Privacy Policy

Information you provide to LilyDesk

When you create a LilyDesk account you provide an email address and a password, and during setup you provide your business name and optional business contact details, logo and preferences. You may also add your name, display name and a profile picture.

Customer information stored by LilyDesk

LilyDesk users enter information about their own customers, which may include first and last name, phone number, email address, shipping address and free-text notes. This information is entered by the user, belongs to that user's workspace, and is only accessible to signed-in members of that workspace.

Order information

Orders may include an order number, title, collection, design description, customization details, notes, dates, status and reference photographs uploaded by the user.

Nail sizing and preferences

LilyDesk stores nail shape, length, tip brand and per-finger sizing for each customer, and keeps a copy of that sizing on each order so past orders remain accurate.

Payment tracking information

LilyDesk records order totals, payments received (amount, date and an optional note) and the remaining balance. This is internal bookkeeping only. LilyDesk does not process credit or debit card payments and does not collect card numbers or bank details.

Communications and email

When you send a customer email from LilyDesk, LilyDesk stores a record of that message — date and time, recipient address, subject, message text, the related customer and order, and the send status — so you have a history of your own customer communications. LilyDesk does not copy, download or display your mailbox.

Google User Data and Gmail Integration

• Connecting a Google account to LilyDesk is optional.
• LilyDesk uses Google OAuth to authorize access to your Google account.
• LilyDesk does not receive or store your Google password.
• LilyDesk requests access to identify the connected Google account (your Google account email address) and to send email through that account.
• LilyDesk uses that Gmail authorization for one purpose: to let you send customer communications you compose in LilyDesk from your own Gmail account.
• LilyDesk does not currently request permission to read, modify or delete your Gmail messages, and does not access Google Drive, Calendar or Contacts.
• Google authorization is handled by the Lovable connector service used by LilyDesk. Google access and refresh tokens are held by that connector service; LilyDesk stores only an encrypted reference to your connection, on the server, linked to your signed-in account. It is not exposed publicly or to other LilyDesk users.
• Google user data is not sold.
• Google user data is not used for advertising.
• Google user data is not transferred to unrelated third parties, except where necessary to provide the functionality you requested, to comply with applicable law, to protect against security issues, or as otherwise permitted by Google's policies.
• You can disconnect your Google account at any time in LilyDesk under Settings → Email, which revokes the connection and removes the stored reference.

LilyDesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Third-party services

LilyDesk is built and hosted on the Lovable platform, which provides the application hosting, the database and authentication, file storage and the connector service used for the Gmail integration. Google is used only for the optional Gmail integration described above.

Security

Access to LilyDesk requires signing in. Each workspace's records are separated at the database level, so one business cannot read another business's customers, orders, payments, files or communications. Passwords are handled by the authentication service and are not stored in LilyDesk's own tables. The stored reference to your Google connection is encrypted and readable only by server-side code. No online service can be guaranteed completely secure, and we do not claim protections beyond those described here.

Data retention

Information stays in LilyDesk until the user deletes it or asks for their workspace to be removed. Customers can be archived or, where no orders exist, permanently deleted from within the application. Disconnecting Google removes the stored connection reference but does not delete communication records you have already logged.

Your choices

You can edit or delete the information you have entered, change your business details and preferences, connect or disconnect Google at any time, and request deletion of your account by contacting us.

Contact

Questions about this policy can be sent to cinnamonlilynails@gmail.com. See also our Terms of Service.