How Sonorch handles personal information.

Sonorch is a service operated by Lumoras LLC ("Lumoras", "we", "us"). This notice explains how Lumoras handles personal information across the Sonorch website, business accounts, configured voice receptionist services, the Sonorch POS register, and the Sonorch Kiosk app.

Information we receive

Website visitors may provide a name, email address, business name, phone number, industry, and message when requesting a demo or contacting Sonorch.

Business customers may provide account, billing, phone-routing, service, staff, operating-hours, scheduling, and integration configuration.

Business customers that use Sonorch for point of sale and booking keep their client list and appointments in Sonorch, such as each client's name, phone number, and appointment history. Sonorch holds this information on the business's behalf. The Sonorch POS register app section below describes what the register itself collects on a counter.

When a business enables the voice service, Sonorch may process caller identifiers, caller speech and transcript segments, appointment details, call status, and memory facts created from caller-provided information. The exact data depends on the business configuration and enabled features.

When a salon uses the Sonorch Kiosk app, a guest checking in enters their phone number. The Sonorch Kiosk app section below describes exactly what that involves.

How information is used

Information is used to respond to inquiries, operate and support the service, route and process calls, perform authorized scheduling actions, check guests in for their appointments, recognize returning callers, maintain service security, troubleshoot failures, and administer billing.

Connected social media accounts

A business customer can connect its own social media accounts (such as a Facebook Page, an Instagram professional account, or Threads) to publish marketing posts from the Sonorch dashboard. With the business's permission, Sonorch receives from those platforms only what this feature needs: the list of Pages or accounts the business manages (so it can choose which one to publish as), an access credential for the chosen account, and confirmation details for posts published through Sonorch (such as the post's link). Sonorch does not receive or store the business's social contacts, messages, followers, or friend lists. Posts are only ever published when a person at the business writes and approves them. Platform data is never sold or used for advertising, and disconnecting an account deletes the stored credential — see the Data Deletion Instructions.

The Sonorch POS register app

The Sonorch POS is the app a business runs on the counter, and on staff phones, to ring up sales, take payments, book appointments, and keep its client list. The business owns everything in it; Sonorch runs the app and holds the records on the business's behalf.

The business and its staff

• The account. An owner signs up with an email address and a business name, and each staff member has a name, a role, and a numeric PIN for the till. A tablet is connected to the business with a one-time code sent to the owner's email address, and Sonorch keeps a record of each connected device and a scrambled copy of the key it connects with.
• Photos. A member of staff can take or choose a photo for a product, a service, or a staff profile. The app uses the camera and the photo library only when somebody taps to add a photo.

Clients of the business

The register holds the business's client list: names, phone numbers, email addresses where given, appointment and visit history, loyalty points, and any notes staff add. Clients give this information to the business, not to Sonorch, and requests about it are answered by the business — see Deleting register information.

Sales and payments

• Sales. Every sale is recorded: what was bought, by whom where a client is attached, which staff member rang it, the tax, and how it was paid.
• Card payments. Card payments are taken by Zettle, a PayPal service, through its own card reader. Card numbers never reach Sonorch. What comes back and is stored against the sale is the outcome, the amount, and the card's brand.
• Location. When a customer pays by scanning a Venmo or PayPal QR code, the payment networks require the device's location before that code can be created, so the app asks for it at that moment. It is used for the payment and nothing else. The app never collects location in the background, and a business that does not use QR payments is never asked for it.
• Deposits and subscriptions. Card deposits or no-show fees taken through online booking are processed by Stripe on the business's own Stripe account. The business's own Sonorch subscription is also billed through Stripe, from a web browser rather than inside the apps.
• Text messages. Appointment confirmations, reminders, booking verification codes, and receipts a customer asks for at the counter are sent through Telnyx from the business's own number. A texted receipt goes to the number the customer gives, says which visit it was and what it cost, and may ask for a Google review of the business. See Text messages below.

Support screen sharing

If a business asks for help, a member of staff can start a support session from Settings → Help & support and read out a six-digit code. Only then, and only while a member of our support team is connected, does the register send a live picture of its screen so that we can see the problem. Nothing is recorded before somebody connects, a banner stays on screen for the whole session, and the business can stop it at any time. Sonorch cannot start one of these sessions on its own.

What the register does not do

The register app contains no advertising, no analytics, no attribution, no crash-reporting service, and no advertising identifier. The register does not track you: nothing it collects is linked with information from other companies for advertising, and nothing is shared with data brokers or sold. It does not read contacts, and it does not use location except for the QR payment described above.

Deleting register information

An owner can delete their account and close the business from Settings → Plan & billing in the register. A business on a paid plan closes at the end of the month it has already paid for, and one on a free trial closes at once. Closing signs everyone out, stops every register and tablet, and destroys the passwords on the account. Sales, payment, and tax records are kept because we are required to hold them, and the rest of the business is kept so that it can be reopened as it was left. To have client records or other information deleted, email contact@sonorch.ai. A client of the business should ask the business, since the client list belongs to it. See the Data Deletion Instructions.

The Sonorch Kiosk app

A salon can put the Sonorch Kiosk app on a tablet in its lobby so that guests with a booking can check themselves in. The salon chooses to use the kiosk and owns its client list; Sonorch runs the app and holds the information on the salon's behalf.

Guests

• What you enter. Your phone number. The kiosk sends it to the salon's Sonorch account, which uses it only to find today's appointment and to tell the front desk that you have arrived.
• What the kiosk shows. If the number belongs to one of the salon's clients, the kiosk shows the name on that record, today's appointment, and that client's visit history and loyalty points, so you can confirm it is you.
• What is kept. Looking up a number keeps nothing. When you check in, the salon's arrival list records your name, the phone number you entered, the size of your party, and the time you arrived. That record is kept as part of the salon's records, including after the salon stops using Sonorch, until the salon asks for it to be deleted.
• What stays on the tablet. Nothing about you. The screen clears after every guest, and the app stores only its own pairing key and display theme on the tablet.

Salon owners

• Pairing. To connect a tablet, an owner enters the email address on their Sonorch account. Sonorch uses it to send a one-time code that expires after 10 minutes and to let the business know that a tablet was added. Sonorch keeps a record of the paired tablet and a scrambled copy of the key it connects with.
• Removing a tablet. In the Sonorch register, open Settings and select Remove next to the tablet under Devices. The tablet is disconnected at once, and it forgets its key the next time it is used.

What the kiosk does not do

The kiosk app contains no advertising, analytics, attribution, or crash-reporting code, and no advertising identifier. The kiosk does not track you: nothing it collects is linked with information from other companies for advertising, and nothing is shared with data brokers or sold. It does not use location, contacts, photos, or files, and it never creates an account for a guest.

Deleting kiosk information

To have a check-in or your client record removed, ask the salon, since the client list belongs to the salon. You can also email contact@sonorch.ai: we pass the request to the salon and act on its instructions. See the Data Deletion Instructions.

Text messages

Businesses that use Sonorch text their customers from the business's own phone number. Lumoras sends those texts for the business through Telnyx, our messaging provider.

• What is sent. Texts about a visit the customer arranged: appointment confirmations (which may include a map link to the business), reminders, notices that an appointment was changed or cancelled, booking verification codes, receipts the customer asks for at the counter (which may include a link to review the business), and replies from the business's staff. Offers and news from the business are sent only to customers who separately agreed to receive them, by ticking the marketing box when they booked or by replying YES to the text that asks.
• How you agree. Giving your phone number to a business when you book online, book by phone, or visit the front desk is agreement to texts about your appointments. Agreeing to offers and news is a separate choice and is never a condition of buying anything.
• Frequency and cost. How many texts you receive depends on your bookings and the business. Message and data rates may apply.
• Stopping. Reply STOP to any text to stop texts from that business, or HELP for help. Reply START to receive them again. You can also email contact@sonorch.ai.
• Your number is not shared for marketing. Mobile phone numbers and text-message consent are never sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes. The information collected when you agree to receive texts, and the record of that agreement, is not shared with any third party except the providers that deliver the messages, such as Telnyx and the mobile carriers.

The text message terms set out the same program in full.

Service providers and business customers

Sonorch uses service providers for infrastructure, telephony, real-time media, speech processing, AI processing, email delivery, scheduling integrations, card payments, and billing. Information is provided to those services only as needed for the configured workflow. Text-message opt-in information and consent are not shared with any third party for marketing, as described under Text messages. The website's analytics, advertising, and referral tools are described under Cookies, analytics, and advertising. A business customer can also access information associated with its own account, clients, callers, appointments, kiosk check-ins, and call activity.

Cookies, analytics, and advertising

The Sonorch website, sonorch.ai, uses these third-party tools on every page:

• Google Analytics, to count visits and see which pages people find useful.
• Meta Pixel and TikTok Pixel, to measure how well our ads on Facebook, Instagram, and TikTok work and to help those platforms decide who sees them.
• Reditus, which runs our referral program. It counts visits, and when you arrive through a partner's link it sets a cookie so the partner can be credited if you sign up.

These tools set cookies or similar identifiers in your browser and receive information about your visit, such as the pages you view, your browser and device, your IP address, and whether you sent one of our forms or tapped our phone number. Each provider handles that information under its own privacy policy.

The Sonorch dashboard at app.sonorch.ai loads Reditus too. When you create a business account, the email address you sign up with is sent to Reditus so that a referral can be credited, and the dashboard's referral program identifies you to Reditus by your Sonorch account ID.

The website also remembers whether you chose the light or dark theme, in your own browser. The Sonorch register and Sonorch Kiosk apps use none of these tools.

Your choices. You can block or delete cookies in your browser's settings, install the Google Analytics opt-out add-on, and manage ad preferences in your Facebook, Instagram, and TikTok settings. The website works with these tools blocked.

Retention and deletion

Voice-service retention can depend on the business customer's configured retention period, operational needs, and applicable requirements. Sonorch can delete a customer workspace and its related records. When a business closes its Sonorch point-of-sale account, Sonorch keeps its records, including its client list, kiosk check-ins, and the sales, payment, and tax records it is required to hold, so that the business can be reopened as it was left; the business can ask us to delete records the law does not require us to keep. To request access, correction, or deletion, contact Sonorch using the address below; some requests may need to be directed through the business that configured the voice service or the kiosk. For connected social accounts, the register, and the kiosk, see the Data Deletion Instructions.

Security

Sonorch uses tenant-scoped data access, sanitized operational logging, provider verification, and scoped integrations. No system can promise absolute security. Current controls are described on the Security & Data page.

Children

Sonorch is a business service and is not directed to children. Businesses using Sonorch are responsible for configuring their services and call flows for their audience and legal obligations.

Changes to this notice

Sonorch may update this notice as the service changes. The effective date above identifies the current published version.

Contact

This service is provided by Lumoras LLC. Email privacy and data questions to contact@sonorch.ai or use the contact form.