Privacy Policy

This Privacy Policy applies to the SendLynx service ("SendLynx," "we," "us," or "our"), operated by Austin Lutz LLC, a North Carolina limited liability company. References to "we" or "SendLynx" mean Austin Lutz LLC. You can reach us at hello@sendlynx.com. We try to keep this policy short and plain.

Our role: two kinds of data, two roles

(1) Business-account data (the business owner's own name, email, login, and billing) — here SendLynx acts as the controller (a "business" under the CCPA), and the rights below apply to you directly. (2) End-client booking data (the information a business's customers enter to book) — here SendLynx acts only as a processor/service provider on the business's behalf and processes that data solely on the business's documented instructions, for the limited purpose of providing the Service. SendLynx does not sell, share, retain, use, or disclose end-client data for any other purpose. The business that collected the data is the controller responsible for it; end clients should direct privacy requests (access, deletion, correction) to that business, which we will support as the business directs.

What we collect

From business owners: your name, email, business details, and login credentials. From your clients: the name, email, phone, and notes they enter when booking, plus their appointment history. Usage data: basic logs needed to run and secure the Service.

How we use it

To run your booking page, send confirmation and reminder emails on your behalf, enable your clients to pay deposits through Stripe directly to your own connected account (SendLynx does not handle or hold these funds), show you your dashboard, and keep the Service secure. We don't sell your data, and we don't use your clients' data for our own marketing.

Google Calendar and Google API Services (Limited Use)

If you choose to connect a Google Account, SendLynx accesses your Google Calendar solely to make booking and availability work. Specifically, we read the start and end times and busy/free status of events on the calendar(s) you select — not their titles, descriptions, attendees, or other contents — so your booked times aren't double-booked, and we create, update, and delete the calendar events that mirror the appointments you take through SendLynx. We request the narrowest scopes needed for this, and you can disconnect Google Calendar at any time in Settings, which immediately stops all access and deletes the stored connection.

SendLynx's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the calendar-sync and availability features you enabled, to keep the Service secure, and to comply with law.

We do not transfer, share, or make Google user data available to any artificial-intelligence or machine-learning model or service, and we do not use Google user data to develop, train, or improve any AI/ML model. This includes the SendLynx Agent, our AI voice receptionist offered in partnership with Quickflo: the Agent does not receive your Google Calendar data. It creates bookings and reads only your SendLynx availability through the SendLynx API — your Google Calendar contents stay within SendLynx and are never sent to the Agent, to Quickflo, or to any other AI-powered service. We also do not sell Google user data, use it for advertising, or transfer it to third parties except our hosting and infrastructure sub-processors that process it only on our behalf to operate the sync, or where required by law.

Service providers and sub-processors

We use vetted service providers (sub-processors) to operate the Service, currently including Stripe (payment processing to the business's own connected account; SendLynx never holds, touches, or transmits client funds), Resend (email), Twilio (text messaging), Neon (database hosting), and Vercel (application hosting). Each is bound by contract to process personal information only to provide its service to us and is prohibited from selling it or using it for its own purposes. This is a service-provider relationship, not a sale or share of personal information. We may add or change providers as the Service evolves; contact hello@sendlynx.com for the current list. We may also disclose information if required by law.

We do not share mobile phone numbers or SMS consent with third parties or affiliates for marketing or promotional purposes. Phone numbers collected for text messaging are used only to deliver the appointment messages a client opted into, through our messaging provider.

Sale, sharing, and targeted advertising

We do not sell your personal information, and we do not share it for cross-context behavioral (targeted) advertising, as those terms are defined under California, Virginia, and Colorado law. We do not use personal information for profiling that produces legal or similarly significant effects, and we do not use sensitive personal information for any purpose other than providing and securing the Service. Because we do not sell or share, no "Do Not Sell or Share My Personal Information" link is required; if this ever changes, we will update this policy and provide one.

Text messages (SMS)

If a business has texting enabled, a client may choose to receive appointment text messages by checking the SMS consent box on that business's booking page. The box is unchecked by default: opting in is an explicit, affirmative action, never automatic and never a condition of booking.

These messages are appointment-related: appointment confirmations, reminders for the appointment the client booked, and occasional reminders to rebook with that same business. Message frequency varies (typically 1 to 3 messages per appointment). Message and data rates may apply. A client can reply STOP at any time to opt out, or HELP for help. See our SMS Terms for the full opt-in details and disclosures.

Security and breach notification

We use reasonable administrative, technical, and physical safeguards designed to protect personal information; no system is perfectly secure. If we become aware of a security incident affecting personal information we process, we will notify the affected business (as the controller of its clients' data) without undue delay so it can meet its notification obligations, and, where we act as controller, we will notify affected individuals and authorities as required by applicable law.

Retention

We keep business-account data for as long as your account is active and for a limited period afterward as needed to comply with legal, tax, and accounting obligations (generally up to seven years for billing records), after which we delete or anonymize it. For end-client booking data, we retain it on behalf of the business for as long as the business's account is active or until the business instructs us to delete it; on account closure we delete or return it within a reasonable period, except records we must keep by law.

Your privacy rights (business-account holders)

Depending on your state (including California, Virginia, and Colorado), you may have the right to: access the personal information we hold about you; correct it; delete it; receive a portable copy; and opt out of any sale, sharing, or targeted advertising. We do not sell or share your personal information and do not use it for targeted advertising or for any "sensitive personal information" purpose beyond running the Service. We will not discriminate or retaliate against you for exercising these rights. To make a request, email hello@sendlynx.com; we will verify your identity and respond within the time the law requires (generally 45 days). You may use an authorized agent. If we deny your request, you may appeal by replying to our decision; if you are in Virginia or Colorado and remain unsatisfied, you may contact your state Attorney General. You can also access, correct, export, or delete your data from your dashboard. End clients who booked through a business should direct requests to that business.

Children

The Service is intended for businesses and adults. We do not knowingly collect personal information directly from children under 13, and we do not sell or share the personal information of anyone under 16. To the extent a business's booking page collects information relating to a minor, the business is the controller and is responsible for any required parental consent. If you believe a child's information has been provided to us, email hello@sendlynx.com and we will delete it.

Where we process data

SendLynx is operated from the United States, and personal information is processed and stored in the United States and other locations where our service providers operate. If you access the Service from outside the United States, you understand your information will be processed in the United States. A business that serves clients outside the United States is the controller of that data and is responsible for any cross-border transfer obligations that apply to it.

Disputes and contracting entity

The SendLynx product is operated by Austin Lutz LLC, a North Carolina limited liability company. Any dispute arising out of or relating to this Privacy Policy is governed by the Dispute Resolution, Binding Arbitration, Class Action Waiver, Jury Trial Waiver, Governing Law, Exclusive Venue, and Time-Limit provisions of our Terms of Service, which are incorporated here by reference.

Changes to this policy

We may update this Privacy Policy from time to time and review it at least once a year. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you. Continuing to use the Service after changes take effect means you accept the updated policy.

Contact

Privacy questions? Email privacy@sendlynx.com or hello@sendlynx.com.