Zyloe logo
Zyloe

Privacy

Effective Date: May 7, 2026

Zyloe is a product operated by Yi Xing Tech Inc. and provides software for US spa and salon businesses.

Zyloe (“we,” “our,” or “us”) respects your privacy and is committed to protecting your personal information.

Information We Collect

We may collect:

Name

Email address

Phone number

Account authentication information

SMS opt-in consent status and related messaging preferences

How We Use Information

We use your information to:

Provide access to your account

Send one-time verification codes via SMS

Send essential security notifications

Send account-related notifications, customer support messages, onboarding updates, product updates, appointment-related updates, and promotional offers when you have opted in to receive SMS messages

Improve platform performance

SMS Data

If you provide your phone number and opt in to receive SMS messages from Zyloe, we may use your phone number to send recurring text messages, including account notifications, customer support messages, onboarding updates, product updates, appointment-related updates, promotional offers, and other messages related to your relationship with Zyloe.

Message frequency varies. Message and data rates may apply. You may opt out of SMS messages at any time by replying STOP. You may reply HELP for assistance.

SMS opt-in consent and phone numbers collected for SMS purposes will not be sold, rented, shared with third parties, or shared with affiliates for their own marketing purposes.

We do not:

Sell phone numbers

Rent phone numbers

Sell, rent, or share SMS opt-in consent

Share phone numbers with third parties or affiliates for their own marketing purposes

Share SMS opt-in consent with third parties or affiliates for their own marketing purposes

Data Security

We implement appropriate technical and organizational safeguards to protect your information.

Contact

For privacy-related questions: [email protected]
Google Business Profile privacy disclosure

Google Business Profile Disclosure

This disclosure applies when a merchant connects a Google Business Profile account to Zyloe.

Information We Access and Collect

  • Basic Google identity information made available through OAuth, including the Google account identifier, email address, display name, and profile image.
  • Account and location identifiers for connected Google Business Profile listings.
  • Business names, addresses, and profile information.
  • Reviewer display names, ratings, review text, and review timestamps.
  • Existing merchant replies associated with reviews.
  • OAuth access tokens, refresh tokens, and granted scopes.

How We Use

  • Authenticate the connecting merchant and associate the Google authorization with Zyloe.
  • Connect Google accounts and identify merchant locations.
  • Sync and display ratings and reviews inside Zyloe tools.
  • Generate suggested merchant replies for review and editing.
  • Publish a reply when a merchant submits it or, when the merchant enables AI auto-management, automatically publish replies to eligible positive reviews according to the merchant's settings.
  • Support maintenance, troubleshooting, abuse prevention, and account security.

AI-Assisted Processing

Zyloe may send the minimum review content required to contracted AI providers solely for classification and reply generation. These providers process the data only on Zyloe's instructions to deliver the requested service. Zyloe does not sell this data or use it for advertising or profiling.

Zyloe does not use Google APIs or Google-sourced data to create, train, facilitate, or distribute AI-generated non-consensual intimate imagery (AI NCII).

Service Provider Sharing

  • Zyloe shares only the minimum data required with contracted hosting, infrastructure, security, and AI service providers.
  • Those providers may process Google-sourced data only on Zyloe's instructions.
  • Zyloe does not permit providers to use Google-sourced data for advertising or profiling.

Limited Use Notice

Zyloe’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Storage and Security

  • OAuth tokens are encrypted at rest.
  • Data is transmitted over HTTPS.
  • Access is restricted to authorized personnel with a business need.
  • Google-sourced data is not sold and is not used for advertising.

Disconnecting and Deletion

  • Merchants can disconnect Google Business Profile from Zyloe at any time.
  • On disconnect, Zyloe clears the stored OAuth tokens and stops Google API access for that connection.
  • Merchants may also revoke Zyloe access from their Google account settings.
  • Previously synced reviews may remain in the merchant's Zyloe account history after disconnect.
  • Merchants can request deletion of Google-sourced data by contacting [email protected]. Zyloe verifies the requester's authority and completes applicable deletion or de-identification requests within 30 days.
  • Zyloe deletes or de-identifies Google-sourced data when it is no longer needed to provide the service.
  • Limited retention may apply when required for legal obligations, security, fraud prevention, or dispute handling.