| Provider | Purpose | Potential data | Status |
|---|---|---|---|
| Supabase | Authentication and related cloud functions | Account, identifiers and technical data | In use |
| Google Gemini | Supported AI workflows | Prompt text and minimum feature context | Feature-dependent |
| OpenAI | Supported AI workflows and text processing | Prompt text and minimum feature context | Feature-dependent |
| Telegram | Login, notifications and messaging | Telegram ID, name and message data | When connected |
| Resend / SMTP provider | Service email | Email, name and service-message content | When sent |
| Postiz and social platforms | Publishing LUO marketing content | Corporate-channel content | No salon CRM data |
Data minimisation
Only information required for a selected operation is transferred. Medical information, payment credentials and unrelated personal data should not be placed in free-text AI prompts. New providers are assessed for purpose, access, retention, deletion and international-transfer mechanism.
Questions or objections
Email support@luoapp.space. Where a provider change materially affects salon-data processing, LUO posts an update before processing begins where practicable.