Lola by Rank First Labs
Privacy Policy
This policy explains what information Lola collects, why we collect it, who we share it with, and how you can see, change or delete it.
Last updated: October 30, 2026
1. Who we are
Lola is a service of Rank First Labs Ltd, a company registered in Limassol, Cyprus (company number HE 494678). We build websites and run Google Business Profiles, content and online reviews for home service and trade businesses in the United States.
In this policy, "we", "us" and "Lola" mean Rank First Labs Ltd. "You" means anyone who visits startlola.com, fills in one of our forms, answers one of our ads, or uses our service.
When we run Lola for a business, we handle its customers' data for that business, as its service provider. The terms we follow when we handle their customers' data are in section 18 of our Terms of Service ("Your customers' data").
2. What we collect
Information you give us
- Contact details such as your name, email address, phone number and business name, when you sign up on our website or fill in a lead form on Facebook or Instagram.
- Business information you share with us, such as your trade, licenses, service areas, team members, the jobs you want more of, and answers to Lola's interview questions.
- Photos and videos of your work that you send us to use on your website and Google profile.
- Messages you send us by email, phone or WhatsApp.
- Billing details when you become a client. Payments are handled by our payment provider; we do not store full card numbers.
Information we receive from others
- Meta (Facebook and Instagram): when you submit a lead form in one of our ads, Meta passes us the answers you entered, such as your name, email and phone number.
- Access you grant us: when you are a client and give us access to your website, domain or Google Business Profile, we see the information in those accounts to do our work.
Information collected automatically
- Basic technical data when you visit startlola.com, such as pages visited, browser type, device and approximate location, as described in Cookies and analytics.
3. How we use it
- To reply to you, call you back, and send the free visibility audit you asked for.
- To provide our service: build and run your website, Google profile, content and review replies.
- To send you emails about Lola (see Emails from us), and text messages if you opted in (see Text messages).
- To bill you and keep accounting records.
- To improve our website, ads and service.
- To meet legal obligations and protect our rights.
We do not sell your personal information.
AI and de-identified learnings
- Lola uses third-party AI models through business APIs: currently Anthropic's Claude to write content, replies and summaries, and OpenAI for image prompts, client photos and, once call tracking is live, call recordings for transcripts. Under their business terms, these providers do not train their models on data sent through their APIs by default.
- We do not train AI models on your data or your customers' data.
- Lola keeps de-identified learnings: patterns across businesses, such as the questions customers ask in a trade and city and what worked in search. They contain no names, phone numbers, email addresses or street addresses, are not linked to any client or customer, and are stored separately.
- We never sell data, and we never publish one client's content or data on another client's pages.
4. Emails from us
If you sign up on our website or through one of our ads, we may send you a short series of emails about your free audit and about Lola. Clients also receive emails about their setup and service.
Every marketing email has an unsubscribe link at the bottom. One click stops all further marketing emails. You can also reply to any email or write to hello@startlola.com and we will stop.
5. Text messages (SMS and WhatsApp)
Our forms have two separate, optional boxes, and neither is ticked for you:
- Service texts: texts from "Lola by Rank First Labs" about your request, your booked calls and your Lola account.
- Marketing texts: occasional offers and pricing updates.
You can tick one, both or neither. We also text you if you text START to our number. Ticking a box is optional and is not a condition of any purchase. We record each consent with the exact wording, time, page and IP address, and we record every opt-out.
Message frequency varies. Message and data rates may apply. Reply STOP at any time to stop all texts; you will get one confirmation and nothing more. Reply HELP for help, or write to hello@startlola.com. Carriers are not liable for delayed or undelivered messages.
We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, except the service providers that deliver our messages on our behalf.
Texts for our clients. When Lola texts a client's customers, the texts go in the client's name, under the client's own texting registration, only with the consent those customers gave, and STOP always works.
WhatsApp. We may message clients on WhatsApp (for example lead alerts and approvals) through Twilio, using Meta's WhatsApp Business Platform.
6. Who we share it with
We never sell personal information. We share it only with the service providers below, who help us run Lola, under contracts that limit their use to providing their service to us, and only as much as they need.
| Provider | What it receives | What for | Where |
|---|---|---|---|
| Twilio | For a client's texting registration with US carriers: the business's legal name, EIN, business address, contact person and sample messages. Phone numbers, the text of texts and WhatsApp messages, delivery status, opt-in and opt-out status (and, once call tracking is live, call records and recordings until they are transcribed) | Texts, WhatsApp, phone numbers and calls | United States |
| Through the Google accounts a client connects: the client's Business Profile (business details, posts, photos, review replies), Search Console data, and the report files Lola creates in Sheets and Drive. Through Google Workspace: our own email and files. Through Google Analytics: website visit data, only with your analytics cookie consent | Running the client's Google profile, reports, our email, website analytics | United States and other countries | |
| Anthropic | The text Lola needs to write or summarize: business details, page and post drafts, reviews to answer, lead messages. Never payment details | AI writing, replies and summaries | United States |
| OpenAI | Image prompts; photos clients send us; once call tracking is live, call recordings for transcription. Never payment details | Images, photo processing, call transcripts | United States |
| Zernio | Social post text, photos and videos, posting times, and access to the social accounts a client connects | Publishing social posts | Spain (EU) |
| Resend | Email addresses, names and the content of the emails Lola sends (lead alerts, reports, sign-in emails) | Sending email | United States |
| DataForSEO | Search terms, cities, business names and website addresses. No personal data about anyone's customers | Checking how businesses show up in Google search and in AI answers. To check AI answers, search questions are sent to AI assistants such as ChatGPT, Gemini, Perplexity and Google AI Mode. No personal data is sent | Estonia (EU) |
| Backblaze | Daily backup copies of our databases, encrypted with our own key before they leave our server, so Backblaze cannot read them | Off-site backups | United States |
| Stripe | Client billing details and card payments (we never see or store full card numbers) | Payments | Ireland and United States |
| Our hosting provider | All data in the Lola app and on startlola.com, stored on our servers | Running the website, the Lola app and databases | United States |
| Microsoft (Clarity) | How pages on startlola.com are used: clicks, scrolling and page views, with form fields hidden. Only with your analytics cookie consent | Seeing how the website is used, to improve it | United States |
| Meta (Facebook, Instagram, WhatsApp) | Answers from lead forms in our ads or that a client connects; WhatsApp message content and phone numbers (through Twilio); with your marketing cookie consent, visit data from the Meta Pixel | Lead forms, messages, measuring our ads | United States and other countries |
We tell clients before adding a new provider that handles their customers' data.
We may also share information with professional advisers, with authorities when the law requires it, to protect our rights, or with a buyer of the Lola business (with notice).
Some of these providers are located outside your country, including in the United States and the European Union. Where required, we use contracts that protect your information when it moves between countries.
6a. Information from Google
Lola's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use Google data only to provide the features the client asked for (managing their Business Profile, reports, Search Console insights). We do not sell it, do not use it for advertising, and do not use it to develop, improve or train generalized AI or machine learning models. People at Lola read it only with the client's permission, for security, or when the law requires.
A client can disconnect Google at any time in the Lola portal or at myaccount.google.com/permissions.
7. Cookies and analytics
startlola.com uses cookies to keep the site working and, only if you agree, to measure visits and our ads. When you first visit, a banner lets you choose: Reject all, Accept all, or Choose what to allow (necessary, analytics, marketing). Until you choose, only necessary cookies are used.
We keep your choice for 12 months in the lola_consent cookie. You can change it anytime with the Cookie settings link in the footer of every page. If your browser sends a Global Privacy Control signal, we treat it as an opt-out and keep marketing cookies off.
| Cookie | Type | What it does | Set by | Kept for |
|---|---|---|---|---|
lola_consent | Necessary | Remembers your cookie choice | Lola | 12 months |
wordpress_*, wp-settings-* | Necessary | Keeps our own team signed in to the site. Not set for visitors | Lola | Session to 1 year |
_ga, _ga_EXC28E2V2C | Analytics | Google Analytics: counts visits, pages and where visitors came from. Loads only after you allow analytics cookies | Up to 2 years | |
_clck, _clsk | Analytics | Microsoft Clarity: shows how pages are used (clicks and scrolling), with form fields hidden. Loads only after you allow analytics cookies | Microsoft | 1 day to 1 year |
_fbp, _fbc | Marketing | Meta Pixel: measures visits that come from our ads. Loads only after you allow marketing cookies | Meta | 90 days |
If we add another analytics or ads tool, it will load only after you allow that type of cookie, and we will add it to this table.
Videos. Our help videos and the video on our home page come from YouTube. They play from youtube-nocookie.com and load only when you press play. Once you press play, YouTube (Google) may set its own cookies and receive your IP address, under Google's privacy policy.
You can also block or delete cookies in your browser settings; some parts of the site may then not work as expected.
8. How long we keep it
- Leads who do not become clients: up to 24 months after our last contact, or until you ask us to delete it.
- Clients: for as long as you use Lola, and afterwards as long as needed for accounting, tax and legal reasons.
- Unsubscribes: we keep your email address or phone number on a do-not-contact list so we never email or text you by mistake.
9. Your rights
Depending on where you live, you may have the right to:
- see the personal information we hold about you;
- correct it if it is wrong;
- ask us to delete it;
- object to or limit how we use it, including for marketing;
- receive a copy in a common format;
- withdraw your consent at any time: reply STOP to texts, use the unsubscribe link in emails, or use Cookie settings for cookies.
Residents of California and other US states with privacy laws have similar rights, and we will not treat you differently for using them. Because we are a Cyprus company, you may also complain to the Cyprus Commissioner for Personal Data Protection.
To use any of these rights, write to hello@startlola.com. We reply within 30 days.
10. Deleting your data
You can ask us to delete all personal information we hold about you at any time, including information we received from a Facebook or Instagram lead form.
- Email hello@startlola.com with the subject "Delete my data".
- Include the email address or phone number you gave us, so we can find your records.
- We delete your information within 30 days and confirm by email.
We may keep the minimum we must keep by law, such as invoices for existing clients, and your email address on our do-not-email list.
Ask us to delete my data11. Security
We protect your information with access controls, encrypted connections, and by giving access only to team members and providers who need it. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you as the law requires.
12. Children
Lola is a service for businesses. It is not meant for anyone under 18, and we do not knowingly collect information from children.
13. Changes and contact
We may update this policy from time to time. The date at the top shows the latest version, and we will tell clients about important changes by email.
Questions? Write to hello@startlola.com.
Rank First Labs Ltd, Limassol, Cyprus, company number HE 494678.