include Supabase for authentication, databases and file storage; Vercel for website hosting; Stripe for payments and fraud prevention; Twilio for messaging; Expo and Apple or Google for push notifications; and Sentry for crash and performance diagnostics. Account and service emails are handled through our authentication and email-delivery providers. They process information needed to provide their services. We may also disclose information when required by law or in connection with a business transfer.

Optional connections

If Instagram messaging is available and you connect a professional account, Meta provides the account information, messages and media covered by the permissions you approve. You can disconnect in Chat → Settings → Instagram. This is separate from adding an Instagram profile link to your public page. If you apply a partner or sponsor code, the partner can see your public business name and whether your Marlo subscription is paying, not your contact details, client records or individual payments.

AI features

Ask Marlo and AI-assisted text drafts use OpenAI through Marlo’s server. Business insights use a selected question and summary totals such as revenue, appointment counts and client counts. Text drafts use the business name and selected campaign goal. These features do not send client lists, client contact details, individual appointment records or message conversations to OpenAI.

The app asks for permission before sending an AI request. Declining leaves the rest of Marlo available, including writing your own text. OpenAI processes the request under its privacy policy. Do not add private client information to your business name or other public business content.

Device permissions

Photos and files are selected through your device’s pickers. Camera access is used only if you choose to take a photo. Notifications are optional. Location is requested when needed for in-person payments. Supported payment readers may also require Bluetooth or local-network access. You can change device permissions in Settings; declining a permission can limit the feature that needs it. Marlo does not use the microphone to record you, read your device’s contacts, or track your activity across other companies’ apps for advertising.

No sale or advertising tracking

We do not sell personal information or share it for cross-context behavioral advertising. We never share mobile opt-in information or SMS consent with third parties or affiliates for their own marketing or promotional purposes.

Cookies and local storage

Our websites and app use cookies and local storage for sign-in, preferences and service operation. Payment and other service providers may use their own storage for security and functionality. You can clear or block browser storage, but some features may stop working.

Retention and security

We keep information while it is needed to operate the service and meet legal, payment, fraud-prevention or dispute obligations. Deleting an account removes its active Marlo data, subject to those obligations and records held separately by payment or other service providers. We use access controls and other technical measures to protect information; no system can guarantee absolute security.

Your choices and deletion

You can update your business information in the app. To delete your provider account, open More → Settings → Delete account. See our data-deletion instructions, or email support@joinmarlo.com for access, correction or deletion requests. Clients can contact the business holding their appointment or service records, or contact us for help with records in Marlo.

Reply STOP to opt out of SMS. You can turn off push notifications in your device settings. Email marketing campaigns are not currently offered as a launch feature; account, security and service emails are separate.

Children

Marlo’s business app is intended for adults and is not directed to children. If you believe a child’s information has been provided improperly, contact us so we can investigate.

Changes and contact

We update this page when our practices change. Questions or privacy requests can be sent to support@joinmarlo.com.