Privacy Policy

Lobotix ("we," "us," "our") is an AI-powered marketing automation platform for businesses. This Privacy Policy explains how we collect, use, and protect your information when you use our Service at lobotix.com.

Account information. When you sign up, we collect your email address, business name, and payment information (processed by Stripe — we never see or store full card numbers).

API credentials. To connect integrations (Gmail, Gingr, Twilio, etc.), you provide API keys which we store encrypted. These are used solely to operate the Service on your behalf.

Customer data. Through your integrations (or a spreadsheet you import), we receive your customers' names, email addresses, phone numbers, and relevant business data (e.g., appointment history, visit counts, pet names and birthdays) in order to generate and send the campaigns you configure. This data is synchronized into our database so campaigns can be targeted and delivered, and is retained while your account is active — see Data Retention below.

Usage data. We collect logs of campaign runs, emails sent, and feature usage to operate the platform and calculate billing.

Support conversations. If you use the AI support chat, messages are sent to Anthropic's API and are subject to Anthropic's privacy policy. We do not store chat history.

Cookies and analytics. We use essential cookies for authentication. We do not use third-party advertising trackers.

Lobotix's use and transfer to any other app of information received from Google APIs — including raw or derived user data received from Google Workspace APIs — will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you connect Gmail, we request access solely to send the marketing campaigns you configure and to operate the features you explicitly request. Specifically, we affirm that:

• We only use Google user data to provide and improve the user-facing features you have requested.
• We do not transfer or sell Google user data to third parties for advertising, marketing, or other purposes.
• We do not use Google user data for serving advertisements.
• We do not use Google user data to determine credit-worthiness or for lending purposes.
• We do not allow humans to read Google user data unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and de-identified for internal operations.
• We do not use Google user data to develop, improve, or train generalized or non-personalized AI and/or machine learning models.

Lobotix sends SMS messages on behalf of the businesses that use the Service, delivered through our messaging provider, Twilio.

No mobile information is shared for marketing. No mobile information will be shared or sold to third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third party. Information may be shared with subcontractors who provide support services strictly necessary to deliver the messages you request (for example, our messaging carrier), and with no one else.

How consent is obtained. Phone numbers are collected by the business using the Service directly from its own customers — for example when a customer registers, books an appointment, or provides their number at the point of sale. Lobotix does not collect phone numbers directly from consumers, and does not buy, rent, or sell phone lists. The business is responsible for obtaining and maintaining consent before any message is sent.

Opting out. Recipients may reply STOP to any message to stop receiving messages, and HELP to request assistance. Opt-out requests are honored immediately and the number is excluded from all future sends. Recipients may also contact the business directly, or email lobotix.support@gmail.com.

Frequency and cost. Message frequency varies by business and campaign. Message and data rates may apply. Carriers are not liable for delayed or undelivered messages.

What we store. For messaging we store the recipient's phone number, opt-out status, and delivery logs (time sent, delivery result) in order to send the messages, honor opt-outs, and calculate billing.

• To operate and improve the Service
• To send campaigns on your behalf to your customers
• To calculate and process billing
• To send you transactional emails (account confirmations, payment receipts, billing alerts)
• To provide customer support
• To detect and prevent fraud or abuse

We do not sell your data or your customers' data to third parties. We do not use your data to train AI models.

We share data only with:

Stripe — for payment processing. Stripe's privacy policy applies to payment data.

Anthropic — for AI features (Setup Wizard, campaign generation, AI support). Your account data is sent to Anthropic's API to generate responses. Anthropic's privacy policy applies.

Supabase — our database and authentication provider. Data is stored in Supabase's infrastructure.

Vercel — our hosting provider. Requests are processed on Vercel's infrastructure.

Twilio — our SMS delivery provider. Recipient phone numbers and message content are transmitted to Twilio solely to deliver the messages you send. Twilio's privacy policy applies.

Each of these is a service provider acting on our instructions. We do not share data with any third party for that party's own marketing purposes.

We may share data if required by law, court order, or to protect the rights and safety of Lobotix or others.

As a Lobotix user, you are the data controller for your customers' personal data. We are a data processor acting on your instructions. You are responsible for having lawful bases (such as consent or legitimate interest) to send marketing communications to your customers. Lobotix provides unsubscribe infrastructure — it is your obligation to honor unsubscribe requests.

We retain your account data for as long as your account is active. Campaign run logs are retained for 12 months. If you delete your account, we will delete your data within 30 days, except as required by law or for fraud prevention.

We protect your data using industry-standard security measures including encryption at rest, encrypted API key storage, HTTPS for all connections, and access controls. However, no system is 100% secure. If you discover a security vulnerability, please report it to lobotix.support@gmail.com.

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to processing or request restriction
• Data portability

To exercise these rights, email lobotix.support@gmail.com. We will respond within 30 days.

If you are in the EU or UK, our lawful basis for processing your data is contract performance (to provide the Service you signed up for) and legitimate interests (fraud prevention, security). For marketing emails we send to you as a customer, the lawful basis is consent.

California residents have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To submit a request, contact lobotix.support@gmail.com.

The Service is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with their data, contact lobotix.support@gmail.com immediately.

We may update this Privacy Policy. We will notify you by email or in-app notice before material changes take effect. The effective date at the top of this page indicates when it was last updated.

For privacy questions or requests, contact us at lobotix.support@gmail.com.